last executing test programs:

1.889716993s ago: executing program 1 (id=286):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x4c, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x47}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="63392200b52c"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004851}, 0x4008090) (async)
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x4c, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x47}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="63392200b52c"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004851}, 0x4008090)

1.726276114s ago: executing program 1 (id=288):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r4=>0x0})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r5, &(0x7f0000000200)=0x5, 0xfffffe97)
sendmsg$kcm(r5, &(0x7f0000000380)={&(0x7f0000000100)=@ieee802154={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000180)="01f2f6753a", 0x5}, {&(0x7f00000001c0)="37e423f23916443152c0c3357da7dbeb177594dafc5b843b3a493b182a56ac8a06834ba01413fee5bf86378bf0b3efebdc13c10a826d7a7027e3878a7f67bbb62aaf4d54bb4be253d80116fab1", 0x4d}, {&(0x7f0000001480)="712e30eab985d9c79c118a78e97e0e952f1626b8e14973f0b6a9acf43a345ce87ffd7dfd0f8886fdc0d5a304e99d001611d1d9c67053b9cd32b90b835db47d0f755a1ffdc7231bfe30584946b964117defd62b9c3a1641d578dcb4a15f73691cc6731074418e3aab414a6d224745aee5db2b7a033e4ce139ab5c34a297fe3d021dc794", 0x83}, {&(0x7f0000000300)="85ea93a358f3a14b81e9407c0df453ade1d22d1fc0aa93e0758ee53a4bc201cf1bce0bbe8a11d65074f79749ad69e7c6f446d50b4db63a385c2ba68869903b", 0x3f}, {&(0x7f0000001540)="68773bc22d19a3e2974ff5fc61f11e819a506af8b0d61ee18484bc21d2a88ffb9b46f489dbee128c5478e1594b33a45fd327d92cf8bfa3cc792268e6b9ca45aeab302da5ce068f1de8cb4365e7de04cd92f30ac26a0175ed5dc3456271fb1fdaf6337c8a8d3ee37b34a5b65e9dc027e0cb500838ea0e1ac4c6b75536d456fb0e4b3499994ba0f046f98c5d7516474b", 0x8f}, {&(0x7f0000001600)="084f9cf420b50e679ed57f18df8936170a5732e0571dd9adc2caf2f180436a5ef2024ab1fb7be9e8c222d747695481fcb4cfba8284dfdb34bae5f6c3e732e58e3ed00b86b00eb4bd5eef692d99bb6f1128e749bcaa0cf1d80645501353e343f57e57dd49d6d4d2c52dcbdf2efc288f", 0x6f}], 0x7, &(0x7f0000001700)=[{0xd8, 0x192, 0x581d, "87728aa1b859122500a8cc9ff4b810f230af059e0b9d95853da0520367573e39a651c99c1399850cdab09c15a2fcfdfc976f6f65ab4da9f1a7927ca63fc16b193f17ce0c3419168c7c71a8635a7570e1de612dbf6c3e7d2abf8ef5af39cc17304ec452db879fa6c54473130b1182b7a9d310612e4b29192462752a7717faf00ee8355be7f1cdaa8a50cb34207f1ff3099532e30c458b8ec8d61a56abd15379ee40190d63dc9f4bc80c4cc2ae327591159b0e8c7f12843792fa3afa31820912c1178a2fd5f835"}, {0xa8, 0x102, 0x3, "24b2885bb3d9717f024c48d48bbf952db118c59d8b2eb1ff4cc86c18c167a885c35ef93c649b89a0b6a58b223d8df690d81ebed00279bd7f50b220b64658f4a632353498cea00a3af48fa1c4d3defdef3a17755b118d1c874ebbea2e4c850eb19e80d74cf5b0b263192c5045228d640eaa3192c4f18c89f688780831dfecb48f81c7bc0b37f810002eca3602056b7c2455b79b5b50097f"}, {0x58, 0x29, 0xa57, "43723e67dbf9c4dbc76654033e07fc51b9360c2db88f5ef5ffbda1dc3f1e52f34298e7131197927b3ecdffc9ae6e9a836f0afd7cd1b548927b5ab99121464eebba0f8ec3a2f8"}, {0xc8, 0x11, 0x7, "757e8b87987048c955369286937f71ec56d2120783b5d9b2e5333929a27be468b2d0b21e41cc3f3954cf29f420b3627798061799c26fa0b38215e8a43a93187cc04477bd5a9c9c4e09707284cfa82a4480112d7bde401b4e5001c806cf197ff143db92e34139e0b418b722f36d92f4be32e660e1b41a9b192b7514ca14dca870b8ced3d209fce5f3a80f0c8f2b2fb22241f4cf47c490dd8ef8675e3e313920cf3137a1dda0228246f4361b82c3615431e08e"}, {0xc8, 0x10c, 0xffff, "1859531d22db7d7df6c1d85fd5c468e955a54360c988d4f850c90e3ed46fe874376980be0990776b0c025c1c2e2d881bac17ad2f99f32c0a8160c3c91e0c6ca9e6f4b1fe82a2cfb47a3a3244b0c2fef24fe4d6d7f3b6feaf6a38d73e6ced6e844c1c76a69e462803d4cdbb7b651c35e707733189ea09ca1220b82895e83757fc53ae40a553d947f4e531c91e2375244c18500eba7e72efdca6ae0f20faa25ac7de474820f50dd57746c6516299ecb8587532"}, {0xe8, 0x107, 0xc000, "0b332f7fede3e6acaa20325c81d4fbd8290e180c0b426e8978951e23809e9fe5aeeaffb59bff7420f9e54623e7ed0e917465d2ee6f3c72956c41e75625f125559938bd66befd15f88d2607f4bfb5c8664fe9fe0e0a05813c07cdc3184e3d6e80f5fbad4632cd575101dc2930b6c2ce5636a5806e6291bf375aad6d126dd94184e42376fc202c670a432777f2d7c73fbd8c40f02966ef665e9c938f42a08748eecafb44091ae205ac455da46af5791aac0bc1788fb45eb9afddba7e139bbb44148ad06b767e2f06bcbe13a59b12e1260a7ea5e7"}], 0x450}, 0x400c000)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000000c0)=[{0x0, 0x3, {0x1, 0x0, 0x3}, {0x0, 0xff}, 0xff, 0x7f}, {0x2, 0xffffffffffffffdf, {0x2, 0x1, 0x6}, {0x1, 0x0, 0x5}, 0x2, 0x1}], 0x40)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840)

1.65056918s ago: executing program 1 (id=290):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000019c0)={r3, 0x4}, 0x8) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x33}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)

786.720817ms ago: executing program 1 (id=311):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x11, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x8}, @generic={0x1, 0x9, 0x8, 0x5, 0x2}, @alu={0x4, 0x0, 0xa, 0x5, 0x9, 0xfffffffffffffffe, 0x4}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x32a020ee}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x84, &(0x7f0000000180)=""/132, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x1, 0xf, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x2, 0xb, 0x6}, {0x80, 0x5, 0x2, 0x6}], 0x10, 0x9}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r1, 0xf, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0}, 0x40)
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x8}, 0x18)
r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000600)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@map=r4, r2, 0x5, 0x2000, 0x0, @value=r5, @void, @void, @void, r3}, 0x20)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633005fd05426b922b88f42d2095d80000000ffffffffffffb6c011000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x88645b60dd7dd825}, 0x0)

722.004186ms ago: executing program 1 (id=314):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010700, 0x0)
sendto$inet6(r0, &(0x7f00000004c0)='4', 0x1, 0x4, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, 0x0, 0x0)

