last executing test programs:

1.197686392s ago: executing program 0 (id=473):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x400400, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000000000)=0x4, 0x4)
ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000000))
r2 = perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x4, 0x9, 0x9, 0x0, 0x0, 0x10001, 0xf, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x800, 0x159, 0x80000001, 0x1, 0x5, 0x5, 0x5b5, 0x0, 0x3, 0x0, 0x40b}, r0, 0x1, 0xffffffffffffffff, 0x4)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x6, 0x4, 0xa, 0x7, 0x0, 0x1000, 0x8008, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x4, 0x9b}, 0x4, 0x1, 0x4, 0x2, 0x4, 0x2, 0x7, 0x0, 0xfffffff5, 0x0, 0x100000001})
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)

1.127335132s ago: executing program 0 (id=475):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000faffffff00000000030000008500000036000000670000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x0, @void}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001fc0)={0x14, 0x55, 0x1, 0x70bd27, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r4, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
pselect6(0x40, &(0x7f0000000140)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0)

1.124948016s ago: executing program 0 (id=476):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140), 0x10) (async)
sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x1409, 0x1, 0x70bd25, 0x25dfdbf9}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8066) (async, rerun: 64)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xcd}, 0x50)
socket(0x2, 0x80805, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000180)=@security={'security\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x198, 0x0, 0x198, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x4, [0x33, 0x1f, 0xc, 0x2, 0x40, 0x30, 0x14, 0x34, 0x2a, 0x2b, 0x2c, 0x29, 0x40, 0x6, 0x1f, 0x30], 0x2, 0x4, 0x6}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, 0xff0000ff, 0xff, 'team0\x00', 'vlan0\x00', {}, {}, 0x1, 0x3, 0x42}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x7}, {0x0, 0x3, 0x2}}}}, {{@ip={@remote, @loopback, 0xff, 0xffffffff, 'ipvlan1\x00', 'hsr0\x00', {}, {0xff}, 0x21, 0x1, 0x4}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 32)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRES8=r5], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) (async, rerun: 32)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) (async)
r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r10, &(0x7f00000001c0)='devices.list\x00', 0x0, 0x0) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000540), &(0x7f00000004c0)=@tcp6=r4}, 0x20) (async)
sendmmsg$inet6(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01012abd7000000008002b00000008000300", @ANYRES32=r13, @ANYBLOB="040046000500340076000000080026006c0900002c00518028000080050009"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4804) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r14=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001200)={&(0x7f0000001280)=ANY=[@ANYBLOB="1c030000", @ANYRES16=r12, @ANYBLOB="10002abd7000fddb719841f1eca218b2666783cddf258700000000000000", @ANYRES32=r14, @ANYBLOB="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"], 0x31c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0)

1.060580618s ago: executing program 1 (id=477):
perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x40, 0xc, 0xe7, 0x9c, 0x0, 0x13, 0x50142, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x80, 0x45, 0x2, 0x3, 0x8, 0x100, 0x400d, 0x0, 0x7, 0x8000000, 0xd5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

1.060367306s ago: executing program 1 (id=478):
listen(0xffffffffffffffff, 0x39b3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000500)=""/66, 0x42, <r1=>0x0, &(0x7f0000000580)=""/72, 0x48}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x9, 0x9, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa7c4, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x1, 0x5, 0x3, 0x5, 0xffffffffffffff72, 0x8}, @exit, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0xce}]}, &(0x7f0000000300)='syzkaller\x00', 0x5, 0x8b, &(0x7f00000003c0)=""/139, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x9, 0x7, 0x2f84}, 0x10, r1, 0xffffffffffffffff, 0xa, &(0x7f0000000840)=[0xffffffffffffffff, r0, 0xffffffffffffffff, r0], &(0x7f0000000880)=[{0x1, 0x3, 0xe, 0x1}, {0x3, 0x5, 0x8, 0x3}, {0x4, 0x2, 0x3}, {0x0, 0x3, 0x8, 0x9}, {0x1, 0x1, 0x1, 0x3}, {0x2, 0x3, 0x3, 0x8}, {0x3, 0x4, 0xf, 0x6}, {0x3, 0x5, 0xf, 0xc}, {0x2, 0x3, 0x1, 0x7}, {0x4, 0x1, 0xe, 0x9}], 0x10, 0xfa000000}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084)

997.244916ms ago: executing program 1 (id=479):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x1a, 0x100, 0x70bd29, 0x25dfdbff, {0x1a}, [@typed={0x7, 0xf9, 0x0, 0x0, @str='tls'}, @typed={0x8, 0x5a, 0x0, 0x0, @fd}, @typed={0x8, 0xf3, 0x0, 0x0, @ipv4=@broadcast}, @generic="45edcd9b8159340df56ded770f64e6e9ac2ddf4339d1a0459989d7d7ffbaa28e23d476f19fa9bed4ecb1323711211300059e388e2e03c8c0c8f43026826c49a8238df8db6e5d39ac"]}, 0x74}, 0x1, 0x0, 0x0, 0x4820}, 0x2000c000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28)
sendmsg$inet(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000001a01"], 0x70}, 0x40)

996.974745ms ago: executing program 0 (id=480):
socket$kcm(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r4, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x1004}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000100)=""/134, 0x86}, {&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/46, 0x2e}, {&(0x7f0000001100)=""/246, 0xf6}], 0x5}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20)
sendmmsg$inet6(r3, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}], 0x1, 0x0)
connect$unix(r2, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)

993.443435ms ago: executing program 1 (id=481):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETMIFCNT_IN6(r0, 0x8915, &(0x7f0000000040))

890.056438ms ago: executing program 1 (id=482):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "0fa078cb740abd49", "b4381a5eba3323f7b88b9db91e14fed8722cb4cb185679675bd421905c7bb444", "164ad2b9", "23eb573e21dc656c"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "d83a262acb160cf7", "2d348545de684faa321614496fa9ced5", "3e8c77dd", "c213bd06f7ba0775"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)

391.62602ms ago: executing program 2 (id=484):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "6ae04425ace3f60c", "acba84f091ccf68a710300f23c58140000ffffffffffffffdf002100", "0f9dafb4", "ffffffffffffffff"}, 0x38)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="ec354405ffcb2dda6f2722fc307339ba09d0bd85", 0xfdef}], 0x6)

329.357164ms ago: executing program 2 (id=485):
syz_clone(0x81100400, &(0x7f0000000680)="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", 0x208, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000280)="418ed3dae3cae0935585f2cd64cb362f0000539d2e06cd1d46e836c7b9c75721028c36d3160ecc231c0052ced072cce71549c2e1198d104b2ded3da8fa60db204ba8664af0649656dfc0c0249a83c184b4a96e8c0a7c12198f6045e0ef6af1")

