last executing test programs:

2.268835256s ago: executing program 0 (id=394):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000380)={{0x6, @default, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0xfffbffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async)
connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0xfffbffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
listen(r2, 0x1ad72f7) (async)
listen(r2, 0x1ad72f7)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000500)={0x0, 0x1, 0x6, @broadcast}, 0x10)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
socket$inet_tcp(0x2, 0x1, 0x0)
close(0x4) (async)
close(0x4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003d0000000e0001006e657464657673696d0000000f000200856574645d7673696d3000000800820000000000"], 0x3c}}, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)={0x90, r7, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xb}, {0x8, 0x13, 0xff}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x9}, {0x5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040090}, 0x0)
write(r1, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) (async)
write(r1, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24)
socket$packet(0x11, 0x2, 0x300) (async)
r8 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r8, 0x107, 0x9, 0x0, &(0x7f0000000040))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x6, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) (async)
write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
mmap(&(0x7f00006b9000/0x4000)=nil, 0x4000, 0x4, 0x12, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', <r10=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r10, 0x1bc60, 0x1a704}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x54}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x3}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x5}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x7}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)

2.149109678s ago: executing program 0 (id=396):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.swap.events\x00', 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000004204595868d06d7fbd7000fcdbdf2500000000dada5d42ddb36c5d40a8ce03aa63dab6d4e1b5d47e249bc0b799e65f8c2a67d1f4cee7b63bf423bf9611e907d60ea778aab4"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x85) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000005c0), 0x10) (async)
sendmsg$can_bcm(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f0000000340)={0x5, 0x400, 0x0, {0x77359400}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "25f058072f3966d6"}}, 0x48}}, 0x0) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e21, @multicast2}, 0x10) (async)
bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) (async)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$inet(r4, &(0x7f00000190c0)=[{{0x0, 0x0, &(0x7f0000019100)=[{&(0x7f0000000080)="4b979fc5100000dd46b001", 0xb}, {&(0x7f0000000180)="e3", 0x1}], 0x2}}], 0x1, 0x24008804)
shutdown(r4, 0x0) (async)
ioctl$sock_proto_private(r4, 0x89e4, &(0x7f0000000400)="f939fe8c7a00a2523f126fa86efbb4bbfdc64cdc027285c1929ff2be1b25916a19a4d43ad91197928bfc5947afc1933d79b0df65a289f039234f63937476e7541858dfa3601c070336388573c70f4f6bb236d3f99e09077541e61dbbd610b5962ba2208aec734d32f3b6f1bccfaaf649b6682380339a049c4da4864c2426156c176523d6898f026ee94e160491b3f6dd264c99e9503792390f7075d22da40d0f80e9f4121351f04b44ea9cedaae1b64b56f336629c1d92560c9ce63c7b3bd32d6b3742b052237476baab318ba86f") (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000005c0))
sendmmsg$alg(r4, &(0x7f0000003b80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}], 0x1, 0x4010) (async)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_proto_private(r5, 0x891a, &(0x7f0000000580)="d8990ef9b33a26")

2.000096623s ago: executing program 0 (id=400):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x18}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
socket$key(0xf, 0x3, 0x2)
bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local}, 0x14)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x118}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000004180)='kfree\x00', r4}, 0x18)
r5 = socket(0x2, 0x5, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000180)={0x3c, r7, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x24, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x11, 0x12b, 0x0, 0x0, @binary="461dc071caf2d43500d1f6c8a6"}]}, 0x24}], 0x1}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58010000100013042821fa9e0238bd70000000000064010101000000000000000000000000ac1e0101000000000000000000000000000000004e2400040200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000000000000000000000000100000000320000000a0101000000000000000000000000000400000000000000070000000000000000000000000000000400000000004000fffffffffffffffffeffffffffffffff7f00000000000000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f600000000000000000000000000000000000000020001fe000000000000000067001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d8000000400000006fc3070b4f8f7330202b93875f2d67a6a77871db764ec62c9599d200", @ANYRES32=r2, @ANYRESHEX=r0, @ANYRESOCT=r2], 0x158}}, 0x800)

1.859459671s ago: executing program 0 (id=403):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB='-', @ANYRESOCT=r2], 0x9)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@rand_addr=0x64010102, @local}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000380)={0x1f, 0x2, 0x4}, 0x6)
bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
pipe(&(0x7f0000000040)={<r5=>0xffffffffffffffff})
ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0xbc8)
readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002ec0)={r5, 0x0, 0x0, 0xacbc18eb4b9e2c10}, 0x20)
sendmmsg$inet(r3, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="cb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="463fa56163dd", 0x6}], 0x1}}], 0x2, 0x4000000)
getsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000280)=0x4)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000002c0)='veth1_to_bridge\x00', 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x2c, &(0x7f0000000480)=[@in6={0xa, 0x4e24, 0x0, @loopback, 0x1}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000280)=0x10)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r9=>0x0}, &(0x7f0000000200)=0x8)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000080)={0x5, 0xc, 0x9, 0x8, 0x8, 0xd85, 0x1, 0x1, r9}, &(0x7f0000000340)=0x20)
setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4)

1.690871257s ago: executing program 0 (id=407):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=<r1=>r0], 0x7c}}, 0x0) (async, rerun: 64)
r2 = socket(0x40000000015, 0x5, 0x0) (rerun: 64)
connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e24, 0x20f, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1ff}, 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0)
writev(r0, &(0x7f0000000040), 0x2)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
bind$tipc(r3, 0x0, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r6=>0x0}) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r8, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) (async)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c000000933da5451a14ff873d4322be673cc9eed1f2f05bfedcd555cbd8b74ee89cef4a35c3a55a361c9c3ab2c2592e8e5abdfeaf416e1add8618e2bc24774b193d9316fc0bccd1727da5ea65ee96987b0033a8b0ebe0c172d2c55866fe549ef97157e7e14d453f52b8faeffd0ed102b703051f873128caa7d2db86ac2f632737c57a04559fc859aa78439bf1b46612da573ec842f039271257a00fe7bed7c74aeb187d4d038f3b55f31630dc40f1940441d0cd9a97aa928e7ce7c0aff37318", @ANYRES16=r5, @ANYBLOB="01000f00000005002eff0100000005002f0000000000080003000000000000000000", @ANYRES32=r6, @ANYRESDEC=r4], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (async)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r9, 0x28, 0x1, &(0x7f0000000240)=0x1c00000000000000, 0x8) (async, rerun: 32)
connect$vsock_stream(r9, &(0x7f0000001c80)={0x28, 0x0, 0x2710, @local}, 0x10) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
close(r0)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="780200002400010026bd7000fedbdf25670200800c00010002"], 0x278}], 0x1}, 0x0) (async)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x13fd4c68, 0x9, 0x8001, 0x8, 0x7fffffff})

1.629260692s ago: executing program 0 (id=410):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400"/20, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB='\x00'/28], 0x48)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000980)=[{&(0x7f0000000080)="d80000001e0001054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a50254cca9e00360db798262f3d40fad95667e006dcdff11a49b1328d9dd74977efd563951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a9295", 0xd8}], 0x1}, 0x4008850)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
getpeername$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @empty}, &(0x7f0000000480)=0x10)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @empty}]}}}]}, 0x4c}}, 0x8000)
connect$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x2, 0x2}, 0xfffffffffffffcf1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x4, 0x8, 0xdd, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r3], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r4}, &(0x7f0000000980), &(0x7f00000009c0)=r3}, 0x20)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x48, 0x7, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}]}, 0x48}}, 0x20008801)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r6, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000340)=""/169, 0xa9}], 0x1}, 0x1}], 0x1, 0x832b, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r7, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r7, &(0x7f0000001500)="0d0ad7c36d6617", 0x7, 0x6d91fb6102d8990d, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
nanosleep(0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r4, &(0x7f0000000680), 0x0}, 0x20)
bind$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1}, 0xc)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000180)={r0})
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000000000), 0x4)

888.19186ms ago: executing program 1 (id=418):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
socket(0xf, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000524e1d0100030000004a81f23a4b314a000b00", @ANYRES64=r0], 0x20}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0)

887.389706ms ago: executing program 2 (id=419):
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_prespec={0x44, 0x4, 0x15, 0x3, 0xd}]}}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
syz_emit_ethernet(0x6a, &(0x7f00000007c0)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local, {[@cipso={0x86, 0x10, 0x0, [{0x0, 0x4, "b29a"}, {0x0, 0x6, "ff8f5896"}]}, @generic={0x44, 0x11, "77bf39dad417f1bc03a7c2d4017b8a"}, @cipso={0x86, 0x8, 0x2, [{0x6, 0x2}]}]}}}}}}}, 0x0)
r0 = socket(0xd, 0x88dc87041b44c140, 0x0)
shutdown(r0, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="6d6ff16901641101fe88000000000000000000000000000100000000000000000000ffff0a010102081e0000000000000401dac2f115138f95319f4d4b947bc1c4"], 0x18c)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
r2 = socket(0x28, 0x5, 0x0)
getsockopt(r2, 0x28, 0x8, 0x0, &(0x7f0000000040))
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r3=>0x0, 0x3, 0x9, 0x8001, 0x5, 0x1f1}, &(0x7f0000000040)=0x14)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000080)={r3, @in={{0x2, 0x4e23, @multicast2}}}, 0x84)