626.644614ms ago: executing program 0 (id=316):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/7, 0x7}, {&(0x7f00000000c0)=""/130, 0x82}], 0x2, &(0x7f00000001c0)=""/69, 0x45}, 0x2}, {{&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/63, 0x3f}, {&(0x7f0000000300)=""/37, 0x25}, {&(0x7f0000000340)=""/163, 0xa3}, {&(0x7f0000000400)=""/87, 0x57}, {&(0x7f0000000480)}], 0x5, &(0x7f0000000540)=""/137, 0x89}, 0x9}], 0x2, 0x2023, &(0x7f00000006c0)={r1, r2+10000000})
r4 = accept4$netrom(r3, &(0x7f0000000700)={{0x3, @netrom}, [@rose, @null, @rose, @null, @rose, @netrom, @default, @bcast]}, &(0x7f0000000780)=0x48, 0x800)
recvfrom(r4, &(0x7f00000007c0)=""/146, 0x92, 0x2000, &(0x7f0000000880)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0xf58, 0x3, 0x1, {0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x80)
bind$inet(r3, &(0x7f0000000900)={0x2, 0x4e22, @remote}, 0x10)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, 0x1, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x23fd8401}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000a40))
r5 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r5, &(0x7f0000001240)=[{{&(0x7f0000000a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/209, 0xd1}], 0x1, &(0x7f0000000c40)=""/81, 0x51}, 0x4}, {{&(0x7f0000000cc0)=@alg, 0x80, &(0x7f0000001140)=[{&(0x7f0000000d40)=""/78, 0x4e}, {&(0x7f0000000dc0)=""/94, 0x5e}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)=""/64, 0x40}, {&(0x7f0000000ec0)=""/114, 0x72}, {&(0x7f0000000f40)=""/246, 0xf6}, {&(0x7f0000001040)=""/145, 0x91}, {&(0x7f0000001100)=""/36, 0x24}], 0x8, &(0x7f00000011c0)=""/112, 0x70}, 0x1}], 0x2, 0x41, 0x0)
pselect6(0x40, &(0x7f00000012c0)={0x2, 0x5, 0x6, 0x6, 0x5, 0x2, 0x7, 0x5}, &(0x7f0000001300)={0x3, 0xffff, 0x6, 0x5, 0x5, 0xf903, 0x70f4466f, 0x304291a2}, &(0x7f0000001340)={0x8, 0x800, 0xeaf, 0xb46, 0x7f, 0xffffffffffffffff, 0x68c, 0x9}, &(0x7f0000001380), &(0x7f0000001400)={&(0x7f00000013c0)={[0x2]}, 0x8})
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001440)={0x1b, 0x0, 0x0, 0xffff0000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50)
r7 = bpf$ITER_CREATE(0x21, &(0x7f00000014c0), 0x8)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001780)={'team0\x00', <r8=>0x0})
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001800)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000018c0)={{0x1, <r10=>0xffffffffffffffff}, &(0x7f0000001840), &(0x7f0000001880)}, 0x20)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001900)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001980)={0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a40)={{0x1, <r13=>0xffffffffffffffff}, &(0x7f00000019c0), &(0x7f0000001a00)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b00)={{r5, <r14=>0xffffffffffffffff}, &(0x7f0000001a80), &(0x7f0000001ac0)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c00)={0x18, 0x2f, &(0x7f0000001500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffa6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @alu={0x3, 0x1, 0x6, 0x7, 0x6, 0x30, 0xffffffffffffffff}, @exit, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0xae}, @call={0x85, 0x0, 0x0, 0xe}, @printk={@ld}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001680)='syzkaller\x00', 0x7, 0x98, &(0x7f00000016c0)=""/152, 0x41100, 0x5f, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x1, 0x4, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001b40)=[0x1, r9, r5, r10, r11, r12, r13, r14, r3], &(0x7f0000001b80)=[{0x0, 0x1, 0xd, 0x9}, {0x5, 0x4, 0x8, 0xb}, {0x5, 0x4, 0x5, 0xcd94c9548a4a8633}, {0x4, 0x1, 0x3}, {0x5, 0x3, 0x5, 0x5}, {0x0, 0x4, 0x10, 0xb}, {0x4, 0x2, 0xf, 0x8}], 0x10, 0x9}, 0x94)
r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000001d00), r3)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x38, r15, 0x301, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x200008c5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001e00), r3)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r7)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001ec0)={'wlan1\x00', <r17=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r7, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x24, r16, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r17}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x40000)
connect$pppoe(r3, &(0x7f0000001fc0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'ip6tnl0\x00'}}, 0x1e)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002240)={0x1, <r18=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x4, 0x10, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, @printk={@d}, @exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}]}, &(0x7f0000002080)='GPL\x00', 0x4, 0xff, &(0x7f00000020c0)=""/255, 0x41100, 0x1, '\x00', r8, @fallback=0x9, r7, 0x8, &(0x7f00000021c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000002200)={0x2, 0x3, 0x8, 0x2}, 0x10, r18, r9, 0x0, &(0x7f0000002280)=[r11, r9, r9], 0x0, 0x10, 0x4}, 0x94)

625.520551ms ago: executing program 1 (id=317):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000008900000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x30b)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x25, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, 0xffc0}, 0x90)
write$tun(r1, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r0}, 0x18)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000000c0)=r4)
socket$nl_generic(0x10, 0x3, 0x10)

560.717119ms ago: executing program 0 (id=319):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000800095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r0 = socket(0x10, 0x803, 0x0) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x3, 0x9}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000047c0)=""/4060, 0xfdc}, {&(0x7f00000037c0)=""/4062, 0xfde}, {&(0x7f0000000700)=""/244, 0xf4}, {&(0x7f00000011c0)=""/209, 0xd1}], 0x4}, 0x40000100) (async)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async)
bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async)
bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) (async)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) (async)
syz_emit_ethernet(0x32, &(0x7f0000000a00)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x4000, 0x17c1, 0x3, 0x0, @gue={{0x2, 0x1, 0x2, 0x5, 0x100}}}}}}}, 0x0) (async, rerun: 64)
ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f00000000c0)) (async, rerun: 64)
bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async)
bind$tipc(r4, 0x0, 0x0) (async)
sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r7, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000003780)=""/4097, 0x1001}, {&(0x7f00000002c0)=""/177, 0xe0}], 0x3}, 0x4}], 0x4000000000000a0, 0x40010000, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003840)=@newtfilter={0x38, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x80000000}]}}]}, 0x38}}, 0x20008050)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@security={'security\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0xd8, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x4, 0x9, 0x2}}}, {{@ipv6={@remote, @local, [0xff000000, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00, 0xffffffff], 'sit0\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x62, 0x69, 0x3, 0x7a}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d4], 0x2, 0x62, 0x1}}, @common=@hl={{0x28}, {0x1, 0x5}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x7, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x5543}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)

490.441496ms ago: executing program 0 (id=321):
socket(0x10, 0x3, 0x4)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x10}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3fffffc}]}]}]}}]}, 0xa4}}, 0x0)
syz_emit_ethernet(0xe6, &(0x7f0000000bc0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0xb0, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1f, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x2, "00f56c5d539f646b60a8fbff2508e401fc"}, {0x0, 0x7, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e"}]}}}}}}, 0x0)