279.878258ms ago: executing program 2 (id=486):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
recvmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f00000018c0)=""/205, 0xcd}, {0x0}, {&(0x7f0000001a80)=""/81, 0x51}], 0x3}, 0x3}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000002840)}, 0xf5f0d7}], 0x4, 0x40010002, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)

210.363057ms ago: executing program 2 (id=487):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000), &(0x7f0000000040)=0x8)
perf_event_open$cgroup(&(0x7f0000000480)={0x6, 0x80, 0x0, 0xf9, 0x10, 0x1, 0x0, 0x9, 0x40, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xf, 0x6, @perf_config_ext={0x205, 0x20000000400}, 0x0, 0xffffffffff800000, 0xff, 0x9, 0x9, 0x8, 0x6, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3)

210.038277ms ago: executing program 2 (id=488):
socket$kcm(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r7, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810)
close(0x4)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r9)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r10, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r11, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r10}, 0x20)
connect$unix(r9, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)

98.478207ms ago: executing program 0 (id=489):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x45be2000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0xb, 0xd, &(0x7f0000001200)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], &(0x7f0000001280)='syzkaller\x00', 0x2d2, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001300)={0x3, 0x6, 0x3, 0x401}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000001340)=[0x1, 0x1, 0x1], &(0x7f0000001380)=[{0x0, 0x2, 0x9, 0xa}], 0x10, 0xe}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001580)={@map=0x1, 0x13, 0x1, 0x800, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r1=>0x0}, 0x40)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000380)="7cda", 0x3ff, r2}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f00000000c0)={0x0, &(0x7f0000001200)=""/119, &(0x7f00000002c0), &(0x7f0000000100), 0x7, r2}, 0x38)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000001600), 0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000015c0)={@map=r2, r0, 0x26, 0x10, 0xffffffffffffffff, @void, @value=r3, @void, @void, r1}, 0x20)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r5, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000140)='e', 0x1}], 0x1}}], 0x1, 0x4000)
shutdown(r5, 0x1)
setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="18220f418c4d63c623060000520000bc9926ca9d64296c4c00000000000000007e154c3845f30cb115f556acc10071bee8911200"/64, @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14)
getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000380)={@initdev, <r9=>0x0}, &(0x7f0000001180)=0x14)
connect$packet(r8, &(0x7f00000011c0)={0x11, 0x11, r9, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f00000000c0), &(0x7f0000000100)=r7}, 0x20)
mmap(&(0x7f000096e000/0x4000)=nil, 0x4000, 0xc, 0x810, r4, 0x80eda000)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc}, 0x10}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b907ef23f66a54f05c13e5f0888e", 0x0, 0x6, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x50)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x1e)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "1eedc78106a0e743", "eba9f36855546014e24d7e30b50b3fde57008c99592d00", "8e8ec580", "3c3c23fff2050cf6"}, 0x38)
sendto$inet6(r4, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)
close(r4)

23.591673ms ago: executing program 0 (id=490):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x1d, 0x288, 0x120, 0x0, 0x0, 0x120, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x24}, 0x0, 0xff, 'macvlan1\x00', 'wg1\x00', {}, {}, 0x6, 0x3}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xa}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x2, 0x8}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xd, [0x2b, 0x10, 0x14, 0x19, 0x2c, 0x8, 0xe, 0x3e, 0x8, 0xc, 0x16, 0x29, 0xc81f, 0xd, 0x39, 0x1b], 0x0, 0x8, 0x40003}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8)

23.44962ms ago: executing program 1 (id=491):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x34602, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000dc0), &(0x7f0000000e00)=0xc)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40103d02, &(0x7f0000000240))