818.348529ms ago: executing program 2 (id=420):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311", 0x3d}], 0x1}], 0x1, 0x40)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000540)=0x1)
recvmmsg(0xffffffffffffffff, &(0x7f0000011f40)=[{{&(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000011780)=""/235, 0xeb}, 0x4}, {{&(0x7f0000011880)=@can, 0xfffffffffffffcf9, &(0x7f0000000900)=[{&(0x7f0000000580)=""/4, 0x4}, {&(0x7f0000011ac0)=""/231, 0xe7}, {&(0x7f0000011900)=""/96, 0xfffffffffffffc52}], 0x3, &(0x7f0000011bc0)=""/43, 0x2b}, 0xb9e6}, {{&(0x7f0000011c00)=@ax25={{0x3, @netrom}, [@netrom, @bcast, @netrom, @default, @rose, @default, @rose, @netrom]}, 0x80, &(0x7f0000011f00)=[{&(0x7f0000011c80)=""/85, 0x55}, {&(0x7f0000011d00)=""/248, 0xf8}, {&(0x7f0000011e00)=""/236, 0xec}], 0x3}, 0x9}], 0x3, 0x142, 0x0)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
sendmmsg$sock(r3, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000)
ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000000980)={0xa72, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0xfffffffe}, 0x1c)
ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, &(0x7f0000000040))
setsockopt$MRT_DEL_MFC(r5, 0x0, 0xcd, &(0x7f0000000100)={@empty, @local, 0x1, "1f20c87e2b78e1c123a676e0bc24cdeccfea8edf38578e350959bfb1a9115b54", 0x8aa, 0x2, 0x7, 0x3ff}, 0x3c)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000011a00)=@bpf_ext={0x1c, 0xf, &(0x7f0000011500)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x1000, 0xa2, &(0x7f0000011580)=""/162, 0x40f00, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000011640)={0xe6d4, 0x2}, 0x8, 0x10, &(0x7f0000011680)={0x3, 0xa, 0x6, 0x3}, 0x10, 0x2bed2, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000011980)=[{0x2, 0x5, 0x7, 0xa}, {0x3, 0x5, 0xd}, {0x3, 0x2, 0x3, 0xa}, {0x5, 0x1, 0xc, 0x7}, {0x6, 0x1, 0x9, 0x3}, {0x3, 0x3, 0xb, 0xa}, {0x2, 0x3, 0x2, 0x14}, {0x4, 0xfffffffe, 0x7, 0x6}], 0x10, 0x4000ffff}, 0x94)
recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000010440)=""/4096, 0x1000}, {&(0x7f00000116c0)=""/183, 0xb7}], 0x3, &(0x7f00000004c0)=""/2, 0x2}, 0x1)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40400d0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
syz_emit_ethernet(0x82, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400483a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000005006050835900000000fc010000000000000000000000000000ff0100000000000000000000000000013a01000000000000070800000000000080fe00000000"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000011440)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x2, r6, 0x100}, 0xc)

465.742635ms ago: executing program 2 (id=421):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0x54, 0x21, 0x1, 0x70bd2a, 0x25dfdbfc, {{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x4}]}, 0x54}}, 0x4000081)

465.428786ms ago: executing program 1 (id=422):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r5=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x7}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x4004010)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0xe}, {}, {0xb, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4c, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x2a}, @TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x4b3, 0x3, 0x1, {0x4, 0x0, 0xffe7, 0x9, 0x6}, {0x3, 0x1, 0x100, 0x8, 0x9, 0x7}, 0x9, 0x5, 0x4}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x4040010)

391.044851ms ago: executing program 2 (id=423):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) (async)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94)
r2 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x83cff000)
setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000300)=@dstopts={0x1, 0x11, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x24, 0x5, [0x2, 0x0, 0x2, 0x4, 0x9, 0xffffffff80000000, 0x49]}}, @calipso={0x7, 0x48, {0x3, 0x10, 0x7, 0x10, [0x100000001, 0x8, 0x5, 0xfffffffffffffff7, 0x5, 0x700, 0x1, 0x4]}}]}, 0x98) (async)
setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000300)=@dstopts={0x1, 0x11, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x24, 0x5, [0x2, 0x0, 0x2, 0x4, 0x9, 0xffffffff80000000, 0x49]}}, @calipso={0x7, 0x48, {0x3, 0x10, 0x7, 0x10, [0x100000001, 0x8, 0x5, 0xfffffffffffffff7, 0x5, 0x700, 0x1, 0x4]}}]}, 0x98)
r4 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r4, 0x1, 0x25, &(0x7f00000002c0)=r3, 0x4)
getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000080)={@local}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="000000de83"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="000000de83"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)

291.305091ms ago: executing program 2 (id=424):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @local, @val={@val={0x88a8, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ff690b", 0x48, 0x2f, 0xff, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x0, [0x79, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000040)=""/102, 0x66}, {&(0x7f0000000280)=""/78, 0x4e}, {&(0x7f0000001fc0)=""/4102, 0x1006}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000140)=""/53, 0x35}, {&(0x7f0000000540)=""/172, 0xac}, {&(0x7f0000000d00)=""/188, 0xbc}, {&(0x7f0000000880)=""/138, 0x8a}, {&(0x7f0000000ac0)=""/143, 0x8f}, {&(0x7f00000000c0)=""/65, 0x41}], 0xe}}], 0x1, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0xc0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d00010027bd700000000000030100800c0002"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x50bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x140}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x40)

290.331868ms ago: executing program 1 (id=425):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x3, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x502}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0xd, 0xc, &(0x7f0000002b80)=ANY=[@ANYBLOB="1800000002000000000000000000000018113f00", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001000fcff84000000590000009500000000000000"], &(0x7f0000002b40)='syzkaller\x00'}, 0x94)

183.724262ms ago: executing program 1 (id=426):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="d80000001e0001054e81f782060000000000000106007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a50254cca9e00360db798262f3d40fad95667e006dcdff11a49b1328d9dd74977efd563951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a9295", 0xd8}], 0x1}, 0x4008850)

183.304108ms ago: executing program 2 (id=427):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x1b, @local, 0x3}, 0x1c)
getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000100))

177.307907ms ago: executing program 1 (id=428):
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="3000000018000100000000000000000002000000fc0000090000000006001500020000000c00168008000240ac1f0001227f0b3baef2342c4a9ed544206fca3ebd8d78052ac8292744bd6d79225a3f4a9a8d7fa8ef6771d57e5adca76986b2caa3fde7c6696c13258f24325ca49fe7c43861d510e06f401980b35ea6bc32c49a"], 0x30}}, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async)
getsockopt(0xffffffffffffffff, 0x80000a, 0x2, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xffffffffffffffaf) (async)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)