489.635218ms ago: executing program 0 (id=322):
sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0x42c, 0x3f4, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x1, 0x40, [0x0, 0x400000, 0x5, 0x5, 0x3, 0x7, 0xb2fc, 0x6, 0x9, 0x0, 0x73ac, 0x7, 0x5, 0x40800000, 0x100, 0x9, 0x1c, 0x8000, 0x6, 0x7, 0x7, 0x9, 0x2c5dbe89, 0x3, 0x72e, 0x7, 0xe3, 0x7fff, 0x421, 0x2bf, 0xffff79d5, 0xfffffffb, 0xffffffea, 0x6, 0x9, 0x3, 0xfffffffe, 0x8, 0xa, 0x1, 0x2, 0x3, 0x0, 0x9, 0x9, 0x1b7, 0x6, 0x7, 0x81, 0x1c39, 0x30, 0x1, 0xb9, 0x2, 0x5, 0xf, 0xffffffb1, 0x5, 0x7, 0x610, 0x7, 0x9, 0x4, 0x7], [0x3, 0x6, 0x6, 0x9, 0x800, 0x8000, 0x2, 0x9a9, 0x3, 0x9, 0x1, 0x7, 0xde0, 0x0, 0x8, 0x4, 0x9, 0x1, 0x1, 0x7, 0x1, 0x1ff, 0x4, 0x2, 0x7, 0x10001, 0x7f, 0x5, 0x9, 0x0, 0x3800000, 0x9, 0xf12a, 0x3, 0x5, 0x800, 0x0, 0x7, 0xd81, 0x9, 0xbb, 0x6, 0x1, 0x17, 0x8, 0x7, 0xcefe, 0x80000001, 0x7f0, 0x80000000, 0x4, 0x5, 0x80000, 0x4, 0x9, 0xf, 0x6, 0x9, 0x7fffffff, 0xfffffffb, 0x463d, 0x83c, 0x80000001, 0x1], [0x81, 0x0, 0x4, 0x6cc00000, 0xc, 0x7, 0x5, 0x245a, 0x1, 0x8, 0x2, 0x0, 0x0, 0xfffffffd, 0x6, 0xe, 0x2, 0xfb, 0x5, 0xfff, 0x5, 0xeefb, 0x8, 0x9, 0x7, 0x4, 0x6, 0x5, 0x2, 0x70, 0x3, 0x81, 0x80, 0x6, 0xffffffff, 0xe12, 0x7, 0x7, 0x6, 0x4, 0x7, 0x3, 0x1, 0xea0, 0xbb5e, 0x80000001, 0x7, 0x6, 0x41, 0xac69, 0x1ff, 0x4, 0x3, 0x10, 0xbcb6, 0x7, 0x1, 0x7, 0x2, 0x2, 0x8f, 0x1, 0x6], [0x2, 0x8000, 0xb10a, 0x0, 0x7, 0xc0, 0x2, 0x7, 0x6, 0x8, 0x8001, 0x101, 0x7, 0x7, 0x3, 0x100, 0x9, 0xf2a, 0x8, 0xe, 0x6, 0x7, 0x10000, 0x1, 0x7, 0x2, 0xffff, 0x6, 0xd84e, 0x80000003, 0xffffffff, 0xdf, 0x1, 0x3, 0x94, 0x9, 0x1000, 0x4, 0x1, 0xcad, 0xab, 0x7ff, 0x2, 0x9302, 0xfffffffb, 0xe, 0x7, 0x2000000, 0x9, 0x4, 0x80, 0x6, 0x63371e31, 0x7, 0x5, 0x101, 0x4, 0x80000000, 0x9, 0x8, 0x7, 0x6, 0x6, 0x61], 0xa, ['bpq0\x00', 'syz1\x00']}, ["", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x40000}, 0x8005)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r0, 0x0, 0x24000050)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xe0001b59, @local, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev}, {@remote}, {@private}]}]}}}}}}}, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES8=r5], 0x1c}}, 0x0)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r6, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000440)=""/128, &(0x7f00000004c0)=0x80)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
socket$inet_udp(0x2, 0x2, 0x0)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'erspan0\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x34, r9, 0x1, 0x70bd2d, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x34}, 0x1, 0xa60d000000000000}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r13, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={0x1, @default, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

380.931872ms ago: executing program 2 (id=324):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200"], 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fb", 0x59}], 0x1}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0), 0xa7)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x60, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0xf)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x7fff, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000004c0)={0xfffffff8, 0x3ff, 0x3fe}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket(0xa, 0x3, 0x3a)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b8000000000000000800000000000000", 0x24)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan1\x00'})
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r8)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0x1d4, 0x30, 0x800, 0x0, 0x25dfdbfe, {}, [{0x1c0, 0x1, [@m_mirred={0x170, 0xc, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ad, 0x7, 0x6, 0x7fff, 0x3}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x2a8c9b3, 0x30000005, 0x8000, 0x8000}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6, 0x5, 0xd0, 0x4e84}, 0x0, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xf, 0x3, 0x76}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0x40, 0x3, 0x3, 0xffffffc0}, 0xd620ae289c7f86f2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x2, 0x1, 0xfffffffb, 0x1}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x4, 0x1, 0x8, 0x4}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x7, 0x20000000, 0x0, 0xd}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x6, 0x0, 0xf09, 0xe}, 0x6, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa727, 0x7, 0x2, 0x9, 0x81}, 0x1, r3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0xd, 0x6, 0x6, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x8010}, 0xc0)
r11 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0x7, &(0x7f0000000440)={0x4, 0xda83, 0x5, 0x80000000}, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fcdbdf251800000008000300", @ANYRESHEX=r10, @ANYBLOB="1800000008000100010044000000002300000000", @ANYRES8=r1], 0x34}, 0x1, 0x0, 0x0, 0xe9fe36b4ab41f7a8}, 0x4800)