0s ago: executing program 2 (id=492):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
sendto$inet(r0, &(0x7f0000000140)="2a00eea69db33873d1c0fddc0003e8de33e6b7e761f8", 0x16, 0x8840, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0xd)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x1, 0x3a0, 0x2}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x1800, r2}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r2, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x2, 0xfffffffe, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r3, 0x84, 0x18, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa0, 0x1405, 0x400, 0x70bd27, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0xa0}}, 0x4)
unshare(0x26020480)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYBLOB="0000000000000000000000000000008e00"/29], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000030000000000000012000000850000009300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x211}, 0x94)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000180)=0x3, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:35859' (ED25519) to the list of known hosts.
syzkaller login: [   55.817519][ T5590] cgroup: Unknown subsys name 'net'
[   55.921334][ T5590] cgroup: Unknown subsys name 'cpuset'
[   55.925361][ T5590] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.411355][ T5590] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.539872][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.545062][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.550948][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.554138][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.570329][ T5000] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.575013][ T5000] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.576702][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.578449][ T5000] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.583796][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.586655][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.589300][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.592676][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.596582][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.600328][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.609959][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.185742][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.188835][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.191216][ T5612] bridge_slave_0: entered allmulticast mode
[   62.194423][ T5612] bridge_slave_0: entered promiscuous mode
[   62.228860][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.231870][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.234828][ T5612] bridge_slave_1: entered allmulticast mode
[   62.239838][ T5612] bridge_slave_1: entered promiscuous mode
[   62.259746][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.262426][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.264876][ T5616] bridge_slave_0: entered allmulticast mode
[   62.267990][ T5616] bridge_slave_0: entered promiscuous mode
[   62.284375][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.287468][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.290858][ T5616] bridge_slave_1: entered allmulticast mode
[   62.294527][ T5616] bridge_slave_1: entered promiscuous mode
[   62.320436][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.340506][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.366490][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.375346][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.378495][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.381033][ T5617] bridge_slave_0: entered allmulticast mode
[   62.383905][ T5617] bridge_slave_0: entered promiscuous mode
[   62.389857][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.395279][ T5612] team0: Port device team_slave_0 added
[   62.400749][ T5612] team0: Port device team_slave_1 added
[   62.402796][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.405348][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.408327][ T5617] bridge_slave_1: entered allmulticast mode
[   62.411525][ T5617] bridge_slave_1: entered promiscuous mode
[   62.449807][ T5616] team0: Port device team_slave_0 added
[   62.460231][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.462415][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.469998][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.482731][ T5616] team0: Port device team_slave_1 added
[   62.485570][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.488003][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.496234][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.506765][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.511828][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.531666][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.534182][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.542741][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.563404][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.565811][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.574720][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.599308][ T5617] team0: Port device team_slave_0 added
[   62.630572][ T5617] team0: Port device team_slave_1 added
[   62.640344][ T5612] hsr_slave_0: entered promiscuous mode
[   62.644369][ T5612] hsr_slave_1: entered promiscuous mode
[   62.679443][ T5616] hsr_slave_0: entered promiscuous mode
[   62.681815][ T5616] hsr_slave_1: entered promiscuous mode
[   62.683984][ T5616] debugfs: 'hsr0' already exists in 'hsr'
[   62.685874][ T5616] Cannot create hsr debugfs directory
[   62.696660][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.699329][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.708012][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.712989][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.715148][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.724238][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.823281][ T5617] hsr_slave_0: entered promiscuous mode
[   62.826286][ T5617] hsr_slave_1: entered promiscuous mode
[   62.829611][ T5617] debugfs: 'hsr0' already exists in 'hsr'
[   62.831924][ T5617] Cannot create hsr debugfs directory
[   63.082663][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.090992][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.094051][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.103747][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.108895][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.114438][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.126530][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.133774][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.166189][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.174365][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.184433][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.193550][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.197106][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.202904][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.206397][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.213359][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.272695][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.277918][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.284846][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.290532][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.301163][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.305618][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.309916][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.314241][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.403034][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.432913][ T5616] 8021q: adding VLAN 0 to HW filter on device team0