0s ago: executing program 1 (id=429):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000002e40)='ns/mnt\x00')
ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000002e80)={{}, "b651acc2dccb8ccc3c7b3731bcc1f91d7c4fce818eab0c063390da7fcae26a03f667bac1091bb42a429bef4e563b704c3de19f6e4cb4e6ddb550c45d5157dea45c67f0c7067ed77b66486ef8ecd53123530c4578501554be2bd899aa46bfad8097ef1052458f6404e4a367500339ddcbda516f45409c955e1408d7099912ac09477ec6d93abbbbd6dc4d68c9efcf9bb4629e3b1f769415c9d41fdf9ae44aa29421b92289737005d026f7cbfb553d502e5d16d3e6ea69d1489284956289674953ea8e655af76c244c0f4264c42f154417cd186388deea9ff566180921b1b98688c4040bdba35ce61a2e9f8d6c2a644a5797c002f8b392d68723defa05641a0c02276ee241d7d81be483c1330ec72b68eb0a086a5ca62c53c5e77071bd6f775bfd0c3af959f467d6bebbe0b37e764b900f3b0cc543438bc5d1e1b7a324fab855fb69b608fbffb303f7fb8e3a0dc18207c7c36d84e07a46ad38fd79605b5bafc518180e384c574786a92222606ee7191d15d182b49549a1576a39e862ed966b10888edcfc40165675beb795aea9bec8e3057fc83d9f769540ac6e68878efbd32fc1440332dbd6ebd4e7c94f58b40109347f7c54e2f65b081299f79b2108b608fc4c8d3cca9fd96e9515565cc2b9dad8f40c7f738cfb26b90af94864ad0bc6749064ff035620c81191c48f21eb191494acea63fd50c106a3d431fdaefec46e6379850ab9ab09a27f3e09fec0a7b0c19850d705c53ce59d323479650e882a885c0937b878df62a798a0bcc57ec9afae28256f8e079ea454ba5e0186dade94646e0ee75327332ae32cb9957333696708d4140bcf6f1964933e62f1811c8e1cb127dcbe196f2f61ab0613e9b335aa1c1d54cd4267e68fc7f8644eb939fda12a50511c147d8b44beb1fdcb9a052936b82906b74e6a2e4b49f4fd342b0f7cf3ff009c6d3f6d6f8f441d4e10a7f5dc6174632cf682ce897c82f02ba900bf63f99f73ae8acc6f8da72885c00df73c5fec254193d3d69efc820a3c6eccaa1d2e655ccc86e13c8b454cc6b6e28fe747b12d9cdb6229f3033b22ccb5ddda65e46ebbd063b628cda38686c3310c73fb28c9aa5401be91d69cdea0967374c8d18d932231170beb3b656a203352c27e43bccad3b840cd73d7501c01be4d468d07d4cfa07a6834b1e9749ae342013ad58ca0134609f9aec6a5a7561fe6bdb9b4dd746d38ce8214d63b7ab2b0f03dae23e5b3b42b55481a12e6c783ccd68dffcbfa5924f21a937852da7c613f842fce220999ed7c1776e161572142ce874977cfad51a94d31717f02210472294afdf8f430ba4989b581076431adf14f0a8bca870e215538bc2329450e9007d6d3ca77d4cb221fd1e0b991c45c4f2423f0cadd2a46df9f4d8290521c62b39a3d9861b22d8440ccd72425af8c6004c9e5c35cf78ffd4fcf3f296f0a236df63516f8b889c4a4b43d23bcda9836a522867ce2cc44a66b964ad1615dfe0b1e13667d790509891e2d504dfd090c186baef26546ec5cbbc7a869d59a2cd03273daa63dcacfde0b1d28c0e8b40f141f14e6c45be9e5d56bd33b9fd8b46c7234d15e535fc266fbc2b29d1c1dfa67d2ebdc01b6974e23712788f33bdfb4b15251cb5fa7e6736e2dbb917922d4a043b8e8e1e11b05933f8dd0a9e47881e08684c8b47f546db2b3020c42e0bb105606858bd1901dd7bc885fe9764c48653bdc5ec67ea0dc53fb109eb33a43cc715511f16badf520cecf3719300ec9c3492232d5a641e793e2d4ee9677306f1657768948a08691fee4319696dd3c0134ccd7c092effacf940d02116c9f84dab143a355668df2f772b8072361898408addc966b6565a632caaf02a2d93be2ca836f12f430d4a91b9571bae8d2b3a74c93ac1984ea48a3b1fbb91c297b430379d506b0fc56c436aefc73f2a7aa43f08ce4904c6b37e2c29b6d888df658d0949ce6f3da73fd49d0affeead2362ecc5046c04e3505530e514722e9e910a2b5e452c6f41f822529a2e8616533bafc348f60199d3cd5f4a15c7bc45d06ce151a71bc2a827a8e4d296f0a9e3b2a6c67e081b0198a936bddc10583410e146bab449d2b789eae56ef448e016db3e0fadc990d5f35e705ce64cbe80e34a5fe9d5a23cafb45dbc003932dc783b61b2b4bbd43c8d9bd48c9f58b6aa4f8ba49e12a8ac698858be94edf25c39cec1f9e99cd987ac0d9126e67cd9b751ef9cd46837ef82daba3da8e96282fc1b4ca56bb79dfcd201a821705006510938844582ed36c1556f37324b7d1c8114a4d6c96bf1513b87993d2b9ff75ba20c3ba6cc5f52b7b6c4ef82dafa06ae4a2dc0448184f54d19cc367de6d4750d87e1c5c372c78efdcc04dfaa093be57411dbebc43ad69d546cc695d4e286121f0b4980448252b3411c6195d4f49cead51f4098821d7ae42db39e8561094dfefedc31e88c36a61a1262f1a7d9ecd13f16557b9c3bb1b903185933438d80b2c4f00a7bba435e8e0210eb56e133034d62abdb646ad0313c8e48b6e0307437d256144cc48ac1bf068cf2e58ff2384ea144e4e805cfbc2cf77d240140113e0ebc7c6aca6a364793f1baf3881d3bd8d4b68805838486a3ec89c7d9caf06f66fedfcc06bcf70a848ad2aa90f56fd9031d98e8e4906972487288ac469495158283ffc7764b80b1ae17a99d081b33d5445155c54dc4712bb2d25cd198d05f057a60a460ccf49490fcff81af22e0c7f8eea4e803c81ac2838f2a9e660c18f67998d4cad424289c170b8fdc992518acfe23354d85d77b4eb4700bc18d3de55b6a541e0953ae434b7a4f5a964a59baccd843c046f52ed3693cd87ad3d97d0f37f613eec03194574a901e5a404a1d33b7787ffcd2aae752a49a3069a1c9a1e4345cf2dce70ac1e5f13c271601996faa5dfc031c6f8b4af6e3c534b561bd4370edaaf3d0e7d802c1086e03cd0e3e27d85b12c8b7f991db5f134a4d12d1f158cd18e33f3745036e42420569fe4c63ad7bf79013b4aad00549996f45f63d97666521fd74d79a3831ab3aa8fdfd009b54f30e1d6e3118edb9c2755f73a80136669fc731767b37d29f051650b8873a84c11bab1943134a06f3b90fe14658a71f9bf4e2701a5f04ee54d15356c91207c52761883dbbe441e76538dd72d077712dd4bcb1da29b32ca937d3b6f570df5e794402d4ee354e24a79ddc13900bc45fe35415e14acf1845447d10992cbfa009c19571ded1ff4fc4344370330edae4e7a4b6d3d98c5af60ee1b630e2e92c931cf2d6137a09518fc7bc2a028e7359920a2f5d0e2fcf05511b5e578cdf6ffbdacf84103518c787d5000e3d8e5d341fbcc016975b2bd8a37b7ce9ac57095698db24f2ecbfae5bf67ca9e0eed2bd1246a67c951a9dac6bd7e61acf1cd9c46b1e5c73207cf6676a3c262c7f10476ae6d5f56a24ac95044c2c2aad83a82408ccf3755304be73db90063cf33d66238bba4d425f044fb18b020812df50c3eac3946c190338050bdde58db337f98ebe439bc941be5e69cc770ab1bbabc822e5fa8b8a7a0489490881f63b8f887a6db90f69d7cda0f74993184f5ed9bee1ac326d108f8d7372c42c1ecfffa71c1d6f4f9418474e0605ea8bfb77b6ba23f86cef874e8ea77e1ccd53d1fcc1a87be65d04e562f4ee105ae8317dde275ae3660f657ccdddefdc53da29d6638f4c463a21c0c9a7eacfb44c83583b2ca64806a455781e7b9e6ff6ed5a5ed39bd57626644c40e149c04a94d6d7110c9128dd876bd6d01ed438484fec3f7889af88376155b6009f09108009c6916a916b3b23fe2f3028a56ea3d423920cf7a7dcf415bc88d2bb6e55efc566abc1d7671ad75b30618fa838f5a899a60c804751aec6b2e2e49a5d4a098a99a079ad36f942cd17eb7994b9673198d9ed135177e9e54bda99659aa8356e239ba06b29004a08616352277f7419c7f112527202f4bc5b6298e0a2aabc13a379269d1f77b69c292ef49570eeb2966d3a5f133d6762c9a75bf8a189213a5257b60fd552c97f3dfbbfee41a3ca140a56325367645dcd2fb32c4c02714212f578923dd33079cb64958bd490b34acaed7947e49149ce522a2a7c6a8c5a149886e9508614bdb123db2e81d457ec952f3a1ddcdd3d7aea511a5e20e099b16e555368664277acea5f379ef09385c8d295708ae3e0042a0bba2219404b323bbd9d5cc51b73facaed28d04b58710f68dfec12072114b8536b60335d87714c2f343cca7fac252eb09a2cb33984d1820fbe6eb868660dca2d6014a13568f9970bc10f903d26f30e89a865b4160ff95e3189937538d386906eeef4a0503564a0b84b0b3e670a5026a2238df6c46e41e9a48d6e507fcc8c5ea21b45ac29dc66ee143f225e6faef8bd8d09ee7d8b52f7c0d46f2bb5ecc1ba891e5b5b75697b3858af5cc98de223e34ab0f7661c7e8cdb2dbeb3af33850615a0975c889b544c97e20ff2eee334c75dfa7bd5c9c9d0e4a062e939abe71590de92e20193109cc70dbab4f17a822f0bfd3815bc682f31b904569926eb233158429641c6c0c2c6db36ddb789ac4d5b5a983c977236e6d86156ff87b3cc18fb2512514519b0c4a5c17ed55bb9c125d241b5eb9f6468015c3b1edd22ff430102b7ec116e3923dc4b60f63748005d67d8e86fd45b98017fec596728d724766e44115a951b815032b83bcc7230fcf7e964fe4a326246561f77ab75c620608400e6f0a05ca6e9852cbd77412683f1c777db197cf60be904986941c7e082dd9663e7499c0c0ef4f3c3c955ec6d5b7ca499e9887225a21e9553d6dcdd6fd82376818ef486555da5b3b17f176d7dc86ac752acab9325185de8a1ca58d218d0c2995c1d93da9b61eeaf6115d9862994139c039d1566216c514f9ed08b18a174d90bd0c472735185d2dc1b4b8dbb8598bc2c63c56f2b83001d3b564eab7bea28827715953febe20ae9ac616342eda114203ab5697149c01268f4ef468a196b7a7ae3df02bf7f30d5e07ec6324cd4d04b8852bb77453f890bcd70b2ccdef6cf19dd70d84bb8fc99d005ca2ac0378ba2d674714b89c80c257244619b8b393b25421d0eff0a79b69d9dd279a3a6f8f7950a5d3af3ad0c2f60f6c3acbeb19f0940e4f2aa2fdde8d39a66108a39f162d8c3b1826dd39aea4815a464b909d3b2b42de6fef1dd7d6018e114a6bee5993b7d95aad361dd9bdf1b2888ebac781fb101020b36bb471f290a45306dfa128e2136f6480310f8fb06416795406c2ac41d9a5a88bfd988d557ae748cb7c6a91a18e3c80e4e56ee04a7bd2458fbef5aa826bb6a3947efa169db1fb2df88a88f92e68d7bed1765abdce33a57b7c4b38d4603a5d6eab007504638042bd1b57991b64444de6ce50d12eaffe784ed3e0fb07f36936df736ab9403c9db714fcc80379e03bcae48b61acc22e3f5840c16fc928c17271356928d7c70ac29414f3309076d0a1e96df1332d130c0555601f5d3c5eeb5c61a945d6e3dbb891d8d9a1a9fe82fb7c64141326a73183dbd3f3267907683688bbfe837e0b1f4f57f53a6f49761359034e51aded856dbb7927b276ab636910f019e063ed448ce3c3bb2120e1869ff60d78503c2ae96509c2f062e34f663544611b9c3ee6708329702405c89142580b07af5d73d49b301478d5093121bad85e778bbfb74dfd5d28afd0ada0cbd5e6205a483d5009a9c5d0cf03810c83a62d8750f5e3e7663733fb78e9c465725c956dc2d39fa86c3a475ac69608d11445a2cdef5b9a768c5c1955e517d67c9495b4e3acc3c2a13aa70f32f4ceb9e7b22ded30"})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:13548' (ED25519) to the list of known hosts.
syzkaller login: [   48.261860][ T5816] cgroup: Unknown subsys name 'net'
[   48.349902][ T5816] cgroup: Unknown subsys name 'cpuset'
[   48.353730][ T5816] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.901902][ T5816] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.256646][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.260647][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.272129][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.274914][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.278816][ T5219] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.283502][ T5219] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.287448][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.291744][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.294645][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.297152][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.299722][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.305144][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.326487][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.331398][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.343545][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.605784][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   54.647692][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   54.724040][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   54.785704][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.788779][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.792031][ T5828] bridge_slave_0: entered allmulticast mode
[   54.797145][ T5828] bridge_slave_0: entered promiscuous mode
[   54.833255][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.836559][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.839142][ T5828] bridge_slave_1: entered allmulticast mode
[   54.841798][ T5828] bridge_slave_1: entered promiscuous mode
[   54.936908][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.940246][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.943369][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.946962][ T5832] bridge_slave_0: entered allmulticast mode
[   54.950803][ T5832] bridge_slave_0: entered promiscuous mode
[   54.955424][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.957798][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.960095][ T5835] bridge_slave_0: entered allmulticast mode
[   54.962846][ T5835] bridge_slave_0: entered promiscuous mode
[   54.967512][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.979889][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.982385][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.987052][ T5832] bridge_slave_1: entered allmulticast mode
[   54.990882][ T5832] bridge_slave_1: entered promiscuous mode
[   55.002355][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.005387][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.007880][ T5835] bridge_slave_1: entered allmulticast mode
[   55.010610][ T5835] bridge_slave_1: entered promiscuous mode
[   55.043325][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.057433][ T5828] team0: Port device team_slave_0 added
[   55.061635][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.075862][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.090816][ T5828] team0: Port device team_slave_1 added
[   55.094563][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.099447][ T5832] team0: Port device team_slave_0 added