220.373535ms ago: executing program 2 (id=325):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e20, 0xd6d1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, 0x0, 0x0, 0x12, 0x0, "34d50a26c7284cc32d8dabb38c500451d1eb093ce26c875c358e98dfd1f2977f02750d920910ce42ba4205d576f110c07bb23faeb2b32c3212b104b3aa3bc79a5ca4edc1fb22a3bf100306dc14b1d4d6"}, 0xd8) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e20, 0xd6d1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, 0x0, 0x0, 0x12, 0x0, "34d50a26c7284cc32d8dabb38c500451d1eb093ce26c875c358e98dfd1f2977f02750d920910ce42ba4205d576f110c07bb23faeb2b32c3212b104b3aa3bc79a5ca4edc1fb22a3bf100306dc14b1d4d6"}, 0xd8)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0)
write$tun(r1, &(0x7f00000001c0)={@val={0x0, 0x1c}, @val={0x0, 0x1, 0x5, 0xbbb, 0x0, 0x10}, @x25={0x1, 0x0, 0x17, "ffe843bd0f11063d58207e31321f2364de17efc1f76e2e99643d8294ff5b0c0cbb7c2159d4d5e2d276ea9dac671773e01552720d04c45315e1f6df16dbc4bde18b67016aceda01838edad8f80c1bd94683a5df000e335b5f86e2e0b038b55565553750892cc480ee40b78f0a18d7ec18cb7cf0be0a5aec5a9fb13dc99f67b9bd868e2b9bc400e442b52e8f63f798e358f16c693986e976f66f4168caa2e8155956676340"}}, 0xb5)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
select(0x40, &(0x7f0000000280)={0x0, 0x5, 0x9, 0x7, 0xfffffffffffffffa, 0x6, 0x100000000, 0x7fffffff}, &(0x7f00000002c0)={0x1, 0x6, 0x4, 0x8, 0x8, 0x53f, 0xfffffffffffffffe, 0xf}, &(0x7f0000000300)={0x8, 0x68713c53, 0xba, 0x10000, 0xe, 0x5, 0x3, 0x800}, &(0x7f0000000340)={0x77359400}) (async)
select(0x40, &(0x7f0000000280)={0x0, 0x5, 0x9, 0x7, 0xfffffffffffffffa, 0x6, 0x100000000, 0x7fffffff}, &(0x7f00000002c0)={0x1, 0x6, 0x4, 0x8, 0x8, 0x53f, 0xfffffffffffffffe, 0xf}, &(0x7f0000000300)={0x8, 0x68713c53, 0xba, 0x10000, 0xe, 0x5, 0x3, 0x800}, &(0x7f0000000340)={0x77359400})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r0}, 0x8) (async)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r0}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x6}}, @ptr={0x8, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x2, 0x9}, @fwd={0xf}]}, {0x0, [0x61, 0x0, 0x61, 0x5f, 0x0]}}, &(0x7f0000000400)=""/210, 0x5f, 0xd2, 0x1, 0x3, 0x10000, @value=r2}, 0x28)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000580)={0xa}, 0x4)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000600)='cgroup.kill\x00', 0x0, 0x0) (async)
r5 = openat$cgroup_ro(r4, &(0x7f0000000600)='cgroup.kill\x00', 0x0, 0x0)
recvmsg$qrtr(r5, &(0x7f0000003d80)={&(0x7f0000000640), 0xc, &(0x7f0000002b00)=[{&(0x7f0000000680)=""/220, 0xdc}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/92, 0x5c}, {&(0x7f0000001800)=""/116, 0x74}, {&(0x7f0000001880)=""/142, 0x8e}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/22, 0x16}, {&(0x7f0000002980)=""/52, 0x34}, {&(0x7f00000029c0)=""/238, 0xee}, {&(0x7f0000002ac0)=""/42, 0x2a}], 0xa, &(0x7f0000002bc0)=[{0x1010, 0x0, 0x0, ""/4096}, {0xd8, 0x0, 0x0, ""/200}, {0xa8, 0x0, 0x0, ""/152}, {0x30, 0x0, 0x0, ""/32}], 0x11c0, 0x100}, 0x38, 0x40002183)
setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000003dc0)="803b05fc2fba058bbd1053c6a88163878f98bbc334bcd995325562a5c73aae2efe8f31f4ca874ed051a925d551b33460ca85f626fa97296c5ce081a3d3cc06aed393aaacb5dbd132bd1cc8ca2487e691b40bbe8300d66501937884fbec6fb34142e98dc0a158ffbe496a35d333ddc6795f8164b7", 0x74)
ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000003e40)={0x3, 0xcc, "0e41e0bd70849c9b8b7257fcc0455b6438307fb26a34b4dabe67c06cb5956f0910e09c4706d10c39a310db214bd7cbce993b19fd0a24e0b787ab755c4343e18d7852d7da0649b063ba92ccac2a4cd1ceafb8be45474c0fa8714b99b961b2c8d932335de8808a7f6ea77e1b6d108e0fb066578c21b1e096a85235bb50f4b1b94e5a01b16aa5f6b13b958f2d45f68757f13266a1b3e854ddfa5e56354307aea913d4e2cbca5601c83173ea03f43a80c45037a1af04e1b1549a017337bb4739c0d3a24d597112b353ab0340c108"}) (async)
ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000003e40)={0x3, 0xcc, "0e41e0bd70849c9b8b7257fcc0455b6438307fb26a34b4dabe67c06cb5956f0910e09c4706d10c39a310db214bd7cbce993b19fd0a24e0b787ab755c4343e18d7852d7da0649b063ba92ccac2a4cd1ceafb8be45474c0fa8714b99b961b2c8d932335de8808a7f6ea77e1b6d108e0fb066578c21b1e096a85235bb50f4b1b94e5a01b16aa5f6b13b958f2d45f68757f13266a1b3e854ddfa5e56354307aea913d4e2cbca5601c83173ea03f43a80c45037a1af04e1b1549a017337bb4739c0d3a24d597112b353ab0340c108"})
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000003f40)={'veth0\x00', @local})
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003fc0), r5)
sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000004080)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004040)={&(0x7f0000004000)={0x14, r6, 0x10, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000844}, 0x40) (async)
sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000004080)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004040)={&(0x7f0000004000)={0x14, r6, 0x10, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000844}, 0x40)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000040c0)={0x77359400}, 0x10)
getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000004280)=<r7=>0x0, &(0x7f00000042c0)=0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000004380)={0xffff, <r8=>0x0}, 0x8)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000004440)={{r5, <r9=>0xffffffffffffffff}, &(0x7f00000043c0), &(0x7f0000004400)='%-010d \x00'}, 0x20)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000044c0)=@o_path={&(0x7f0000004480)='./file0\x00', 0x0, 0x0, r2}, 0x18) (async)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000044c0)=@o_path={&(0x7f0000004480)='./file0\x00', 0x0, 0x0, r2}, 0x18)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000004540)=@generic={&(0x7f0000004500)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x16, 0x4, &(0x7f0000004100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x0, 0xb, 0xc, 0x3, 0x8, 0x8}]}, &(0x7f0000004140)='syzkaller\x00', 0x0, 0xf0, &(0x7f0000004180)=""/240, 0x41000, 0x0, '\x00', r7, @flow_dissector=0x11, r5, 0x8, &(0x7f0000004300)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000004340)={0x2, 0x7, 0x9, 0x1e}, 0x10, r8, r5, 0x0, &(0x7f0000004580)=[0xffffffffffffffff, 0xffffffffffffffff, r5, r9, r5, r5, r10, r11, r5, r5], 0x0, 0x10, 0x52b}, 0x94)
syz_genetlink_get_family_id$ipvs(&(0x7f00000046c0), r5) (async)
r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000046c0), r5)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000047c0)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004780)={&(0x7f0000004700)={0x70, r12, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc376}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x45}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xbc}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x70}, 0x1, 0x0, 0x0, 0x40084}, 0x40)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000004800)={{0x0, 0x9, 0x0, 0x1, 0x4, 0x0, 0x8, 0x0, 0x5, 0x401, 0x100, 0x6, 0x1, 0x4, 0x400}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000004800)={{0x0, 0x9, 0x0, 0x1, 0x4, 0x0, 0x8, 0x0, 0x5, 0x401, 0x100, 0x6, 0x1, 0x4, 0x400}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)

219.444509ms ago: executing program 0 (id=326):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, <r3=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r0, 0x1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x2}, @exit, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)

148.870587ms ago: executing program 2 (id=327):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async, rerun: 64)
r1 = socket(0x10, 0x80002, 0x0) (rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRESOCT=r1], 0x48}}, 0x840) (async)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0x3, &(0x7f0000000140)=0x2) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001a0001000000000000000000022020", @ANYRESDEC=r0], 0x38}}, 0x4000000) (async)
syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0)

147.790096ms ago: executing program 0 (id=328):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast})
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x78, r5, 0x1, 0x80000000, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff7}]}, 0x78}, 0x1, 0x0, 0x0, 0x4081}, 0x0)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', <r8=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r6, 0x10, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40040)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="0c6213ad51802cb78781adbd665482a251c0679558c254f6bda5daf3fd2e9fb622a38077172308dfcfb980a52bf3aab1fff0a69ac6d63c2bc63fa403083b706694d18a8aef841477d72791d945", 0x4d}, {&(0x7f00000000c0)="e8ad14d36170ee9e3143c141c0d9b42fd5c7d4813b966e", 0x17}, {&(0x7f0000000100)="b29bf8ec99279dac3190bafc9fe6b9131cee01f07609b56db0f79cd07929790959a3d98710bdead2294485d7ed00dbfb815c4d3810010d608f21321ad5789f717a39954bb1326d11b9b35b5f9e8504f4f8bc1cca728e3663acf76e214473081b1decf7f39c09319006800a92f8bcfc545ced63c54300d7bbc7", 0x79}], 0x3, &(0x7f00000001c0), 0x0, 0x800}], 0x1, 0x4040)
syz_emit_ethernet(0x6e, &(0x7f0000000440)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, "f762", "c40bf8", 0x6006, "3ecbba43d33ef8394aead6e4c9ec9be3dff610c37fc8ef47ae7e5a0ec128476c87e28dc82448f7b23b373052bf9bbbc9a5e208f78e67c1d81b6071ae3f1cc9f5019a3417876faeaa1274c5f977964305e687a360bbe763"}}}}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x7, @mcast2, 0xfffffff0}], 0x1c)
sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000009001c00028008000d0006"], 0x4c}}, 0x0)

80.157976ms ago: executing program 2 (id=329):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
shutdown(r0, 0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="019800000000000020001280080001070000001f1400028008000700ac1414000800010091fedbfa774944497702a55c30dcc6409a67a61e433a9617e21d7d1931ca7d0326e23e17741ea5a71294ded7082903f102ffe0401a0c2c3bac8313d8326a", @ANYRES32=r4, @ANYBLOB], 0x40}}, 0x0)
sendto$packet(r1, &(0x7f0000000000)='1', 0x26, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14)
sendmsg$nl_xfrm(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@newspdinfo={0x1c, 0x24, 0x100, 0x70bd28, 0x25dfdbff, 0x7, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4010)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000081000000000000000400063010c200000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x4c, 0x4, 0x6, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1, 0x20, 0x3, 0x6}})