[   63.446117][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.457881][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.460995][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.469615][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.480685][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.482929][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.515808][ T5612] 8021q: adding VLAN 0 to HW filter on device team0
[   63.532621][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[   63.540783][ T3397] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.543721][ T3397] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.562499][ T3397] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.565439][ T3397] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.571405][ T3397] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.574297][ T3397] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.596036][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.599019][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.659154][ T5615] Bluetooth: hci2: command tx timeout
[   63.659166][ T5622] Bluetooth: hci0: command tx timeout
[   63.664819][ T5621] Bluetooth: hci1: command tx timeout
[   64.008535][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.071733][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.074623][ T5616] veth0_vlan: entered promiscuous mode
[   64.091794][ T5616] veth1_vlan: entered promiscuous mode
[   64.111727][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.152108][ T5617] veth0_vlan: entered promiscuous mode
[   64.165933][ T5616] veth0_macvtap: entered promiscuous mode
[   64.176184][ T5617] veth1_vlan: entered promiscuous mode
[   64.180759][ T5616] veth1_macvtap: entered promiscuous mode
[   64.224773][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.242488][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.249196][ T5612] veth0_vlan: entered promiscuous mode
[   64.255532][ T5617] veth0_macvtap: entered promiscuous mode
[   64.267330][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.272227][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.278511][ T5617] veth1_macvtap: entered promiscuous mode
[   64.287467][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.297149][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.303853][ T5612] veth1_vlan: entered promiscuous mode
[   64.370244][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.392180][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.432362][ T5612] veth0_macvtap: entered promiscuous mode
[   64.436785][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.440198][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.441029][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.447051][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.453241][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.456242][ T5612] veth1_macvtap: entered promiscuous mode
[   64.469389][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.500745][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.504618][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.547835][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.576343][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.621650][ T5616] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.637859][ T5470] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.643265][ T5470] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.652864][ T3397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.656166][ T5470] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.665143][ T3397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.671204][ T5470] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.764943][ T3397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.774111][ T3397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.865042][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.878567][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.959169][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.966324][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.974381][ T5725] Zero length message leads to an empty skb
[   65.134041][ T5729] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   65.277223][ T5744] netlink: 'syz.0.5': attribute type 29 has an invalid length.
[   65.738317][ T5615] Bluetooth: hci0: command tx timeout
[   65.748870][ T5615] Bluetooth: hci2: command tx timeout
[   65.750879][ T5615] Bluetooth: hci1: command tx timeout
[   66.371727][ T5768] netlink: 180 bytes leftover after parsing attributes in process `syz.2.11'.
[   66.377387][ T5768] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11'.
[   66.625938][ T5780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'.
[   66.635631][ T5780] netlink: 83 bytes leftover after parsing attributes in process `syz.2.14'.
[   66.779711][ T5794] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.18'.
[   67.070451][ T5819] netlink: 332 bytes leftover after parsing attributes in process `syz.2.26'.
[   67.078475][ T5819] netlink: 'syz.2.26': attribute type 9 has an invalid length.
[   67.086641][ T5819] netlink: 108 bytes leftover after parsing attributes in process `syz.2.26'.
[   67.091761][ T5819] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26'.
[   67.141234][ T5822] netlink: 'syz.0.25': attribute type 1 has an invalid length.
[   67.146862][ T5822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'.
[   67.619173][ T5848] netlink: 'syz.1.35': attribute type 1 has an invalid length.
[   67.627290][ T5848] netlink: 'syz.1.35': attribute type 2 has an invalid length.
[   67.630113][ T5847] netlink: 76 bytes leftover after parsing attributes in process `syz.0.34'.
[   67.819986][ T5615] Bluetooth: hci2: command tx timeout
[   67.820930][ T5621] Bluetooth: hci1: command tx timeout
[   67.823865][ T5615] Bluetooth: hci0: command tx timeout
[   69.898309][ T5615] Bluetooth: hci1: command tx timeout
[   69.899060][ T5622] Bluetooth: hci2: command tx timeout
[   69.908288][ T5622] Bluetooth: hci0: command tx timeout
[   70.936138][ T5877] Set syz1 is full, maxelem 65536 reached
[   71.385381][ T5915] __nla_validate_parse: 5 callbacks suppressed
[   71.385394][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'.
[   71.454937][ T5922] netlink: 'syz.0.59': attribute type 1 has an invalid length.
[   71.459423][ T5922] netlink: 'syz.0.59': attribute type 4 has an invalid length.
[   71.463295][ T5922] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.59'.
[   71.486165][ T5922] netlink: 'syz.0.59': attribute type 83 has an invalid length.
[   71.495889][ T5924] tipc: Enabling of bearer <dth:s> rejected, media not registered
[   71.654326][ T5935] Illegal XDP return value 65535 on prog  (id 17) dev N/A, expect packet loss!
[   71.744425][ T5937] syzkaller0: entered promiscuous mode
[   71.746967][ T5937] syzkaller0: entered allmulticast mode
[   71.845925][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'.
[   71.978339][ T5622] Bluetooth: hci2: command tx timeout
[   72.100690][ T5949] batman_adv: batadv0: Adding interface: dummy0
[   72.102790][ T5949] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.111453][ T5949] batman_adv: batadv0: Interface activated: dummy0
[   72.125160][ T5949] batadv0: mtu less than device minimum
[   72.127858][ T5949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   72.132869][ T5949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   72.136613][ T5949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   72.140437][ T5949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   72.144139][ T5949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   72.147683][ T5949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   72.151450][ T5949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   72.155048][ T5949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   72.204553][ T5951] Cannot find add_set index 0 as target
[   72.980328][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.78'.