[   55.119998][ T5832] team0: Port device team_slave_1 added
[   55.139775][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.142015][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.150673][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.172801][ T5835] team0: Port device team_slave_0 added
[   55.176206][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.178555][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.187546][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.191417][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.193686][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.202547][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.207938][ T5835] team0: Port device team_slave_1 added
[   55.210901][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.213125][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.221364][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.266257][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.269241][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.280379][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.319751][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.322697][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.334166][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.351026][ T5828] hsr_slave_0: entered promiscuous mode
[   55.355461][ T5828] hsr_slave_1: entered promiscuous mode
[   55.367665][ T5832] hsr_slave_0: entered promiscuous mode
[   55.370023][ T5832] hsr_slave_1: entered promiscuous mode
[   55.372155][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.375388][ T5832] Cannot create hsr debugfs directory
[   55.456010][ T5835] hsr_slave_0: entered promiscuous mode
[   55.459000][ T5835] hsr_slave_1: entered promiscuous mode
[   55.461635][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.464348][ T5835] Cannot create hsr debugfs directory
[   55.690391][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.699467][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.710703][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.720560][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.750853][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.756003][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.774463][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.789620][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.844499][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.853209][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.864240][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.871091][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.960024][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.995414][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   56.003767][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.024900][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.028131][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.041286][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   56.054553][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.057570][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.067152][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.070168][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.087468][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.089825][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.098372][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.147067][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   56.163172][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.166274][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.179618][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.182819][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.239242][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.339002][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.379654][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.385572][ T5219] Bluetooth: hci2: command tx timeout
[   56.385768][ T5833] Bluetooth: hci0: command tx timeout
[   56.395431][ T5833] Bluetooth: hci1: command tx timeout
[   56.408671][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.438078][ T5835] veth0_vlan: entered promiscuous mode
[   56.444483][ T5828] veth0_vlan: entered promiscuous mode
[   56.456043][ T5835] veth1_vlan: entered promiscuous mode
[   56.470777][ T5828] veth1_vlan: entered promiscuous mode
[   56.491259][ T5832] veth0_vlan: entered promiscuous mode
[   56.508800][ T5835] veth0_macvtap: entered promiscuous mode
[   56.514052][ T5835] veth1_macvtap: entered promiscuous mode
[   56.530096][ T5832] veth1_vlan: entered promiscuous mode
[   56.536794][ T5828] veth0_macvtap: entered promiscuous mode
[   56.552394][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.558435][ T5828] veth1_macvtap: entered promiscuous mode
[   56.570093][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.582936][ T5860] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.587248][ T5860] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.590105][ T5860] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.592995][ T5860] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.610970][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.628828][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.632231][ T5832] veth0_macvtap: entered promiscuous mode
[   56.656119][ T5832] veth1_macvtap: entered promiscuous mode
[   56.670447][ T5701] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.696375][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.699591][ T5701] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.714645][ T5701] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.720411][ T5701] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.732271][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.743192][ T5701] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.747310][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.753920][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.763370][ T5701] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.769315][ T5701] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.780278][ T5701] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.842811][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.850193][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.873819][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.887703][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.910841][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.914099][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.956959][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.962175][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.969265][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.969855][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.977757][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.099992][ T5899] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET)
[   57.116135][ T5901] xt_connbytes: Forcing CT accounting to be enabled
[   57.137267][ T5897] gretap0: entered promiscuous mode
[   57.139256][ T5897] macsec1: entered promiscuous mode
[   57.142950][ T5901] xt_CT: No such helper "syz0"
[   57.146988][ T5899] Zero length message leads to an empty skb
[   57.251629][ T5910] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   57.306171][ T5914] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.306735][ T5912] netlink: 'syz.2.7': attribute type 1 has an invalid length.
[   57.313450][ T5912] netlink: 184 bytes leftover after parsing attributes in process `syz.2.7'.
[   57.317495][ T5912] netlink: 'syz.2.7': attribute type 1 has an invalid length.
[   57.323899][ T5912] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7'.
[   57.419026][ T5919] pim6reg1: entered promiscuous mode
[   57.421384][ T5919] pim6reg1: entered allmulticast mode
[   57.482247][ T5925] netlink: 136 bytes leftover after parsing attributes in process `syz.2.10'.
[   57.485329][ T5925] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   57.630431][ T5932] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12'.
[   57.639426][ T5932] netlink: 'syz.0.12': attribute type 1 has an invalid length.
[   57.695377][ T5933] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12'.
[   58.305228][ T5944] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   58.431276][ T5952] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   58.439853][ T5954] ip6tnl1: entered promiscuous mode
[   58.443204][ T5954] ip6tnl1: entered allmulticast mode
[   58.465405][ T5833] Bluetooth: hci1: command tx timeout
[   58.465538][ T5219] Bluetooth: hci2: command tx timeout
[   58.467527][ T5833] Bluetooth: hci0: command tx timeout
[   58.476929][ T5949] dvmrp8: entered allmulticast mode
[   58.485661][ T5946] dvmrp8: left allmulticast mode
[   58.572028][ T5958] syz.0.20 uses old SIOCAX25GETINFO
[   58.582338][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'.
[   58.675974][ T5965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22'.
[   58.711835][ T5968] netlink: 'syz.1.23': attribute type 1 has an invalid length.
[   58.757954][ T5971] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   58.864426][ T5979] netlink: 134820 bytes leftover after parsing attributes in process `syz.0.26'.
[   58.872682][ T5979] netlink: 'syz.0.26': attribute type 1 has an invalid length.
[   58.938442][ T5982] Bluetooth: MGMT ver 1.23
[   59.104333][ T6004] warning: `syz.0.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.206984][ T6010] tipc: Enabling of bearer <et:g> rejected, media not registered
[   59.211594][ T6010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.34'.
[   59.217964][ T6010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.34'.
[   59.304796][ T6014] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   59.309864][ T6014] Cannot find add_set index 0 as target
[   59.470229][ T6022] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.107965][ T6041] netlink: 'syz.2.46': attribute type 6 has an invalid length.
[   60.175925][ T6043] bridge0: port 3(erspan0) entered blocking state
[   60.179070][ T6043] bridge0: port 3(erspan0) entered disabled state
[   60.181839][ T6043] erspan0: entered allmulticast mode
[   60.189933][ T6043] erspan0: entered promiscuous mode
[   60.223557][ T6042] delete_channel: no stack
[   60.432928][ T6055] netlink: 'syz.0.52': attribute type 12 has an invalid length.
[   60.438228][ T6055] netlink: 'syz.0.52': attribute type 11 has an invalid length.
[   60.546822][ T5833] Bluetooth: hci0: command tx timeout
[   60.546858][ T5839] Bluetooth: hci2: command tx timeout
[   60.548712][ T5833] Bluetooth: hci1: command tx timeout
[   60.961889][ T6079] dvmrp1: entered allmulticast mode
[   60.968326][ T6079] dvmrp1: left allmulticast mode
[   61.039963][ T6081] netlink: 'syz.1.59': attribute type 12 has an invalid length.
[   61.342152][ T6104] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   61.359735][ T6106] ip6tnl1: entered promiscuous mode
[   61.361515][ T6106] ip6tnl1: entered allmulticast mode
[   61.400093][ T6111] netlink: 'syz.0.71': attribute type 26 has an invalid length.
[   61.600056][ T6127] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   61.651829][ T6134] xt_hashlimit: max too large, truncated to 1048576
[   61.654332][ T6134] Cannot find add_set index 3 as target
[   61.716621][ T6138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.740539][ T6140] team0: Port device netdevsim0 added
[   62.054168][ T6151] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component
[   62.624814][ T5833] Bluetooth: hci1: command tx timeout
[   62.624979][ T5839] Bluetooth: hci2: command tx timeout
[   62.628905][ T5839] Bluetooth: hci0: command tx timeout