79.111411ms ago: executing program 2 (id=330):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200007f00000100000000000000008500000020000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r1 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r1, 0x114, 0x2718, &(0x7f0000000440)=""/102385, &(0x7f00000000c0)=0x18ff1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000007c0)="e02742e8680d81ff9782762f8edd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 2 (id=331):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x100, 0x0, 0xffffffff, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80000000}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FRA_SRC={0x14, 0x2, @private2}]}, 0x30}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:19994' (ED25519) to the list of known hosts.
syzkaller login: [   48.814372][ T5797] cgroup: Unknown subsys name 'net'
[   48.937407][ T5797] cgroup: Unknown subsys name 'cpuset'
[   48.941345][ T5797] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.602666][ T5797] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.917528][ T5211] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.921026][ T5211] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.923787][ T5211] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.927419][ T5211] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.930230][ T5211] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.974848][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.978068][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.981812][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.985357][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.988784][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.020131][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.023327][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.026913][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.029984][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.032830][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.124095][ T5808] chnl_net:caif_netlink_parms(): no params data found
[   55.232222][ T5813] chnl_net:caif_netlink_parms(): no params data found
[   55.237545][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.240480][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.243210][ T5808] bridge_slave_0: entered allmulticast mode
[   55.247065][ T5808] bridge_slave_0: entered promiscuous mode
[   55.256278][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.258569][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.260893][ T5808] bridge_slave_1: entered allmulticast mode
[   55.263938][ T5808] bridge_slave_1: entered promiscuous mode
[   55.328022][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.338873][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.381120][ T5808] team0: Port device team_slave_0 added
[   55.383440][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.386426][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.389092][ T5813] bridge_slave_0: entered allmulticast mode
[   55.391731][ T5813] bridge_slave_0: entered promiscuous mode
[   55.395951][ T5815] chnl_net:caif_netlink_parms(): no params data found
[   55.402593][ T5808] team0: Port device team_slave_1 added
[   55.405687][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.407982][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.410316][ T5813] bridge_slave_1: entered allmulticast mode
[   55.412902][ T5813] bridge_slave_1: entered promiscuous mode
[   55.469718][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.473084][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.478199][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.487989][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.500384][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.504182][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.507361][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.516871][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.558812][ T5813] team0: Port device team_slave_0 added
[   55.560923][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.563231][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.567272][ T5815] bridge_slave_0: entered allmulticast mode
[   55.569987][ T5815] bridge_slave_0: entered promiscuous mode
[   55.573842][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.576470][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.578841][ T5815] bridge_slave_1: entered allmulticast mode
[   55.581967][ T5815] bridge_slave_1: entered promiscuous mode
[   55.586585][ T5813] team0: Port device team_slave_1 added
[   55.620344][ T5808] hsr_slave_0: entered promiscuous mode
[   55.622821][ T5808] hsr_slave_1: entered promiscuous mode
[   55.646009][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.660066][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.662281][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.670563][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.675527][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.686355][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.688585][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.697299][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.733951][ T5815] team0: Port device team_slave_0 added
[   55.738212][ T5815] team0: Port device team_slave_1 added
[   55.796319][ T5813] hsr_slave_0: entered promiscuous mode
[   55.799091][ T5813] hsr_slave_1: entered promiscuous mode
[   55.801389][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.803941][ T5813] Cannot create hsr debugfs directory
[   55.808318][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.811323][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.822571][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.831995][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.834981][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.844369][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.932788][ T5815] hsr_slave_0: entered promiscuous mode
[   55.936289][ T5815] hsr_slave_1: entered promiscuous mode
[   55.939076][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.942005][ T5815] Cannot create hsr debugfs directory
[   56.011723][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.024112][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.042556][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.051698][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.138058][ T5813] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.146052][ T5813] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.161317][ T5813] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.176134][ T5813] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.201534][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.207554][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.216333][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.224024][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.276527][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.301457][ T5808] 8021q: adding VLAN 0 to HW filter on device team0
[   56.319974][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.323114][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.332472][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.352149][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.354431][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.388237][ T5813] 8021q: adding VLAN 0 to HW filter on device team0
[   56.403772][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.412468][  T236] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.414853][  T236] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.428876][  T236] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.431898][  T236] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.444242][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[   56.454299][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.457103][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.475788][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.478065][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.577395][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.637995][ T5808] veth0_vlan: entered promiscuous mode
[   56.657036][ T5808] veth1_vlan: entered promiscuous mode
[   56.690926][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.731589][ T5808] veth0_macvtap: entered promiscuous mode
[   56.741154][ T5808] veth1_macvtap: entered promiscuous mode
[   56.745690][ T5815] veth0_vlan: entered promiscuous mode
[   56.758036][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.766790][ T5815] veth1_vlan: entered promiscuous mode
[   56.776513][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.789982][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.794236][ T5808] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.798769][ T5808] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.801566][ T5808] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.804370][ T5808] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.833527][ T5815] veth0_macvtap: entered promiscuous mode
[   56.839057][ T5813] veth0_vlan: entered promiscuous mode
[   56.847488][ T5815] veth1_macvtap: entered promiscuous mode
[   56.863703][ T5813] veth1_vlan: entered promiscuous mode
[   56.902785][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.909708][  T236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.916127][  T236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.920571][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.931223][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.933972][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.939198][ T5815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.942780][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.966897][ T5813] veth0_macvtap: entered promiscuous mode