[   73.016385][ T5979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.78'.
[   73.036269][ T5979] netlink: 'syz.1.78': attribute type 15 has an invalid length.
[   73.181551][ T5961] block nbd0: Receive control failed (result -32)
[   73.184458][   T56] block nbd0: Receive control failed (result -32)
[   73.259456][ T5986] tipc: Started in network mode
[   73.265004][ T5986] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[   73.269969][ T5986] tipc: Enabled bearer <eth:vlan0>, priority 10
[   73.499835][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.503855][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.559652][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.565820][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.654525][ T5470] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.657527][ T5470] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.662436][ T5470] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.665193][ T5470] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.713860][ T6001] IPv6: NLM_F_CREATE should be specified when creating new route
[   74.271037][ T5671] tipc: Node number set to 10005162
[   74.978185][ T6046] Cannot find del_set index 4 as target
[   75.011659][ T5693] IPVS: starting estimator thread 0...
[   75.076371][ T6054] warning: `syz.0.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.090838][ T6054] netlink: 'syz.0.101': attribute type 1 has an invalid length.
[   75.099397][ T6051] IPVS: using max 80 ests per chain, 192000 per kthread
[   75.180537][ T6066] netlink: 80 bytes leftover after parsing attributes in process `syz.2.105'.
[   75.231067][ T6071] lo: entered allmulticast mode
[   75.232821][ T6071] lo: left allmulticast mode
[   75.370076][ T6076] netlink: 20 bytes leftover after parsing attributes in process `syz.2.109'.
[   76.021760][ T6091] Cannot find del_set index 4 as target
[   76.117365][ T6098] net_ratelimit: 13 callbacks suppressed
[   76.117376][ T6098] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   76.301377][ T6107] syzkaller1: entered promiscuous mode
[   76.303845][ T6107] syzkaller1: entered allmulticast mode
[   76.313819][ T6107] netlink: 65019 bytes leftover after parsing attributes in process `syz.0.122'.
[   76.544618][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[   76.547824][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[   77.515292][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'.
[   77.515303][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'.
[   77.539509][ T6146] netlink: 56 bytes leftover after parsing attributes in process `syz.0.134'.
[   77.544782][ T6145] netlink: 56 bytes leftover after parsing attributes in process `syz.0.134'.
[   77.583882][ T6148] netlink: 16 bytes leftover after parsing attributes in process `syz.2.135'.
[   77.602516][ T6148] syzkaller1: entered promiscuous mode
[   77.604959][ T6148] syzkaller1: entered allmulticast mode
[   77.712363][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.137'.
[   77.739356][ T6155] xfrm1: entered promiscuous mode
[   77.746077][ T6155] xfrm1: entered allmulticast mode
[   77.750734][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.137'.
[   77.785537][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'.
[   77.791253][ T6157] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.809359][ T6157] netlink: 16 bytes leftover after parsing attributes in process `syz.2.138'.
[   77.997128][ T6166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.140'.
[   78.053884][ T6168] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   78.724122][ T6185] Cannot find add_set index 0 as target
[   78.871377][ T6189] netlink: 'syz.2.149': attribute type 1 has an invalid length.
[   79.027826][ T6200] netlink: 'syz.0.154': attribute type 1 has an invalid length.
[   79.650305][ T6246] netlink: 'syz.1.168': attribute type 13 has an invalid length.
[   80.219308][ T5077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   80.309201][ T6279] netlink: 'syz.0.180': attribute type 1 has an invalid length.
[   80.312670][ T6279] netlink: 'syz.0.180': attribute type 6 has an invalid length.
[   80.315980][ T6279] netlink: 'syz.0.180': attribute type 3 has an invalid length.
[   80.598213][ T6287] block nbd1: Receive control failed (result -1)
[   80.663341][ T6288] veth3: entered allmulticast mode
[   80.671745][ T6288] bond1: (slave veth3): Enslaving as an active interface with an up link
[   80.693276][ T6288] bond1 (unregistering): (slave veth3): Releasing backup interface
[   80.701703][ T6288] bond1 (unregistering): Released all slaves
[   80.789506][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   81.022763][ T5077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   81.176424][ T6323] syzkaller0: create flow: hash 900363196 index 1
[   81.188632][ T5077] syzkaller0: tun_net_xmit 76
[   81.672301][ T5077] syzkaller0: tun_net_xmit 76
[   81.841346][ T6332] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.933669][ T6321] syzkaller0: delete flow: hash 900363196 index 1
[   82.058600][ T5671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   82.618442][ T5686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.055402][ T6362] __nla_validate_parse: 6 callbacks suppressed
[   83.055413][ T6362] netlink: 40 bytes leftover after parsing attributes in process `syz.0.203'.
[   83.102954][ T5077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.145987][ T6370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.206'.
[   83.166540][ T6369] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.205'.
[   83.227062][ T6375] netlink: 'syz.2.207': attribute type 4 has an invalid length.
[   83.499928][ T6414] syzkaller0: entered promiscuous mode
[   83.508557][ T6414] syzkaller0: entered allmulticast mode
[   84.140489][ T5077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.821230][ T6500] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   84.830495][ T6500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   84.909693][ T6506] netlink: 496 bytes leftover after parsing attributes in process `syz.2.249'.
[   85.046281][ T6520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.250'.
[   85.178448][ T5671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   85.336016][ T6539] netlink: 1 bytes leftover after parsing attributes in process `syz.2.257'.
[   85.419619][ T6541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   85.425681][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   85.658276][ T5686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   85.731680][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'.
[   85.762046][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'.
[   85.767471][ T5671] IPVS: starting estimator thread 0...
[   85.858819][ T6573] IPVS: using max 80 ests per chain, 192000 per kthread
[   85.906645][ T6581] tls_set_device_offload: netdev not found
[   86.002336][ T6588] netlink: 32 bytes leftover after parsing attributes in process `syz.0.271'.
[   86.011722][ T6588] syzkaller1: entered promiscuous mode
[   86.013617][ T6588] syzkaller1: entered allmulticast mode
[   86.351150][ T6609] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.277'.
[   86.391194][ T6611] IPv6: NLM_F_CREATE should be specified when creating new route
[   86.793212][   T31] cfg80211: failed to load regulatory.db
[   87.240667][ T6647] vlan0: entered promiscuous mode
[   87.245492][ T6647] gretap0: entered promiscuous mode
[   87.259790][   T31] net_ratelimit: 4 callbacks suppressed
[   87.259806][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   87.507180][ T6657] netlink: 'syz.2.294': attribute type 1 has an invalid length.
[   87.515794][ T6657] sctp: [Deprecated]: syz.2.294 (pid 6657) Use of struct sctp_assoc_value in delayed_ack socket option.
[   87.515794][ T6657] Use struct sctp_sack_info instead
[   88.058410][ T5077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.172432][ T6670] tap0: tun_chr_ioctl cmd 2148553947