[   62.992415][ T6165] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   63.104612][ T6189] __nla_validate_parse: 20 callbacks suppressed
[   63.104628][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'.
[   63.112503][ T6189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.97'.
[   63.581235][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'.
[   63.712014][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'.
[   63.715806][ T6245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.111'.
[   63.719580][ T6245] validate_nla: 2 callbacks suppressed
[   63.719591][ T6245] netlink: 'syz.0.111': attribute type 14 has an invalid length.
[   63.725407][ T6245] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (11)
[   63.914318][ T6256] macsec1: entered promiscuous mode
[   63.916416][ T6256] macsec1: entered allmulticast mode
[   64.072944][ T6265] batadv0: entered promiscuous mode
[   64.090610][ T6268] batadv0: left promiscuous mode
[   64.214030][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.123'.
[   64.220089][ T6278] netlink: 'syz.2.123': attribute type 1 has an invalid length.
[   64.224075][ T6278] netlink: 'syz.2.123': attribute type 2 has an invalid length.
[   64.228010][ T6278] netlink: 80 bytes leftover after parsing attributes in process `syz.2.123'.
[   64.265752][ T6281] netlink: 'syz.2.124': attribute type 1 has an invalid length.
[   64.268662][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.124'.
[   64.380053][ T6298] netlink: 'syz.1.129': attribute type 21 has an invalid length.
[   64.382975][ T6298] netlink: 128 bytes leftover after parsing attributes in process `syz.1.129'.
[   64.386966][ T6298] netlink: 'syz.1.129': attribute type 5 has an invalid length.
[   64.389681][ T6298] netlink: 3 bytes leftover after parsing attributes in process `syz.1.129'.
[   64.433708][ T6303] tipc: Started in network mode
[   64.436053][ T6303] tipc: Node identity ba3bedaf59fa, cluster identity 4711
[   64.439949][ T6303] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.442835][ T6303] syzkaller0: entered promiscuous mode
[   64.446764][ T6303] syzkaller0: entered allmulticast mode
[   64.463845][ T6303] tipc: Resetting bearer <eth:syzkaller0>
[   64.470737][ T6302] tipc: Resetting bearer <eth:syzkaller0>
[   64.492605][ T6302] tipc: Disabling bearer <eth:syzkaller0>
[   64.652755][ T6319] netlink: 'syz.2.134': attribute type 2 has an invalid length.
[   64.707215][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout
[   64.718108][ T6323] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   64.731754][ T6321] tipc: Started in network mode
[   64.733965][ T6321] tipc: Node identity , cluster identity 4711
[   64.739721][ T6321] tipc: Failed to obtain node identity
[   64.745178][ T6321] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   64.750798][ T6325] 8021q: VLANs not supported on gre0
[   64.782142][ T6321] syzkaller0: entered promiscuous mode
[   64.784448][ T6321] syzkaller0: entered allmulticast mode
[   64.817075][ T6321] netlink: 'syz.1.137': attribute type 12 has an invalid length.
[   64.875595][ T6330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.966943][ T6329] infiniband syz0: set down
[   64.968933][ T6329] infiniband syz0: added ipvlan1
[   65.042713][ T6329] RDS/IB: syz0: added
[   65.049307][ T6329] smc: adding ib device syz0 with port count 1
[   65.052148][ T6329] smc:    ib device syz0 port 1 has pnetid 
[   65.911258][ T6348] tipc: Started in network mode
[   65.913760][ T6348] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[   65.916866][ T6348] tipc: Enabled bearer <eth:vlan0>, priority 18
[   66.098373][ T6372] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   66.558383][ T6403] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   66.562384][ T6403] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   66.631020][ T6407] macvlan2: entered promiscuous mode
[   66.633392][ T6407] macvlan2: entered allmulticast mode
[   66.639423][ T6407] bond1: (slave macvlan2): Opening slave failed
[   66.920722][ T6424] xt_CT: You must specify a L4 protocol and not use inversions on it
[   67.046676][ T1833] tipc: Node number set to 10005162
[   67.096866][ T6436] netlink: 'syz.1.174': attribute type 1 has an invalid length.
[   67.307874][ T6448] netlink: 'syz.1.177': attribute type 1 has an invalid length.
[   67.336542][ T6450] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   67.348640][ T6450] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[   67.409242][ T6405] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   67.592837][ T6474] bridge_slave_0: left allmulticast mode
[   67.600926][ T6474] bridge_slave_0: left promiscuous mode
[   67.604367][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.628787][ T6474] bridge_slave_1: left allmulticast mode
[   67.631128][ T6474] bridge_slave_1: left promiscuous mode
[   67.633569][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.667941][ T6474] bond0: (slave bond_slave_0): Releasing backup interface
[   67.687470][ T6474] bond0: (slave bond_slave_1): Releasing backup interface
[   67.696582][ T6474] team0: Port device team_slave_0 removed
[   67.701535][ T6474] team0: Port device team_slave_1 removed
[   67.703843][ T6474] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.706438][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.709753][ T6474] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.712318][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.110910][ T6529] tipc: New replicast peer: 255.255.255.255
[   68.113697][ T6529] tipc: Enabled bearer <udp:syz2>, priority 10
[   68.117489][ T6529] __nla_validate_parse: 18 callbacks suppressed
[   68.117500][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.203'.
[   68.122592][ T6529] tipc: Disabling bearer <udp:syz2>
[   68.420871][ T6557] xt_CT: No such helper "snmp"
[   68.479073][ T6557] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   68.560742][ T6574] lo: entered allmulticast mode
[   68.575816][ T6574] tunl0: entered allmulticast mode
[   68.588042][ T6574] gre0: entered allmulticast mode
[   68.595783][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'.
[   68.600853][ T6581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.223'.
[   68.621475][ T6574] gretap0: entered allmulticast mode
[   68.625535][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout
[   68.629841][ T6574] erspan0: entered allmulticast mode
[   68.638388][ T6574] ip_vti0: entered allmulticast mode
[   68.642109][ T6574] ip6_vti0: entered allmulticast mode
[   68.645431][ T6574] sit0: entered allmulticast mode
[   68.652397][ T6574] ip6tnl0: entered allmulticast mode
[   68.657757][ T6574] ip6gre0: entered allmulticast mode
[   68.662674][ T6574] syz_tun: entered allmulticast mode
[   68.669606][ T6574] ip6gretap0: entered allmulticast mode
[   68.674168][ T6574] bridge0: entered allmulticast mode
[   68.678827][ T6574] vcan0: entered allmulticast mode
[   68.681198][ T6574] bond0: entered allmulticast mode
[   68.687618][ T6574] team0: entered allmulticast mode
[   68.690914][ T6574] dummy0: entered allmulticast mode
[   68.696474][ T6574] nlmon0: entered allmulticast mode
[   68.699220][ T6574] caif0: entered allmulticast mode
[   68.701069][ T6574] batadv0: entered allmulticast mode
[   68.704417][ T6574] vxcan0: entered allmulticast mode
[   68.707358][ T6574] vxcan1: entered allmulticast mode
[   68.710066][ T6574] veth0: entered allmulticast mode
[   68.714209][ T6574] veth1: entered allmulticast mode
[   68.721874][ T6574] wg0: entered allmulticast mode
[   68.726192][ T6574] wg1: entered allmulticast mode
[   68.729881][ T6574] wg2: entered allmulticast mode
[   68.733473][ T6574] veth0_to_bridge: entered allmulticast mode
[   68.739283][ T6574] bridge_slave_0: entered allmulticast mode
[   68.743320][ T6574] veth1_to_bridge: entered allmulticast mode
[   68.748021][ T6574] bridge_slave_1: entered allmulticast mode
[   68.752427][ T6574] veth0_to_bond: entered allmulticast mode
[   68.757711][ T6574] bond_slave_0: entered allmulticast mode
[   68.759806][ T6574] veth1_to_bond: entered allmulticast mode
[   68.762928][ T6574] bond_slave_1: entered allmulticast mode
[   68.767084][ T6574] veth0_to_team: entered allmulticast mode
[   68.770603][ T6574] team_slave_0: entered allmulticast mode
[   68.772770][ T6574] veth1_to_team: entered allmulticast mode
[   68.775966][ T6574] team_slave_1: entered allmulticast mode
[   68.778131][ T6574] veth0_to_batadv: entered allmulticast mode
[   68.781680][ T6574] batadv_slave_0: entered allmulticast mode
[   68.785682][ T6574] veth1_to_batadv: entered allmulticast mode
[   68.789036][ T6574] batadv_slave_1: entered allmulticast mode
[   68.792431][ T6574] xfrm0: entered allmulticast mode
[   68.796572][ T6574] veth0_to_hsr: entered allmulticast mode
[   68.799708][ T6574] hsr_slave_0: entered allmulticast mode
[   68.802623][ T6574] veth1_to_hsr: entered allmulticast mode
[   68.807505][ T6574] hsr_slave_1: entered allmulticast mode
[   68.812817][ T6574] hsr0: entered allmulticast mode
[   68.817229][ T6574] veth1_virt_wifi: entered allmulticast mode
[   68.822017][ T6574] veth0_virt_wifi: entered allmulticast mode
[   68.827383][ T6574] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   68.830652][ T6574] veth1_vlan: entered allmulticast mode
[   68.835766][ T6574] veth0_vlan: entered allmulticast mode
[   68.843627][ T6574] vlan0: entered allmulticast mode
[   68.846066][ T6574] vlan1: entered allmulticast mode
[   68.848729][ T6574] macvlan0: entered allmulticast mode
[   68.852637][ T6574] macvlan1: entered allmulticast mode
[   68.856176][ T6574] ipvlan0: entered allmulticast mode
[   68.857938][ T6574] ipvlan1: entered allmulticast mode
[   68.859993][ T6574] veth1_macvtap: entered allmulticast mode
[   68.864990][ T6574] veth0_macvtap: entered allmulticast mode
[   68.869620][ T6574] macvtap0: entered allmulticast mode
[   68.874155][ T6574] macsec0: entered allmulticast mode
[   68.886057][ T6574] geneve1: entered allmulticast mode
[   68.891411][ T6574] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   68.897901][ T6574] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[   68.902736][ T6574] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[   68.907909][ T6574] netdevsim netdevsim0 netdevsim3: entered allmulticast mode
[   68.917572][ T6574] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   68.921719][ T6574] vxlan0: entered allmulticast mode
[   68.923919][ T6574] syztnl2: entered allmulticast mode
[   68.927165][ T6574] ip6tnl1: left promiscuous mode
[   68.930379][ T6574] macsec1: left promiscuous mode
[   69.020615][ T6599] netlink: 216 bytes leftover after parsing attributes in process `syz.2.226'.
[   69.024585][ T6599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.226'.
[   69.030177][ T6599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.226'.
[   69.154757][ T5860] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.158467][ T5860] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.162029][ T5860] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.181425][ T5860] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.240515][ T6612] xt_hashlimit: size too large, truncated to 1048576
[   69.397780][ T6623] netlink: 64 bytes leftover after parsing attributes in process `syz.0.233'.
[   69.571836][ T6643] vlan0: entered promiscuous mode
[   69.574176][ T6643] vlan0: left allmulticast mode
[   70.323950][ T6648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.237'.
[   70.328342][ T6648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.237'.
[   70.516589][ T6672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.244'.
[   70.536749][ T6672] bridge_slave_0: left allmulticast mode
[   70.539167][ T6672] bridge_slave_0: left promiscuous mode