[   56.976310][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.980422][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.984963][ T5818] Bluetooth: hci0: command tx timeout
[   56.990667][ T5813] veth1_macvtap: entered promiscuous mode
[   57.038439][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.059968][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.066186][ T5811] Bluetooth: hci1: command tx timeout
[   57.066398][ T5818] Bluetooth: hci2: command tx timeout
[   57.072350][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.080640][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.081700][ T5813] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.083340][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.092111][ T5813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.096094][ T5813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.099618][ T5813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.168108][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.172610][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.216632][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.219141][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.243527][ T5875] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1'.
[   57.275204][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.279861][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.522231][ T5902] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   57.670412][ T5921] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.675330][ T5922] delete_channel: no stack
[   57.727985][ T5929] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8'.
[   57.864104][ T5945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10'.
[   57.879995][ T5945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10'.
[   57.920262][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'.
[   57.923407][ T5961] netlink: 'syz.2.12': attribute type 20 has an invalid length.
[   57.927059][ T5961] netlink: 'syz.2.12': attribute type 21 has an invalid length.
[   57.938479][ T5964] SET target dimension over the limit!
[   58.272509][ T5991] syz.2.22 uses obsolete (PF_INET,SOCK_PACKET)
[   58.379430][ T6003] xt_policy: neither incoming nor outgoing policy selected
[   58.553815][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'.
[   58.592936][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'.
[   59.027168][ T6027] batman_adv: batadv0: Adding interface: dummy0
[   59.029289][ T6027] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.044118][ T6027] batman_adv: batadv0: Interface activated: dummy0
[   59.052568][ T6027] batadv0: mtu less than device minimum
[   59.057053][ T6027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.062049][ T6027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.067148][ T6027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.072163][ T6027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.077190][ T6027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.082195][ T6027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.087258][ T6027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.092168][ T6027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.097060][ T6027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.110840][ T5811] Bluetooth: hci0: command tx timeout
[   59.153284][ T6033] netlink: 76 bytes leftover after parsing attributes in process `syz.0.36'.
[   59.157295][ T5811] Bluetooth: hci1: command tx timeout
[   59.159227][ T5811] Bluetooth: hci2: command tx timeout
[   59.163398][ T6033] netlink: 184 bytes leftover after parsing attributes in process `syz.0.36'.
[   59.224193][ T6037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.38'.
[   59.545000][ T6068] delete_channel: no stack
[   59.551922][ T6066] netlink: 'syz.1.48': attribute type 2 has an invalid length.
[   59.562612][ T6066] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.706884][ T6081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   59.710052][ T6081] IPv6: NLM_F_CREATE should be set when creating new route
[   59.766996][ T6085] vlan2: entered promiscuous mode
[   59.768892][ T6085] bond0: entered promiscuous mode
[   59.770497][ T6085] bond_slave_0: entered promiscuous mode
[   59.772359][ T6085] bond_slave_1: entered promiscuous mode
[   59.774327][ T6085] vlan2: entered allmulticast mode
[   59.777102][ T6085] bond0: entered allmulticast mode
[   59.778912][ T6085] bond_slave_0: entered allmulticast mode
[   59.780671][ T6085] bond_slave_1: entered allmulticast mode
[   59.807537][ T6091] netlink: 'syz.2.57': attribute type 2 has an invalid length.
[   59.811361][ T6089] xt_time: invalid argument - start or stop time greater than 23:59:59
[   59.854013][ T6094] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[   60.065539][ T6109] block nbd0: server does not support multiple connections per device.
[   60.069961][ T6109] block nbd0: shutting down sockets
[   60.081386][ T6112] team0 (unregistering): Port device team_slave_0 removed
[   60.088022][ T6112] team0 (unregistering): Port device team_slave_1 removed
[   60.117970][ T6098] Zero length message leads to an empty skb
[   60.263992][ T6123] netlink: 'syz.0.66': attribute type 1 has an invalid length.
[   60.282023][ T6123] 8021q: adding VLAN 0 to HW filter on device bond1
[   60.326697][ T6126] netlink: 'syz.0.67': attribute type 11 has an invalid length.
[   60.369835][ T6128] netlink: 'syz.0.68': attribute type 4 has an invalid length.
[   60.436004][ T6135] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709494271)
[   60.497786][ T6136] netlink: 'syz.0.70': attribute type 4 has an invalid length.
[   61.145022][ T5818] Bluetooth: hci0: command tx timeout
[   61.227901][ T5818] Bluetooth: hci2: command tx timeout
[   61.229838][ T5818] Bluetooth: hci1: command tx timeout
[   61.331025][ T6153] netlink: 'syz.2.76': attribute type 10 has an invalid length.
[   61.345771][ T6153] 8021q: adding VLAN 0 to HW filter on device team0
[   61.350956][ T6153] bond0: (slave team0): Enslaving as an active interface with an up link
[   61.357993][ T6153] syz.2.76 (6153) used greatest stack depth: 19992 bytes left
[   61.709967][ T6182] netlink: 'syz.0.86': attribute type 2 has an invalid length.
[   61.733096][ T6183] Cannot find del_set index 0 as target
[   61.737349][ T6181] Cannot find del_set index 0 as target
[   61.748339][ T6181] sctp: [Deprecated]: syz.2.85 (pid 6181) Use of struct sctp_assoc_value in delayed_ack socket option.
[   61.748339][ T6181] Use struct sctp_sack_info instead
[   61.756035][ T6183] sctp: [Deprecated]: syz.2.85 (pid 6183) Use of struct sctp_assoc_value in delayed_ack socket option.
[   61.756035][ T6183] Use struct sctp_sack_info instead
[   61.880147][ T6205] vlan2: entered promiscuous mode
[   61.881784][ T6205] bond0: entered promiscuous mode
[   61.883444][ T6205] bond_slave_0: entered promiscuous mode
[   61.888539][ T6205] bond_slave_1: entered promiscuous mode
[   61.910553][ T6208] warning: `syz.2.91' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.097780][ T6226] geneve2: entered promiscuous mode
[   62.235544][ T6229] nbd0: detected capacity change from 0 to 63
[   62.240217][ T6233] block nbd0: NBD_DISCONNECT
[   62.242584][ T6233] block nbd0: Disconnected due to user request.
[   62.247392][ T6233] block nbd0: shutting down sockets
[   62.257874][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.260911][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[   62.263515][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.266374][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[   62.268802][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.271608][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[   62.274163][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.277079][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[   62.279724][ T6235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.280026][ T5809] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.286727][ T5809] Buffer I/O error on dev nbd0, logical block 0, async page read
[   62.289290][ T5809] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.292142][ T5809] Buffer I/O error on dev nbd0, logical block 1, async page read
[   62.294183][ T6236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.295663][ T5809] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.302032][ T5809] Buffer I/O error on dev nbd0, logical block 2, async page read
[   62.306036][ T5809] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.309711][ T5809] Buffer I/O error on dev nbd0, logical block 3, async page read
[   62.313242][ T5809] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.318324][ T5809] Buffer I/O error on dev nbd0, logical block 0, async page read
[   62.321659][ T5809] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.325555][ T5809] Buffer I/O error on dev nbd0, logical block 1, async page read
[   62.331460][ T5809] ldm_validate_partition_table(): Disk read failed.
[   62.335373][ T6235] __nla_validate_parse: 25 callbacks suppressed
[   62.335384][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'.
[   62.337230][ T5809] Dev nbd0: unable to read RDB block 0
[   62.346883][ T5809]  nbd0: unable to read partition table
[   62.363564][ T5809] ldm_validate_partition_table(): Disk read failed.
[   62.368100][ T5809] Dev nbd0: unable to read RDB block 0
[   62.372076][ T5809]  nbd0: unable to read partition table
[   62.407382][ T6241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.99'.
[   62.431547][ T6240] veth2: entered allmulticast mode
[   62.498142][ T6249] pim6reg1: entered promiscuous mode
[   62.502176][ T6249] pim6reg1: entered allmulticast mode
[   62.623489][ T6262] : entered promiscuous mode
[   62.633416][ T6262] trusted_key: syz.0.105 sent an empty control message without MSG_MORE.
[   62.787592][ T6281] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   62.944000][ T6296] netlink: 124 bytes leftover after parsing attributes in process `syz.2.112'.