[   88.298159][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.415722][ T6689] __nla_validate_parse: 8 callbacks suppressed
[   88.415734][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'.
[   88.513490][ T6702] netlink: 'syz.1.311': attribute type 16 has an invalid length.
[   88.519064][ T6702] netlink: 'syz.1.311': attribute type 3 has an invalid length.
[   88.525258][ T6702] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.311'.
[   88.670127][ T6719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.674124][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.688704][ T6719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.691441][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.757099][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.317'.
[   88.786519][ T6734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.319'.
[   88.888163][ T6734] veth3: entered allmulticast mode
[   88.894918][ T6734] bond1: (slave veth3): Enslaving as an active interface with an up link
[   88.904329][ T6734] bond1 (unregistering): (slave veth3): Releasing backup interface
[   88.909070][ T6734] bond1 (unregistering): Released all slaves
[   89.099935][ T5077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   89.171572][ T6770] netlink: 260 bytes leftover after parsing attributes in process `syz.2.329'.
[   89.348268][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   89.698675][ T6793] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   89.760158][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'.
[   89.769191][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'.
[   89.776287][ T6794] netlink: 348 bytes leftover after parsing attributes in process `syz.2.337'.
[   89.782631][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'.
[   89.789651][ T6794] netlink: 348 bytes leftover after parsing attributes in process `syz.2.337'.
[   90.257614][ T6802] ieee802154 phy0 wpan0: encryption failed: -22
[   90.716848][ T6834] Bluetooth: MGMT ver 1.23
[   90.721891][ T6834] netlink: 'syz.2.352': attribute type 10 has an invalid length.
[   90.996282][ T6861] veth5: entered allmulticast mode
[   91.001322][ T6861] bond1: (slave veth5): Enslaving as an active interface with an up link
[   91.763116][ T6908] veth3: entered allmulticast mode
[   91.772175][ T6908] bond5: (slave veth3): Enslaving as an active interface with an up link
[   91.787709][ T6908] bond5 (unregistering): (slave veth3): Releasing backup interface
[   91.792703][ T6908] bond5 (unregistering): Released all slaves
[   92.051482][ T6925] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   92.525020][ T6982] gretap0: entered promiscuous mode
[   92.533291][ T6982] vlan2: entered promiscuous mode
[   92.550050][ T5686] net_ratelimit: 3343 callbacks suppressed
[   92.550064][ T5686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.778184][ T5615] Bluetooth: hci0: command 0x0c1a tx timeout
[   92.781421][ T5622] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   93.042955][ T7008] PKCS7: Unknown OID: [4] (bad)
[   93.048643][ T7008] PKCS7: Only support pkcs7_signedData type
[   93.258515][ T5077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.728871][ T7066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.731547][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.756558][ T7058] syzkaller0: entered promiscuous mode
[   93.759483][ T7058] syzkaller0: entered allmulticast mode
[   93.829305][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.832727][ T5686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.907716][ T7085] __nla_validate_parse: 14 callbacks suppressed
[   93.907729][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.435'.
[   93.941857][ T7086] veth7: entered allmulticast mode
[   93.951292][ T7086] bond2: (slave veth7): Enslaving as an active interface with an up link
[   93.963596][ T7085] bond2 (unregistering): (slave veth7): Releasing backup interface
[   93.971957][ T7085] bond2 (unregistering): Released all slaves
[   94.298522][ T5077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.338887][ T5077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.536935][ T7187] netlink: 'syz.2.465': attribute type 11 has an invalid length.
[   95.539484][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'.
[   95.543653][ T7187] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.465'.
[   95.578455][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   96.384094][  T949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   97.444783][ T7135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   97.541665][ T7196] netlink: 'syz.1.470': attribute type 3 has an invalid length.
[   98.218227][    C1] net_ratelimit: 2 callbacks suppressed
[   98.218251][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   98.459126][  T949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   98.628519][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   98.645969][ T7245] netlink: 'syz.2.488': attribute type 3 has an invalid length.
[   98.699631][ T7245] nbd2: detected capacity change from 0 to 63
[   98.703966][ T7246] block nbd2: NBD_DISCONNECT
[   98.709882][ T7246] block nbd2: Disconnected due to user request.
[   98.715304][ T7246] block nbd2: shutting down sockets
[   98.719313][ T5613] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.728470][ T5613] Buffer I/O error on dev nbd2, logical block 0, async page read
[   98.742317][  T291] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[   98.747255][  T291] Buffer I/O error on dev nbd2, logical block 1, async page read
[   98.750251][  T291] Buffer I/O error on dev nbd2, logical block 2, async page read
[   98.753174][  T291] Buffer I/O error on dev nbd2, logical block 3, async page read
[   98.757074][ T5613] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.761365][ T5613] Buffer I/O error on dev nbd2, logical block 0, async page read
[   98.764966][ T5613] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.768433][ T5613] Buffer I/O error on dev nbd2, logical block 1, async page read
[   98.770956][ T5613] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.773655][ T5613] Buffer I/O error on dev nbd2, logical block 2, async page read
[   98.776517][ T5613] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.780584][ T5613] Buffer I/O error on dev nbd2, logical block 3, async page read
[   98.783349][ T5613] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.786453][ T5613] Buffer I/O error on dev nbd2, logical block 0, async page read
[   98.791195][ T5613] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.795009][ T5613] Buffer I/O error on dev nbd2, logical block 1, async page read
[   98.798939][ T5613] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.803020][ T5613] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.810188][ T5613] ldm_validate_partition_table(): Disk read failed.
[   98.816042][ T5613] Dev nbd2: unable to read RDB block 0
[   98.821203][ T5613]  nbd2: unable to read partition table
[   98.841784][ T5613] ldm_validate_partition_table(): Disk read failed.
[   98.845426][ T5613] Dev nbd2: unable to read RDB block 0
[   98.856443][ T5613]  nbd2: unable to read partition table
[   98.879243][ T5613] 
[   98.880179][ T5613] ======================================================
[   98.882765][ T5613] WARNING: possible circular locking dependency detected
[   98.885167][ T5613] syzkaller #0 Not tainted
[   98.886925][ T5613] ------------------------------------------------------
[   98.889140][ T5613] udevd/5613 is trying to acquire lock:
[   98.890831][ T5613] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690
[   98.893810][ T5613] 
[   98.893810][ T5613] but task is already holding lock:
[   98.896076][ T5613] ffffffff90173560 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[   98.899258][ T5613] 
[   98.899258][ T5613] which lock already depends on the new lock.
[   98.899258][ T5613] 
[   98.902561][ T5613] 