[   70.541733][ T6672] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.553093][ T6672] bridge_slave_1: left allmulticast mode
[   70.558359][ T6672] bridge_slave_1: left promiscuous mode
[   70.560640][ T6672] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.574466][ T6672] bond0: (slave bond_slave_0): Releasing backup interface
[   70.579622][ T6672] bond0: (slave bond_slave_1): Releasing backup interface
[   70.592086][ T6672] team0: Port device team_slave_0 removed
[   70.600739][ T6672] team0: Port device team_slave_1 removed
[   70.603212][ T6672] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.606876][ T6672] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.612181][ T6672] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.616089][ T6672] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.818819][ T6689] 0: renamed from hsr0 (while UP)
[   70.828991][ T6689] 0: entered allmulticast mode
[   70.831120][ T6689] hsr_slave_0: entered allmulticast mode
[   70.833444][ T6689] hsr_slave_1: entered allmulticast mode
[   70.837309][ T6689] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[   70.855054][ T6694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   70.872204][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.875301][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.040849][  T789] IPVS: starting estimator thread 0...
[   71.043372][ T6706] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[   71.145619][ T6707] IPVS: using max 79 ests per chain, 189600 per kthread
[   71.601963][ T6697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.673932][ T6709] validate_nla: 2 callbacks suppressed
[   71.673948][ T6709] netlink: 'syz.1.256': attribute type 35 has an invalid length.
[   71.935844][ T5701] nci: nci_ntf_packet: unknown ntf opcode 0x206
[   72.545668][ T5839] Bluetooth: hci2: command tx timeout
[   72.684644][ T6742] netlink: 'syz.0.263': attribute type 14 has an invalid length.
[   72.725380][ T6748] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   72.924891][ T6760] netlink: 'syz.1.267': attribute type 21 has an invalid length.
[   72.929244][ T6760] syzkaller1: entered promiscuous mode
[   72.931737][ T6760] syzkaller1: entered allmulticast mode
[   72.959862][ T6760] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[   73.069103][ T6772] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[   73.146333][  T789] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   73.149704][  T789] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   73.191658][  T789] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   73.203755][ T6779] __nla_validate_parse: 17 callbacks suppressed
[   73.203765][ T6779] netlink: 60 bytes leftover after parsing attributes in process `syz.1.270'.
[   73.355165][ T5701] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   73.458383][ T6794] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   73.708171][ T6807] xt_CT: No such helper "syz0"
[   73.712390][ T6807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.276'.
[   73.732723][ T6807] bond2: entered promiscuous mode
[   73.735342][ T6807] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.793587][ T6807] bond2 (unregistering): Released all slaves
[   74.229219][ T6813] veth0_to_batadv: left allmulticast mode
[   74.258376][ T6819] netlink: 96 bytes leftover after parsing attributes in process `syz.1.280'.
[   74.361121][ T6826] ieee802154 phy0 wpan0: encryption failed: -22
[   74.539339][ T6835] netlink: 'syz.1.287': attribute type 1 has an invalid length.
[   74.560612][ T6835] bond2: entered promiscuous mode
[   74.562860][ T6835] bond2: entered allmulticast mode
[   74.578432][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'.
[   74.590146][ T6835] bridge1: the hash_elasticity option has been deprecated and is always 16
[   74.652666][ T6840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.289'.
[   74.661048][ T6840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.289'.
[   74.729054][ T6847] tipc: Started in network mode
[   74.730722][ T6847] tipc: Node identity 8ec8a8ae48fb, cluster identity 4711
[   74.733479][ T6847] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.738379][ T6847] syzkaller0: entered promiscuous mode
[   74.740214][ T6847] syzkaller0: entered allmulticast mode
[   74.762926][ T6847] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   74.774304][ T6851] pim6reg1: entered allmulticast mode
[   74.789934][ T6846] tipc: Resetting bearer <eth:syzkaller0>
[   74.798646][ T6846] tipc: Disabling bearer <eth:syzkaller0>
[   74.820789][ T6851] batadv_slave_0: entered promiscuous mode
[   74.911936][ T6866] netlink: 'syz.1.298': attribute type 29 has an invalid length.
[   74.916641][ T6866] netlink: 'syz.1.298': attribute type 29 has an invalid length.
[   74.920027][ T6866] netlink: 'syz.1.298': attribute type 29 has an invalid length.
[   74.923317][ T6866] netlink: 'syz.1.298': attribute type 29 has an invalid length.
[   74.929222][ T6866] netlink: 'syz.1.298': attribute type 29 has an invalid length.
[   74.932497][ T6866] netlink: 'syz.1.298': attribute type 29 has an invalid length.
[   74.936251][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'.
[   74.941970][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'.
[   74.946318][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'.
[   75.006924][ T6878] tipc: Can't bind to reserved service type 0
[   75.139654][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'.
[   75.792661][ T6889] vti0: entered promiscuous mode
[   75.953279][ T6906] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   75.963052][ T6906] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[   75.998159][ T6906] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   76.274217][ T6936] bridge0: port 4(team0) entered blocking state
[   76.276663][ T6936] bridge0: port 4(team0) entered disabled state
[   76.278850][ T6936] team0: entered allmulticast mode
[   76.280654][ T6936] team_slave_0: entered allmulticast mode
[   76.282583][ T6936] team_slave_1: entered allmulticast mode
[   76.284507][ T6936] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   76.291071][ T6936] team0: entered promiscuous mode
[   76.292859][ T6936] team_slave_0: entered promiscuous mode
[   76.296039][ T6936] team_slave_1: entered promiscuous mode
[   76.298449][ T6936] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   76.301282][ T6936] bridge0: port 4(team0) entered blocking state
[   76.303368][ T6936] bridge0: port 4(team0) entered forwarding state
[   76.389360][ T6945] nbd: must specify a size in bytes for the device
[   76.576876][ T6956] veth0_macvtap: left allmulticast mode
[   76.954471][ T6987] ieee802154 phy0 wpan0: encryption failed: -22
[   76.965456][ T6989] veth0: entered promiscuous mode
[   77.052427][ T6987] batadv_slave_0: left promiscuous mode
[   77.078535][ T6987] tipc: Resetting bearer <eth:vlan0>
[   77.111650][ T6987] macsec1: left promiscuous mode
[   77.114370][ T6987] ip6tnl1: left promiscuous mode
[   77.122094][ T6987] bond2: left promiscuous mode
[   77.123905][ T6987] vti0: left promiscuous mode
[   77.145849][ T6989] veth0 (unregistering): left promiscuous mode
[   77.175802][ T5701] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.180225][ T5701] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.208560][ T5701] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.215547][ T5701] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.898664][ T7039] Bluetooth: MGMT ver 1.23
[   77.908705][ T7039] sch_tbf: burst 0 is lower than device bridge2 mtu (1514) !
[   78.658298][ T7051] 8021q: VLANs not supported on sit0
[   78.691571][ T7053] validate_nla: 27 callbacks suppressed
[   78.691585][ T7053] netlink: 'syz.1.356': attribute type 21 has an invalid length.
[   78.699927][ T7053] netlink: 'syz.1.356': attribute type 22 has an invalid length.
[   78.703273][ T7053] netlink: 'syz.1.356': attribute type 23 has an invalid length.
[   78.707916][ T7053] netlink: 'syz.1.356': attribute type 25 has an invalid length.
[   78.711179][ T7053] __nla_validate_parse: 19 callbacks suppressed
[   78.711189][ T7053] netlink: 96 bytes leftover after parsing attributes in process `syz.1.356'.
[   78.860307][ T7060] netlink: 156 bytes leftover after parsing attributes in process `syz.1.358'.
[   79.232698][ T7083] netlink: 'syz.2.366': attribute type 10 has an invalid length.
[   79.240929][ T7085] netlink: 36 bytes leftover after parsing attributes in process `syz.1.367'.
[   79.246299][ T7083] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.249404][ T7083] bond0: entered promiscuous mode
[   79.253022][ T7083] bond_slave_0: entered promiscuous mode
[   79.256708][ T7083] bond_slave_1: entered promiscuous mode
[   79.258872][ T7083] bond0: entered allmulticast mode
[   79.260659][ T7083] bond_slave_0: entered allmulticast mode
[   79.262579][ T7083] bond_slave_1: entered allmulticast mode
[   79.276480][ T7083] team0: Port device bond0 added
[   79.286690][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'.
[   79.351728][ T7088] xt_ecn: cannot match TCP bits for non-tcp packets
[   79.359959][ T7091] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   79.364362][ T7088] IPVS: stopping backup sync thread 7091 ...
[   79.392032][ T7089] netlink: 'syz.1.369': attribute type 9 has an invalid length.
[   79.543114][ T7106] netlink: 156 bytes leftover after parsing attributes in process `syz.1.373'.
[   79.611035][ T7110] pim6reg1: entered promiscuous mode
[   79.612848][ T7110] pim6reg1: entered allmulticast mode
[   79.622973][ T7112] netlink: 116 bytes leftover after parsing attributes in process `syz.1.376'.
[   79.673642][ T7117] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.679817][ T7117] syzkaller0: entered promiscuous mode
[   79.682193][ T7117] syzkaller0: entered allmulticast mode
[   79.701262][ T7116] tipc: Resetting bearer <eth:syzkaller0>
[   79.722719][ T7116] tipc: Disabling bearer <eth:syzkaller0>
[   79.798849][ T7121] ip6tnl2: entered promiscuous mode
[   79.800987][ T7121] ip6tnl2: entered allmulticast mode
[   79.804136][ T7121] team0: Device ip6tnl2 is of different type
[   79.831012][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'.
[   79.868427][ T7125] netlink: 'syz.0.381': attribute type 1 has an invalid length.
[   79.880155][ T7127] netlink: 'syz.1.382': attribute type 3 has an invalid length.
[   79.985559][ T7134] netlink: 'syz.0.385': attribute type 1 has an invalid length.
[   80.000116][ T7134] netlink: 'syz.0.385': attribute type 1 has an invalid length.
[   80.323535][ T7168] netlink: 17 bytes leftover after parsing attributes in process `syz.0.394'.
[   80.331503][ T7170] Cannot find set identified by id 0 to match
[   80.645180][ T7192] block nbd0: server does not support multiple connections per device.
[   80.654952][ T7192] block nbd0: shutting down sockets
[   80.667485][ T7198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.400'.
[   80.672968][ T7192] netlink: 104 bytes leftover after parsing attributes in process `syz.0.400'.
[   80.715740][ T7203] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   80.718324][ T7203] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[   80.774240][ T7200] cgroup: fork rejected by pids controller in /syz0
[   80.845926][ T7237] bond0 (unregistering): Released all slaves
[   81.106698][   T51] cfg80211: failed to load regulatory.db
[   81.431017][ T7324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.433806][ T7324] IPv6: NLM_F_CREATE should be set when creating new route
[   81.436267][ T7324] IPv6: NLM_F_CREATE should be set when creating new route