[   63.122459][ T6313] validate_nla: 1 callbacks suppressed
[   63.122468][ T6313] netlink: 'syz.2.118': attribute type 22 has an invalid length.
[   63.226539][ T6324] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   63.232131][ T5818] Bluetooth: hci0: command tx timeout
[   63.304644][ T5818] Bluetooth: hci1: command tx timeout
[   63.306514][ T5818] Bluetooth: hci2: command tx timeout
[   63.456545][ T6340] xt_hashlimit: size too large, truncated to 1048576
[   63.561121][ T6344] xt_bpf: check failed: parse error
[   63.840976][ T6354] bridge0: entered promiscuous mode
[   64.182680][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'.
[   64.185871][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'.
[   64.224343][ T6384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.136'.
[   64.264419][ T6384] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   64.283761][ T6388] netlink: 28 bytes leftover after parsing attributes in process `syz.2.138'.
[   64.751302][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'.
[   64.973832][ T6437] net_ratelimit: 13 callbacks suppressed
[   64.973845][ T6437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   64.984593][ T6436] netlink: 'syz.1.152': attribute type 1 has an invalid length.
[   64.990475][ T6436] netlink: 224 bytes leftover after parsing attributes in process `syz.1.152'.
[   65.009925][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'.
[   65.024343][ T6437] xt_hashlimit: max too large, truncated to 1048576
[   65.032950][ T6437] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[   65.040830][ T6437] netlink: 'syz.2.153': attribute type 5 has an invalid length.
[   65.103099][ T6446] xt_hashlimit: max too large, truncated to 1048576
[   65.108067][ T6446] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[   65.149091][ T6445] netlink: 'syz.1.155': attribute type 1 has an invalid length.
[   65.471790][ T6477] xt_socket: unknown flags 0xd0
[   65.728098][ T6491] x_tables: ip6_tables: sctp match: only valid for protocol 132
[   65.791159][ T5811] Bluetooth: hci2: command tx timeout
[   65.909045][ T6510] pimreg: entered allmulticast mode
[   65.924017][ T6510] pimreg: left allmulticast mode
[   66.004596][ T6517] netlink: 'syz.2.177': attribute type 13 has an invalid length.
[   66.007921][ T6517] netlink: 'syz.2.177': attribute type 11 has an invalid length.
[   70.834081][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.836393][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   76.766395][ T6537] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   76.772313][ T6540] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   76.863793][ T6551] __nla_validate_parse: 11 callbacks suppressed
[   76.863812][ T6551] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.182'.
[   76.931096][ T6548] syz.2.181: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   76.941750][ T6548] CPU: 1 UID: 0 PID: 6548 Comm: syz.2.181 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   76.941773][ T6548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.941780][ T6548] Call Trace:
[   76.941785][ T6548]  <TASK>
[   76.941791][ T6548]  dump_stack_lvl+0x189/0x250
[   76.941818][ T6548]  ? __pfx_dump_stack_lvl+0x10/0x10
[   76.941836][ T6548]  ? __pfx__printk+0x10/0x10
[   76.941849][ T6548]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   76.941863][ T6548]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   76.941877][ T6548]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   76.941892][ T6548]  warn_alloc+0x214/0x310
[   76.941911][ T6548]  ? __pfx_warn_alloc+0x10/0x10
[   76.941929][ T6548]  ? __get_vm_area_node+0x28f/0x300
[   76.941941][ T6548]  ? xskq_create+0xbf/0x170
[   76.941962][ T6548]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   76.941993][ T6548]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   76.942008][ T6548]  ? __kasan_kmalloc+0x93/0xb0
[   76.942022][ T6548]  vmalloc_user_noprof+0xad/0xf0
[   76.942035][ T6548]  ? xskq_create+0xbf/0x170
[   76.942052][ T6548]  xskq_create+0xbf/0x170
[   76.942069][ T6548]  xsk_init_queue+0xb0/0x110
[   76.942087][ T6548]  xsk_setsockopt+0x4de/0x710
[   76.942112][ T6548]  ? __pfx_xsk_setsockopt+0x10/0x10
[   76.942132][ T6548]  ? aa_sock_opt_perm+0x74/0x110
[   76.942151][ T6548]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   76.942166][ T6548]  ? __pfx_xsk_setsockopt+0x10/0x10
[   76.942182][ T6548]  do_sock_setsockopt+0x25a/0x3e0
[   76.942200][ T6548]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   76.942217][ T6548]  ? __fget_files+0x2a/0x420
[   76.942237][ T6548]  __x64_sys_setsockopt+0x18b/0x220
[   76.942254][ T6548]  do_syscall_64+0xfa/0x3b0
[   76.942265][ T6548]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.942282][ T6548]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.942293][ T6548]  ? exc_page_fault+0x9f/0xf0
[   76.942310][ T6548]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.942320][ T6548] RIP: 0033:0x7fbde9b8e929
[   76.942332][ T6548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   76.942341][ T6548] RSP: 002b:00007fbdea9a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   76.942355][ T6548] RAX: ffffffffffffffda RBX: 00007fbde9db5fa0 RCX: 00007fbde9b8e929
[   76.942362][ T6548] RDX: 0000000000000003 RSI: 000000000000011b RDI: 000000000000002a
[   76.942369][ T6548] RBP: 00007fbde9c10b39 R08: 0000000000000004 R09: 0000000000000000
[   76.942376][ T6548] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[   76.942382][ T6548] R13: 0000000000000000 R14: 00007fbde9db5fa0 R15: 00007ffca8f57e48
[   76.942403][ T6548]  </TASK>
[   76.942408][ T6548] Mem-Info:
[   77.031169][ T6571] macsec0: entered promiscuous mode
[   77.038289][ T6548] active_anon:4491 inactive_anon:0 isolated_anon:0
[   77.038289][ T6548]  active_file:849 inactive_file:38208 isolated_file:0
[   77.038289][ T6548]  unevictable:1768 dirty:1408 writeback:0
[   77.038289][ T6548]  slab_reclaimable:9206 slab_unreclaimable:54398
[   77.038289][ T6548]  mapped:17816 shmem:2443 pagetables:888
[   77.038289][ T6548]  sec_pagetables:0 bounce:0
[   77.038289][ T6548]  kernel_misc_reclaimable:0
[   77.038289][ T6548]  free:304124 free_pcp:19441 free_cma:0
[   77.078981][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'.
[   77.084368][ T6570] veth1_macvtap: left promiscuous mode
[   77.093263][ T6548] Node 0 active_anon:10568kB inactive_anon:0kB active_file:2756kB inactive_file:21508kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47160kB dirty:5576kB writeback:0kB shmem:4820kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7088kB pagetables:2328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   77.094196][ T6570] macsec0 (unregistering): left promiscuous mode
[   77.109787][ T6548] Node 1 active_anon:7396kB inactive_anon:0kB active_file:640kB inactive_file:131324kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24240kB dirty:56kB writeback:0kB shmem:4952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4204kB pagetables:1156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   77.112257][ T6571] netlink: 52 bytes leftover after parsing attributes in process `syz.1.187'.
[   77.120217][ T6548] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   77.133761][ T6548] lowmem_reserve[]: 0 815 815 815 815
[   77.135666][ T6548] Node 0 DMA32 free:413516kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10568kB inactive_anon:0kB active_file:2756kB inactive_file:21508kB unevictable:3536kB writepending:5576kB present:1556484kB managed:834736kB mlocked:0kB bounce:0kB free_pcp:33048kB local_pcp:13548kB free_cma:0kB
[   77.147622][ T6548] lowmem_reserve[]: 0 0 0 0 0
[   77.149173][ T6548] Node 1 DMA32 free:458616kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   77.160004][ T6548] lowmem_reserve[]: 0 0 854 854 854
[   77.161713][ T6548] Node 1 Normal free:328140kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7396kB inactive_anon:0kB active_file:640kB inactive_file:131324kB unevictable:3536kB writepending:56kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:45812kB local_pcp:24980kB free_cma:0kB
[   77.172262][ T6548] lowmem_reserve[]: 0 0 0 0 0
[   77.173933][ T6548] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   77.178223][ T6548] Node 0 DMA32: 441*4kB (UM) 241*8kB (UME) 230*16kB (UME) 219*32kB (U) 90*64kB (UME) 15*128kB (UM) 9*256kB (UM) 8*512kB (UM) 4*1024kB (UM) 4*2048kB (UM) 91*4096kB (ME) = 413484kB
[   77.199758][ T6548] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   77.205101][ T6548] Node 1 Normal: 1150*4kB (ME) 202*8kB (UM) 129*16kB (UME) 38*32kB (ME) 23*64kB (ME) 12*128kB (ME) 4*256kB (UM) 8*512kB (UME) 5*1024kB (UME) 3*2048kB (UM) 73*4096kB (M) = 327896kB
[   77.218264][ T6548] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   77.223605][ T6548] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   77.228045][ T6548] 41500 total pagecache pages
[   77.229778][ T6548] 0 pages in swap cache
[   77.231214][ T6548] Free swap  = 124996kB
[   77.232717][ T6548] Total swap = 124996kB
[   77.234150][ T6548] 786301 pages RAM
[   77.237473][ T6548] 0 pages HighMem/MovableOnly
[   77.239140][ T6548] 240369 pages reserved
[   77.240599][ T6548] 0 pages cma reserved
[   77.301116][ T6584] IPv6: sit2: Disabled Multicast RS
[   77.368933][ T6589] nft_compat: unsupported protocol 14
[   77.665928][ T6624] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.203'.
[   77.669472][ T6624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.203'.
[   77.682862][ T6624] netlink: 256 bytes leftover after parsing attributes in process `syz.1.203'.
[   77.878242][ T6650] netlink: 20 bytes leftover after parsing attributes in process `syz.1.211'.
[   78.644005][ T6662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.214'.
[   78.654249][ T6662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'.