[   98.902561][ T5613] the existing dependency chain (in reverse order) is:
[   98.905604][ T5613] 
[   98.905604][ T5613] -> #9 (uevent_sock_mutex){+.+.}-{4:4}:
[   98.908624][ T5613]        __mutex_lock+0x1a3/0x1550
[   98.910418][ T5613]        kobject_uevent_net_broadcast+0x27e/0x560
[   98.912702][ T5613]        kobject_uevent_env+0x55c/0x9e0
[   98.914689][ T5613]        device_add+0x557/0xbb0
[   98.916220][ T5613]        device_create+0x269/0x300
[   98.917796][ T5613]        msr_device_create+0x33/0x50
[   98.919446][ T5613]        cpuhp_invoke_callback+0x445/0x860
[   98.921261][ T5613]        cpuhp_thread_fun+0x36b/0x780
[   98.922907][ T5613]        smpboot_thread_fn+0x541/0xa50
[   98.924526][ T5613]        kthread+0x388/0x470
[   98.925949][ T5613]        ret_from_fork+0x514/0xb70
[   98.927473][ T5613]        ret_from_fork_asm+0x1a/0x30
[   98.929079][ T5613] 
[   98.929079][ T5613] -> #8 (cpuhp_state-up){+.+.}-{0:0}:
[   98.931345][ T5613]        cpuhp_thread_fun+0x127/0x780
[   98.932981][ T5613]        smpboot_thread_fn+0x541/0xa50
[   98.934653][ T5613]        kthread+0x388/0x470
[   98.936122][ T5613]        ret_from_fork+0x514/0xb70
[   98.937694][ T5613]        ret_from_fork_asm+0x1a/0x30
[   98.939446][ T5613] 
[   98.939446][ T5613] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[   98.941830][ T5613]        cpus_read_lock+0x42/0x160
[   98.943404][ T5613]        static_key_slow_inc+0x12/0x30
[   98.945071][ T5613]        tcp_md5_do_add+0x1d4/0x390
[   98.946672][ T5613]        tcp_v6_parse_md5_keys+0x562/0x680
[   98.948477][ T5613]        do_tcp_setsockopt+0x12ec/0x2060
[   98.950229][ T5613]        do_sock_setsockopt+0x17c/0x1b0
[   98.951937][ T5613]        __x64_sys_setsockopt+0x13d/0x1b0
[   98.953702][ T5613]        do_syscall_64+0x15f/0xf80
[   98.955308][ T5613]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.957270][ T5613] 
[   98.957270][ T5613] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[   98.959626][ T5613]        lock_sock_nested+0x41/0x100
[   98.961271][ T5613]        inet_shutdown+0x6a/0x390
[   98.962863][ T5613]        nbd_mark_nsock_dead+0x2e9/0x560
[   98.964560][ T5613]        recv_work+0x1c2e/0x1d40
[   98.966062][ T5613]        process_scheduled_works+0xb5d/0x1860
[   98.967965][ T5613]        worker_thread+0xa53/0xfc0
[   98.969564][ T5613]        kthread+0x388/0x470
[   98.970993][ T5613]        ret_from_fork+0x514/0xb70
[   98.972580][ T5613]        ret_from_fork_asm+0x1a/0x30
[   98.974252][ T5613] 
[   98.974252][ T5613] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[   98.976624][ T5613]        __mutex_lock+0x1a3/0x1550
[   98.978219][ T5613]        nbd_queue_rq+0x37b/0x1100
[   98.979785][ T5613]        blk_mq_dispatch_rq_list+0xa70/0x1910
[   98.981653][ T5613]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[   98.983816][ T5613]        blk_mq_sched_dispatch_requests+0xd7/0x190
[   98.985832][ T5613]        blk_mq_run_hw_queue+0x348/0x4f0
[   98.987509][ T5613]        blk_mq_dispatch_list+0xd16/0xe10
[   98.989406][ T5613]        blk_mq_flush_plug_list+0x48d/0x570
[   98.991680][ T5613]        __blk_flush_plug+0x3ed/0x4d0
[   98.993456][ T5613]        __submit_bio+0x28d/0x580
[   98.995028][ T5613]        submit_bio_noacct_nocheck+0x2f4/0xa40
[   98.997224][ T5613]        block_read_full_folio+0x599/0x830
[   98.999129][ T5613]        filemap_read_folio+0x137/0x3b0
[   99.000905][ T5613]        do_read_cache_folio+0x358/0x590
[   99.002881][ T5613]        read_part_sector+0xb6/0x2b0
[   99.004649][ T5613]        adfspart_check_ICS+0xb1/0x960
[   99.006447][ T5613]        bdev_disk_changed+0x817/0x1770
[   99.008553][ T5613]        blkdev_get_whole+0x380/0x510
[   99.010328][ T5613]        bdev_open+0x31e/0xd30
[   99.011913][ T5613]        blkdev_open+0x470/0x610
[   99.013516][ T5613]        do_dentry_open+0x785/0x14e0
[   99.015329][ T5613]        vfs_open+0x3b/0x340
[   99.016951][ T5613]        path_openat+0x2e08/0x3860
[   99.018656][ T5613]        do_file_open+0x23e/0x4a0
[   99.020296][ T5613]        do_sys_openat2+0x113/0x200
[   99.022057][ T5613]        __x64_sys_openat+0x138/0x170
[   99.024192][ T5613]        do_syscall_64+0x15f/0xf80
[   99.025984][ T5613]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.028354][ T5613] 
[   99.028354][ T5613] -> #4 (&cmd->lock){+.+.}-{4:4}:
[   99.030898][ T5613]        __mutex_lock+0x1a3/0x1550
[   99.032910][ T5613]        nbd_queue_rq+0xc6/0x1100
[   99.034760][ T5613]        blk_mq_dispatch_rq_list+0xa70/0x1910
[   99.036974][ T5613]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[   99.039410][ T5613]        blk_mq_sched_dispatch_requests+0xd7/0x190
[   99.041941][ T5613]        blk_mq_run_hw_queue+0x348/0x4f0
[   99.044158][ T5613]        blk_mq_dispatch_list+0xd16/0xe10
[   99.046315][ T5613]        blk_mq_flush_plug_list+0x48d/0x570
[   99.048561][ T5613]        __blk_flush_plug+0x3ed/0x4d0
[   99.050649][ T5613]        __submit_bio+0x28d/0x580
[   99.052653][ T5613]        submit_bio_noacct_nocheck+0x2f4/0xa40
[   99.055046][ T5613]        block_read_full_folio+0x599/0x830
[   99.057360][ T5613]        filemap_read_folio+0x137/0x3b0
[   99.059557][ T5613]        do_read_cache_folio+0x358/0x590
[   99.061923][ T5613]        read_part_sector+0xb6/0x2b0
[   99.064031][ T5613]        adfspart_check_ICS+0xb1/0x960
[   99.066226][ T5613]        bdev_disk_changed+0x817/0x1770
[   99.068414][ T5613]        blkdev_get_whole+0x380/0x510
[   99.070658][ T5613]        bdev_open+0x31e/0xd30
[   99.072565][ T5613]        blkdev_open+0x470/0x610
[   99.074496][ T5613]        do_dentry_open+0x785/0x14e0
[   99.076488][ T5613]        vfs_open+0x3b/0x340
[   99.078058][ T5613]        path_openat+0x2e08/0x3860
[   99.079636][ T5613]        do_file_open+0x23e/0x4a0
[   99.081374][ T5613]        do_sys_openat2+0x113/0x200
[   99.083385][ T5613]        __x64_sys_openat+0x138/0x170
[   99.085443][ T5613]        do_syscall_64+0x15f/0xf80
[   99.087394][ T5613]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.089860][ T5613] 
[   99.089860][ T5613] -> #3 (set->srcu){.+.+}-{0:0}:
[   99.092509][ T5613]        __synchronize_srcu+0xca/0x300
[   99.094572][ T5613]        elevator_switch+0x1e8/0x7a0
[   99.096583][ T5613]        elevator_change+0x2cc/0x450
[   99.098577][ T5613]        elevator_set_default+0x36c/0x430
[   99.100685][ T5613]        blk_register_queue+0x3e9/0x4e0
[   99.102832][ T5613]        __add_disk+0x677/0xd50
[   99.104650][ T5613]        add_disk_fwnode+0xfb/0x480
[   99.106645][ T5613]        nbd_dev_add+0x72c/0xb50
[   99.108581][ T5613]        nbd_init+0x168/0x1f0
[   99.110372][ T5613]        do_one_initcall+0x250/0x870
[   99.112377][ T5613]        do_initcall_level+0x104/0x190
[   99.114471][ T5613]        do_initcalls+0x59/0xa0
[   99.116372][ T5613]        kernel_init_freeable+0x2a6/0x3e0
[   99.118543][ T5613]        kernel_init+0x1d/0x1d0
[   99.120407][ T5613]        ret_from_fork+0x514/0xb70
[   99.122315][ T5613]        ret_from_fork_asm+0x1a/0x30
[   99.124290][ T5613] 
[   99.124290][ T5613] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[   99.127283][ T5613]        __mutex_lock+0x1a3/0x1550
[   99.129276][ T5613]        elevator_change+0x1b3/0x450
[   99.131289][ T5613]        elevator_set_none+0xb5/0x140
[   99.133327][ T5613]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[   99.135755][ T5613]        nbd_start_device+0x17f/0xb10
[   99.137813][ T5613]        nbd_genl_connect+0x165b/0x1cf0
[   99.139927][ T5613]        genl_family_rcv_msg_doit+0x22a/0x330
[   99.142289][ T5613]        genl_rcv_msg+0x61c/0x7a0
[   99.144197][ T5613]        netlink_rcv_skb+0x232/0x4b0
[   99.146221][ T5613]        genl_rcv+0x28/0x40
[   99.147948][ T5613]        netlink_unicast+0x75c/0x8e0
[   99.149955][ T5613]        netlink_sendmsg+0x813/0xb40
[   99.151953][ T5613]        ____sys_sendmsg+0x972/0x9f0
[   99.153963][ T5613]        ___sys_sendmsg+0x2a5/0x360
[   99.155951][ T5613]        __x64_sys_sendmsg+0x1bd/0x2a0