[   81.465944][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   81.472238][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   81.477837][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   81.486062][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   81.493420][ T5219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   81.625239][ T7338] x_tables: duplicate underflow at hook 1
[   81.636501][ T7337] delete_channel: no stack
[   82.007570][ T5701] bond0 (unregistering): Released all slaves
[   82.109232][ T5701] tipc: Left network mode
[   82.320595][ T7364] netlink: 'syz.2.424': attribute type 11 has an invalid length.
[   82.600555][ T5701] hsr_slave_0: left promiscuous mode
[   82.605236][ T5701] hsr_slave_1: left promiscuous mode
[   82.681766][   T69] smc: removing ib device syz0
[   83.227167][ T2327] ==================================================================
[   83.230500][ T2327] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190
[   83.234270][ T2327] Read of size 8 at addr ffff888110b4c2e8 by task kworker/1:2/2327
[   83.238301][ T2327] 
[   83.239325][ T2327] CPU: 1 UID: 0 PID: 2327 Comm: kworker/1:2 Not tainted 6.16.0-rc7-syzkaller-01630-g8b5a19b4ff6a-dirty #0 PREEMPT(full) 
[   83.239340][ T2327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   83.239349][ T2327] Workqueue: events smc_ib_port_event_work
[   83.239395][ T2327] Call Trace:
[   83.239402][ T2327]  <TASK>
[   83.239407][ T2327]  dump_stack_lvl+0x189/0x250
[   83.239423][ T2327]  ? rcu_is_watching+0x15/0xb0
[   83.239438][ T2327]  ? __kasan_check_byte+0x12/0x40
[   83.239457][ T2327]  ? __pfx_dump_stack_lvl+0x10/0x10
[   83.239471][ T2327]  ? rcu_is_watching+0x15/0xb0
[   83.239484][ T2327]  ? lock_release+0x4b/0x3e0
[   83.239497][ T2327]  ? __virt_addr_valid+0x1c8/0x5c0
[   83.239514][ T2327]  ? __virt_addr_valid+0x4a5/0x5c0
[   83.239528][ T2327]  print_report+0xca/0x230
[   83.239539][ T2327]  ? __ethtool_get_link_ksettings+0x6e/0x190
[   83.239554][ T2327]  kasan_report+0x118/0x150
[   83.239571][ T2327]  ? __ethtool_get_link_ksettings+0x6e/0x190
[   83.239587][ T2327]  __ethtool_get_link_ksettings+0x6e/0x190
[   83.239603][ T2327]  ib_get_eth_speed+0x15e/0x7b0
[   83.239622][ T2327]  ? __pfx_ib_get_eth_speed+0x10/0x10
[   83.239640][ T2327]  ? do_raw_spin_unlock+0x4d/0x240
[   83.239659][ T2327]  rxe_query_port+0x93/0x3b0
[   83.239675][ T2327]  ib_query_port+0x170/0x830
[   83.239694][ T2327]  smc_ib_port_event_work+0x15a/0x940
[   83.239714][ T2327]  ? _raw_spin_unlock_irq+0x23/0x50
[   83.239733][ T2327]  ? process_scheduled_works+0x9ef/0x17b0
[   83.239747][ T2327]  ? process_scheduled_works+0x9ef/0x17b0
[   83.239761][ T2327]  process_scheduled_works+0xae1/0x17b0
[   83.239781][ T2327]  ? __pfx_process_scheduled_works+0x10/0x10
[   83.239799][ T2327]  worker_thread+0x8a0/0xda0
[   83.239819][ T2327]  kthread+0x711/0x8a0
[   83.239838][ T2327]  ? __pfx_worker_thread+0x10/0x10
[   83.239851][ T2327]  ? __pfx_kthread+0x10/0x10
[   83.239867][ T2327]  ? _raw_spin_unlock_irq+0x23/0x50
[   83.239885][ T2327]  ? lockdep_hardirqs_on+0x9c/0x150
[   83.239898][ T2327]  ? __pfx_kthread+0x10/0x10
[   83.239914][ T2327]  ret_from_fork+0x3fc/0x770
[   83.239927][ T2327]  ? __pfx_ret_from_fork+0x10/0x10
[   83.239942][ T2327]  ? __switch_to_asm+0x39/0x70
[   83.239957][ T2327]  ? __switch_to_asm+0x33/0x70
[   83.239972][ T2327]  ? __pfx_kthread+0x10/0x10
[   83.239988][ T2327]  ret_from_fork_asm+0x1a/0x30
[   83.240007][ T2327]  </TASK>
[   83.240011][ T2327] 
[   83.320906][ T2327] Allocated by task 5828:
[   83.322570][ T2327]  kasan_save_track+0x3e/0x80
[   83.324322][ T2327]  __kasan_kmalloc+0x93/0xb0
[   83.325857][ T2327]  __kvmalloc_node_noprof+0x30d/0x5f0
[   83.327634][ T2327]  alloc_netdev_mqs+0xa3/0x1170
[   83.329300][ T2327]  rtnl_create_link+0x31f/0xd10
[   83.330940][ T2327]  rtnl_newlink_create+0x25c/0xb00
[   83.332658][ T2327]  rtnl_newlink+0x16d6/0x1c70
[   83.334264][ T2327]  rtnetlink_rcv_msg+0x7cf/0xb70
[   83.335909][ T2327]  netlink_rcv_skb+0x208/0x470
[   83.337583][ T2327]  netlink_unicast+0x82f/0x9e0
[   83.339242][ T2327]  netlink_sendmsg+0x805/0xb30
[   83.340883][ T2327]  __sock_sendmsg+0x21c/0x270
[   83.342619][ T2327]  __sys_sendto+0x3bd/0x520
[   83.344247][ T2327]  __x64_sys_sendto+0xde/0x100
[   83.345959][ T2327]  do_syscall_64+0xfa/0x3b0
[   83.347491][ T2327]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.349511][ T2327] 
[   83.350342][ T2327] Freed by task 5701:
[   83.351753][ T2327]  kasan_save_track+0x3e/0x80
[   83.353432][ T2327]  kasan_save_free_info+0x46/0x50
[   83.355188][ T2327]  __kasan_slab_free+0x62/0x70
[   83.356869][ T2327]  kfree+0x18e/0x440
[   83.358404][ T2327]  device_release+0x9c/0x1c0
[   83.360246][ T2327]  kobject_put+0x22b/0x480
[   83.362031][ T2327]  netdev_run_todo+0xd2e/0xea0
[   83.363971][ T2327]  default_device_exit_batch+0x81e/0x890
[   83.366293][ T2327]  ops_undo_list+0x525/0x990
[   83.368277][ T2327]  cleanup_net+0x4c5/0x800
[   83.370182][ T2327]  process_scheduled_works+0xae1/0x17b0
[   83.372510][ T2327]  worker_thread+0x8a0/0xda0
[   83.374436][ T2327]  kthread+0x711/0x8a0
[   83.375989][ T2327]  ret_from_fork+0x3fc/0x770
[   83.377583][ T2327]  ret_from_fork_asm+0x1a/0x30
[   83.379324][ T2327] 
[   83.380191][ T2327] The buggy address belongs to the object at ffff888110b4c000
[   83.380191][ T2327]  which belongs to the cache kmalloc-cg-4k of size 4096
[   83.385044][ T2327] The buggy address is located 744 bytes inside of
[   83.385044][ T2327]  freed 4096-byte region [ffff888110b4c000, ffff888110b4d000)
[   83.390413][ T2327] 
[   83.391212][ T2327] The buggy address belongs to the physical page:
[   83.393625][ T2327] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110b48
[   83.396479][ T2327] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   83.399443][ T2327] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[   83.402525][ T2327] page_type: f5(slab)
[   83.404173][ T2327] raw: 057ff00000000040 ffff88801a44b500 dead000000000100 dead000000000122
[   83.407734][ T2327] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[   83.410725][ T2327] head: 057ff00000000040 ffff88801a44b500 dead000000000100 dead000000000122
[   83.414162][ T2327] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[   83.417671][ T2327] head: 057ff00000000003 ffffea000442d201 00000000ffffffff 00000000ffffffff
[   83.421136][ T2327] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   83.424719][ T2327] page dumped because: kasan: bad access detected
[   83.427419][ T2327] page_owner tracks the page as allocated
[   83.429872][ T2327] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5576, tgid 5576 (dhcpcd), ts 32235049686, free_ts 32220522968
[   83.438908][ T2327]  post_alloc_hook+0x240/0x2a0
[   83.440675][ T2327]  get_page_from_freelist+0x21e4/0x22c0
[   83.442912][ T2327]  __alloc_frozen_pages_noprof+0x181/0x370
[   83.445322][ T2327]  alloc_pages_mpol+0x232/0x4a0
[   83.447339][ T2327]  allocate_slab+0x8a/0x3b0
[   83.449285][ T2327]  ___slab_alloc+0xbfc/0x1480
[   83.451234][ T2327]  __kvmalloc_node_noprof+0x429/0x5f0
[   83.453434][ T2327]  alloc_netdev_mqs+0xa3/0x1170
[   83.455391][ T2327]  bpq_device_event+0x390/0x600
[   83.457388][ T2327]  notifier_call_chain+0x1b6/0x3e0
[   83.459506][ T2327]  __dev_notify_flags+0x18d/0x2e0
[   83.461495][ T2327]  netif_change_flags+0xe8/0x1a0
[   83.463166][ T2327]  dev_change_flags+0x130/0x260
[   83.464822][ T2327]  devinet_ioctl+0xbb4/0x1b50
[   83.466512][ T2327]  inet_ioctl+0x3c0/0x4c0
[   83.468318][ T2327]  sock_do_ioctl+0xdc/0x300
[   83.470204][ T2327] page last free pid 5286 tgid 5286 stack trace:
[   83.472704][ T2327]  __free_frozen_pages+0xc71/0xe70
[   83.474804][ T2327]  __put_partials+0x161/0x1c0
[   83.476668][ T2327]  put_cpu_partial+0x17c/0x250
[   83.478615][ T2327]  __slab_free+0x2f7/0x400
[   83.480462][ T2327]  qlist_free_all+0x97/0x140
[   83.482332][ T2327]  kasan_quarantine_reduce+0x148/0x160
[   83.484610][ T2327]  __kasan_slab_alloc+0x22/0x80
[   83.486571][ T2327]  __kmalloc_noprof+0x224/0x4f0
[   83.488541][ T2327]  tomoyo_realpath_from_path+0xe3/0x5d0
[   83.490669][ T2327]  tomoyo_path_perm+0x213/0x4b0
[   83.492239][ T2327]  security_inode_getattr+0x12f/0x330
[   83.493983][ T2327]  vfs_fstatat+0xb1/0x170
[   83.495422][ T2327]  __x64_sys_newfstatat+0x116/0x190
[   83.497478][ T2327]  do_syscall_64+0xfa/0x3b0
[   83.499099][ T2327]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.501227][ T2327] 
[   83.502214][ T2327] Memory state around the buggy address:
[   83.504535][ T2327]  ffff888110b4c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   83.507774][ T2327]  ffff888110b4c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   83.511068][ T2327] >ffff888110b4c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   83.514250][ T2327]                                                           ^
[   83.517172][ T2327]  ffff888110b4c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   83.520466][ T2327]  ffff888110b4c380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   83.523464][ T2327] ==================================================================
[   83.537951][ T2327] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   83.540793][ T2327] CPU: 1 UID: 0 PID: 2327 Comm: kworker/1:2 Not tainted 6.16.0-rc7-syzkaller-01630-g8b5a19b4ff6a-dirty #0 PREEMPT(full) 
[   83.544921][ T2327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   83.548422][ T2327] Workqueue: events smc_ib_port_event_work
[   83.550337][ T2327] Call Trace:
[   83.551471][ T2327]  <TASK>
[   83.552492][ T2327]  dump_stack_lvl+0x99/0x250
[   83.554037][ T2327]  ? __asan_memcpy+0x40/0x70
[   83.555590][ T2327]  ? __pfx_dump_stack_lvl+0x10/0x10
[   83.557655][ T2327]  ? __pfx__printk+0x10/0x10
[   83.559384][ T2327]  panic+0x2db/0x790
[   83.560676][ T2327]  ? __pfx_panic+0x10/0x10
[   83.562324][ T2327]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[   83.564224][ T2327]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   83.566383][ T2327]  ? print_memory_metadata+0x314/0x400
[   83.568247][ T2327]  ? __ethtool_get_link_ksettings+0x6e/0x190
[   83.570332][ T2327]  check_panic_on_warn+0x89/0xb0
[   83.572130][ T2327]  ? __ethtool_get_link_ksettings+0x6e/0x190
[   83.574653][ T2327]  end_report+0x78/0x160
[   83.576422][ T2327]  kasan_report+0x129/0x150
[   83.578326][ T2327]  ? __ethtool_get_link_ksettings+0x6e/0x190
[   83.580881][ T2327]  __ethtool_get_link_ksettings+0x6e/0x190
[   83.583309][ T2327]  ib_get_eth_speed+0x15e/0x7b0
[   83.585344][ T2327]  ? __pfx_ib_get_eth_speed+0x10/0x10
[   83.587582][ T2327]  ? do_raw_spin_unlock+0x4d/0x240
[   83.589754][ T2327]  rxe_query_port+0x93/0x3b0
[   83.591668][ T2327]  ib_query_port+0x170/0x830
[   83.593601][ T2327]  smc_ib_port_event_work+0x15a/0x940
[   83.595863][ T2327]  ? _raw_spin_unlock_irq+0x23/0x50
[   83.598113][ T2327]  ? process_scheduled_works+0x9ef/0x17b0
[   83.600524][ T2327]  ? process_scheduled_works+0x9ef/0x17b0
[   83.602859][ T2327]  process_scheduled_works+0xae1/0x17b0
[   83.605125][ T2327]  ? __pfx_process_scheduled_works+0x10/0x10
[   83.607692][ T2327]  worker_thread+0x8a0/0xda0
[   83.609698][ T2327]  kthread+0x711/0x8a0
[   83.611494][ T2327]  ? __pfx_worker_thread+0x10/0x10
[   83.613677][ T2327]  ? __pfx_kthread+0x10/0x10
[   83.615679][ T2327]  ? _raw_spin_unlock_irq+0x23/0x50
[   83.617935][ T2327]  ? lockdep_hardirqs_on+0x9c/0x150
[   83.620163][ T2327]  ? __pfx_kthread+0x10/0x10
[   83.622093][ T2327]  ret_from_fork+0x3fc/0x770
[   83.624056][ T2327]  ? __pfx_ret_from_fork+0x10/0x10
[   83.626222][ T2327]  ? __switch_to_asm+0x39/0x70
[   83.628212][ T2327]  ? __switch_to_asm+0x33/0x70
[   83.630334][ T2327]  ? __pfx_kthread+0x10/0x10
[   83.632338][ T2327]  ret_from_fork_asm+0x1a/0x30
[   83.634405][ T2327]  </TASK>
[   83.636442][ T2327] Kernel Offset: disabled
[   83.638308][ T2327] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:26:52  Registers:
info registers vcpu 0

CPU#0
RAX=e423aebdd96cc9bd RBX=0000000000000002 RCX=dba048837e1b5a00 RDX=0000000000000004
RSI=ffffffff8db8d3fb RDI=ffffffff8be28d80 RBP=ffff88802036e1d0 RSP=ffffc90002d7efe8
R8 =000000000000000f R9 =ffffffff8172aae5 R10=ffffc90002d7f198 R11=ffffffff81acfe40
R12=0000000000000004 R13=0000000000000004 R14=ffffffff8e13f0e0 R15=ffff88802036d640
RIP=ffffffff8b706226 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f47b8da0d58 CR3=000000001fe8c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffff00ffffff00 ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000001001 0000000000000014
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffffff00 XMM09=00316e6170772f74 656e2f317968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000062 RBX=0000000000000062 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000b1370b0
R8 =ffff888021710237 R9 =1ffff110042e2046 R10=dffffc0000000000 R11=ffffffff85464660
R12=dffffc0000000000 R13=ffffffff99aff8c0 R14=ffffffff99e044c0 R15=0000000000000000
RIP=ffffffff854646dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000003000 CR3=000000003ca86000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=5ed8ba213109d578 14309bd4735daf07
XMM02=20e6d5cba0add0af 285dfd4db7bf8b77 XMM03=872da6830c8103cf d0c5a909503d485a
XMM04=6d955c7265c4e978 fb333766e7e3f550 XMM05=30ed2db2e7b9cef4 320fa73aa1c2c3ac
XMM06=e3b495947cd617e5 55195c8c769a5bef XMM07=cda24514d10896c6 5a473a6ca89fd3c2
XMM08=6d955c7265c4e978 fb333766e7e3f550 XMM09=0000000000000000 00007f47b8011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