[   99.158021][ T5613]        do_syscall_64+0x15f/0xf80
[   99.159979][ T5613]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.162454][ T5613] 
[   99.162454][ T5613] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[   99.165934][ T5613]        blk_alloc_queue+0x546/0x680
[   99.168061][ T5613]        __blk_mq_alloc_disk+0x197/0x390
[   99.170285][ T5613]        nbd_dev_add+0x499/0xb50
[   99.172207][ T5613]        nbd_init+0x168/0x1f0
[   99.174047][ T5613]        do_one_initcall+0x250/0x870
[   99.176015][ T5613]        do_initcall_level+0x104/0x190
[   99.178089][ T5613]        do_initcalls+0x59/0xa0
[   99.179931][ T5613]        kernel_init_freeable+0x2a6/0x3e0
[   99.182094][ T5613]        kernel_init+0x1d/0x1d0
[   99.183939][ T5613]        ret_from_fork+0x514/0xb70
[   99.185925][ T5613]        ret_from_fork_asm+0x1a/0x30
[   99.187961][ T5613] 
[   99.187961][ T5613] -> #0 (fs_reclaim){+.+.}-{0:0}:
[   99.190815][ T5613]        __lock_acquire+0x15a5/0x2cf0
[   99.192893][ T5613]        lock_acquire+0x106/0x350
[   99.194847][ T5613]        fs_reclaim_acquire+0x71/0x100
[   99.196928][ T5613]        kmem_cache_alloc_node_noprof+0x4a/0x690
[   99.198953][ T5613]        __alloc_skb+0x1d0/0x7d0
[   99.200615][ T5613]        alloc_uevent_skb+0x7d/0x230
[   99.202428][ T5613]        kobject_uevent_net_broadcast+0x2fa/0x560
[   99.204827][ T5613]        kobject_uevent_env+0x55c/0x9e0
[   99.206636][ T5613]        nbd_config_put+0x14c/0x580
[   99.208422][ T5613]        nbd_release+0xfe/0x140
[   99.210338][ T5613]        bdev_release+0x536/0x650
[   99.212208][ T5613]        blkdev_release+0x15/0x20
[   99.214088][ T5613]        __fput+0x44f/0xa60
[   99.215607][ T5613]        fput_close_sync+0x11f/0x240
[   99.217404][ T5613]        __x64_sys_close+0x7e/0x110
[   99.219285][ T5613]        do_syscall_64+0x15f/0xf80
[   99.221296][ T5613]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.223833][ T5613] 
[   99.223833][ T5613] other info that might help us debug this:
[   99.223833][ T5613] 
[   99.227685][ T5613] Chain exists of:
[   99.227685][ T5613]   fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex
[   99.227685][ T5613] 
[   99.232405][ T5613]  Possible unsafe locking scenario:
[   99.232405][ T5613] 
[   99.234843][ T5613]        CPU0                    CPU1
[   99.236696][ T5613]        ----                    ----
[   99.238472][ T5613]   lock(uevent_sock_mutex);
[   99.239957][ T5613]                                lock(cpuhp_state-up);
[   99.242154][ T5613]                                lock(uevent_sock_mutex);
[   99.244519][ T5613]   lock(fs_reclaim);
[   99.245923][ T5613] 
[   99.245923][ T5613]  *** DEADLOCK ***
[   99.245923][ T5613] 
[   99.248800][ T5613] 3 locks held by udevd/5613:
[   99.250407][ T5613]  #0: ffff88816a135350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650
[   99.253365][ T5613]  #1: ffff88816a183260 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0
[   99.256654][ T5613]  #2: ffffffff90173560 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[   99.260315][ T5613] 
[   99.260315][ T5613] stack backtrace:
[   99.262223][ T5613] CPU: 1 UID: 0 PID: 5613 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) 
[   99.262234][ T5613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   99.262240][ T5613] Call Trace:
[   99.262247][ T5613]  <TASK>
[   99.262253][ T5613]  dump_stack_lvl+0xe8/0x150
[   99.262268][ T5613]  print_circular_bug+0x2e1/0x300
[   99.262280][ T5613]  check_noncircular+0x12e/0x150
[   99.262291][ T5613]  __lock_acquire+0x15a5/0x2cf0
[   99.262301][ T5613]  ? lockdep_unlock+0x5d/0xd0
[   99.262307][ T5613]  ? __lock_acquire+0x146e/0x2cf0
[   99.262317][ T5613]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[   99.262329][ T5613]  lock_acquire+0x106/0x350
[   99.262337][ T5613]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[   99.262347][ T5613]  ? lock_acquire+0x106/0x350
[   99.262356][ T5613]  fs_reclaim_acquire+0x71/0x100
[   99.262367][ T5613]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[   99.262379][ T5613]  kmem_cache_alloc_node_noprof+0x4a/0x690
[   99.262395][ T5613]  ? __alloc_skb+0x1d0/0x7d0
[   99.262408][ T5613]  ? __local_bh_enable_ip+0xd0/0x130
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   99.262417][ T5613]  __alloc_skb+0x1d0/0x7d0
[   99.262427][ T5613]  alloc_uevent_skb+0x7d/0x230
[   99.262437][ T5613]  kobject_uevent_net_broadcast+0x2fa/0x560
[   99.262446][ T5613]  kobject_uevent_env+0x55c/0x9e0
[   99.262456][ T5613]  nbd_config_put+0x14c/0x580
[   99.262467][ T5613]  nbd_release+0xfe/0x140
[   99.262475][ T5613]  ? __pfx_nbd_release+0x10/0x10
[   99.262482][ T5613]  bdev_release+0x536/0x650
[   99.262496][ T5613]  ? __pfx_blkdev_release+0x10/0x10
[   99.262503][ T5613]  blkdev_release+0x15/0x20
[   99.262511][ T5613]  __fput+0x44f/0xa60
[   99.262523][ T5613]  fput_close_sync+0x11f/0x240
[   99.262532][ T5613]  ? __pfx_fput_close_sync+0x10/0x10
[   99.262541][ T5613]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.262549][ T5613]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.262556][ T5613]  __x64_sys_close+0x7e/0x110
[   99.262566][ T5613]  do_syscall_64+0x15f/0xf80
[   99.262583][ T5613]  ? trace_irq_disable+0x3b/0x140
[   99.262602][ T5613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.262612][ T5613] RIP: 0033:0x7fb9261170a8
[   99.262622][ T5613] Code: 48 8b 05 83 9d 0d 00 64 c7 00 16 00 00 00 83 c8 ff 48 83 c4 20 5b c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 5b 48 8b 15 51 9d 0d 00 f7 d8 64 89 02 48 83
[   99.262629][ T5613] RSP: 002b:00007fff941f1cc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[   99.262638][ T5613] RAX: ffffffffffffffda RBX: 00007fb92650dae0 RCX: 00007fb9261170a8
[   99.262644][ T5613] RDX: 0000000003938700 RSI: 000000000aba9500 RDI: 0000000000000008
[   99.262649][ T5613] RBP: 000055e770b3d780 R08: 0000000000000001 R09: a98ef89dba19f138
[   99.262654][ T5613] R10: 00000000000001b6 R11: 0000000000000246 R12: 0000000000000005
[   99.262659][ T5613] R13: 000055e770b34950 R14: 0000000000000008 R15: 000055e770b1d910
[   99.262667][ T5613]  </TASK>
[   99.277020][ T7255] netlink: 'syz.2.492': attribute type 8 has an invalid length.
[   99.277692][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.279275][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'.
[   99.434413][ T7255] bond0: entered promiscuous mode
[   99.436045][ T7255] bond_slave_0: entered promiscuous mode
[   99.437812][ T7255] bond_slave_1: entered promiscuous mode
[   99.440457][ T7255] gretap0: entered promiscuous mode
[   99.442674][ T7255] team0: entered promiscuous mode
[   99.444318][ T7255] team_slave_0: entered promiscuous mode
[   99.446077][ T7255] team_slave_1: entered promiscuous mode
[   99.449081][ T7255] hsr1: entered promiscuous mode
[   99.504925][  T949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  100.541385][  T949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.578478][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.658422][ T5686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.618324][  T949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.780220][  T949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  103.420752][ T5686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  103.658630][  T949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.058810][ T5686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.708337][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  105.738451][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  105.818426][ T5686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  106.778370][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  107.828288][  T949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.458281][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.858485][  T949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.863189][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