[   78.701639][ T6669] netlink: 20 bytes leftover after parsing attributes in process `syz.0.214'.
[   78.806551][ T6673] pim6reg1: entered promiscuous mode
[   78.808828][ T6673] pim6reg1: entered allmulticast mode
[   78.982411][ T6687] netlink: 'syz.2.221': attribute type 2 has an invalid length.
[   79.093563][ T6696] netlink: 'syz.0.224': attribute type 1 has an invalid length.
[   79.117041][ T6696] bond2: entered promiscuous mode
[   79.119571][ T6696] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.135855][ T6696] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.138927][ T6696] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address
[   79.143196][ T6696] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[   79.148483][ T6696] bond2: (slave ip6gre1): making interface the new active one
[   79.151039][ T6696] ip6gre1: entered promiscuous mode
[   79.154672][ T6696] bond2: (slave ip6gre1): Enslaving as an active interface with an up link
[   79.258957][ T6706] geneve2: entered allmulticast mode
[   79.395292][ T6708] vxcan1: entered allmulticast mode
[   80.291207][ T6730] netlink: 'syz.2.235': attribute type 2 has an invalid length.
[   81.066748][    T9] cfg80211: failed to load regulatory.db
[   92.967463][ T6735] __nla_validate_parse: 5 callbacks suppressed
[   92.967480][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'.
[   92.973082][ T6740] Bluetooth: MGMT ver 1.23
[   92.973713][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'.
[   92.978939][ T6735] netlink: 'syz.2.239': attribute type 12 has an invalid length.
[   92.982003][ T6735] netlink: 'syz.2.239': attribute type 11 has an invalid length.
[   93.137515][ T6754] ieee802154 phy0 wpan0: encryption failed: -90
[   93.158803][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'.
[   93.163008][ T6757] delete_channel: no stack
[   93.198158][ T6759] Unsupported ieee802154 address type: 0
[   93.241606][ T6761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.245'.
[   93.254772][ T6761] netlink: 32 bytes leftover after parsing attributes in process `syz.1.245'.
[   93.296956][ T6765] netlink: 252 bytes leftover after parsing attributes in process `syz.2.246'.
[   93.709825][ T6786] netlink: 112 bytes leftover after parsing attributes in process `syz.2.251'.
[   93.982379][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.256'.
[   94.041161][ T6806] bridge0: port 3(veth0_to_bridge) entered blocking state
[   94.044356][ T6806] bridge0: port 3(veth0_to_bridge) entered disabled state
[   94.058453][ T6806] veth0_to_bridge: entered allmulticast mode
[   94.062929][ T6806] veth0_to_bridge: entered promiscuous mode
[   94.065738][ T6806] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   94.075059][ T6806] bridge0: port 3(veth0_to_bridge) entered blocking state
[   94.078255][ T6806] bridge0: port 3(veth0_to_bridge) entered forwarding state
[   94.084921][ T6806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.257'.
[   94.129233][ T6814] netlink: 140 bytes leftover after parsing attributes in process `syz.1.259'.
[   94.151851][ T6817] vlan2: entered promiscuous mode
[   94.153562][ T6817] bridge0: entered promiscuous mode
[   94.159242][ T6818] netlink: 'syz.0.261': attribute type 4 has an invalid length.
[   94.187313][ T6821] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[   94.677879][ T6872] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.683659][ T6872] batadv_slave_1: entered promiscuous mode
[   95.430003][ T6930] netlink: 'syz.0.292': attribute type 1 has an invalid length.
[   95.594267][ T6945] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   95.609867][ T6945] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   95.658907][ T6956] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   95.770464][ T6970] unknown channel width for channel at 909000KHz?
[   95.773783][ T6970] unknown channel width for channel at 909000KHz?
[   95.779980][ T6970] unknown channel width for channel at 909000KHz?
[   95.871821][ T6977] xt_l2tp: missing protocol rule (udp|l2tpip)
[   95.877789][ T6977] geneve0: entered promiscuous mode
[   95.879979][ T6977] geneve0: entered allmulticast mode
[   95.942712][ T6983] pim6reg1: entered allmulticast mode
[   96.289921][ T7022] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   96.352736][ T7033] x_tables: duplicate underflow at hook 2
[   96.399489][ T7040] netlink: 'syz.2.323': attribute type 4 has an invalid length.
[   96.431427][ T7037] netlink: 'syz.0.322': attribute type 1 has an invalid length.
[   96.463986][ T7037] bond3: entered promiscuous mode
[   96.466577][ T7037] 8021q: adding VLAN 0 to HW filter on device bond3
[   96.473561][ T7044] bond0: (slave team0): Releasing backup interface
[   96.479988][ T7044] bridge_slave_0: left allmulticast mode
[   96.481860][ T7044] bridge_slave_0: left promiscuous mode
[   96.484850][ T7044] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.490539][ T7044] bridge_slave_1: left allmulticast mode
[   96.492394][ T7044] bridge_slave_1: left promiscuous mode
[   96.494492][ T7044] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.501477][ T7044] bond0: (slave bond_slave_0): Releasing backup interface
[   96.508247][ T7044] bond0: (slave bond_slave_1): Releasing backup interface
[   96.518964][ T7044] team0: Failed to send options change via netlink (err -105)
[   96.521760][ T7044] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   96.525875][ T7044] team0: Port device team_slave_0 removed
[   96.532093][ T7044] team0: Failed to send options change via netlink (err -105)
[   96.535952][ T7044] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   96.539139][ T7044] team0: Port device team_slave_1 removed
[   96.541432][ T7044] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.543909][ T7044] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.548169][ T7044] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.550627][ T7044] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.573710][ T7037] bond3: (slave bridge1): making interface the new active one
[   96.577275][ T7037] bridge1: entered promiscuous mode
[   96.580385][ T7037] bond3: (slave bridge1): Enslaving as an active interface with an up link
[   96.690497][ T7054] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   96.693663][ T7054] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   96.696765][ T7054] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   96.699653][ T7054] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   96.837993][ T7063] netlink: 'syz.0.328': attribute type 13 has an invalid length.
[   96.840722][ T7063] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[   96.906280][ T7066] IPVS: length: 8 != 446622349272
[   96.967971][ T7057] 
[   96.969074][ T7057] ======================================================
[   96.971973][ T7057] WARNING: possible circular locking dependency detected
[   96.974796][ T7057] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   96.978855][ T7057] ------------------------------------------------------
[   96.981786][ T7057] syz.0.328/7057 is trying to acquire lock:
[   96.984258][ T7057] ffff888108dbdde8 (&q->elevator_lock){+.+.}-{4:4}, at: elv_update_nr_hw_queues+0x87/0x2a0
[   96.988482][ T7057] 
[   96.988482][ T7057] but task is already holding lock:
[   96.991527][ T7057] ffff888108dbd8b0 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x16c/0xac0
[   96.995871][ T7057] 
[   96.995871][ T7057] which lock already depends on the new lock.
[   96.995871][ T7057] 
[   97.000080][ T7057] 
[   97.000080][ T7057] the existing dependency chain (in reverse order) is:
[   97.003719][ T7057] 
[   97.003719][ T7057] -> #6 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[   97.007327][ T7057]        lock_acquire+0x120/0x360
[   97.009542][ T7057]        blk_alloc_queue+0x538/0x620
[   97.011798][ T7057]        __blk_mq_alloc_disk+0x162/0x340
[   97.014098][ T7057]        nbd_dev_add+0x476/0xb00
[   97.016212][ T7057]        nbd_init+0x21a/0x2d0
[   97.018209][ T7057]        do_one_initcall+0x236/0x820
[   97.020479][ T7057]        do_initcall_level+0x137/0x1f0
[   97.022827][ T7057]        do_initcalls+0x69/0xd0
[   97.024888][ T7057]        kernel_init_freeable+0x3d9/0x570
[   97.027279][ T7057]        kernel_init+0x1d/0x1d0
[   97.029323][ T7057]        ret_from_fork+0x3fc/0x770
[   97.031451][ T7057]        ret_from_fork_asm+0x1a/0x30
[   97.033689][ T7057] 
[   97.033689][ T7057] -> #5 (fs_reclaim){+.+.}-{0:0}:
[   97.036809][ T7057]        lock_acquire+0x120/0x360
[   97.038970][ T7057]        fs_reclaim_acquire+0x72/0x100
[   97.041329][ T7057]        kmem_cache_alloc_node_noprof+0x47/0x3c0
[   97.044040][ T7057]        __alloc_skb+0x112/0x2d0
[   97.046165][ T7057]        tipc_msg_build+0x13b/0xcf0
[   97.048408][ T7057]        __tipc_sendstream+0x8ac/0x1290
[   97.050771][ T7057]        tipc_sendstream+0x55/0x70
[   97.052959][ T7057]        __sock_sendmsg+0x21c/0x270
[   97.055204][ T7057]        __sys_sendto+0x3bd/0x520
[   97.057326][ T7057]        __x64_sys_sendto+0xde/0x100
[   97.059508][ T7057]        do_syscall_64+0xfa/0x3b0
[   97.061654][ T7057]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.064407][ T7057] 
[   97.064407][ T7057] -> #4 (sk_lock-AF_TIPC){+.+.}-{0:0}:
[   97.067256][ T7057]        lock_acquire+0x120/0x360
[   97.069099][ T7057]        lock_sock_nested+0x48/0x100
[   97.071380][ T7057]        tipc_shutdown+0x62/0x4f0
[   97.073550][ T7057]        nbd_mark_nsock_dead+0x2e9/0x560
[   97.075971][ T7057]        sock_shutdown+0x15e/0x260
[   97.078092][ T7057]        nbd_config_put+0x342/0x790
[   97.080352][ T7057]        nbd_genl_connect+0x1282/0x1930
[   97.082722][ T7057]        genl_family_rcv_msg_doit+0x215/0x300
[   97.085325][ T7057]        genl_rcv_msg+0x60e/0x790
[   97.087492][ T7057]        netlink_rcv_skb+0x208/0x470
[   97.089765][ T7057]        genl_rcv+0x28/0x40
[   97.091671][ T7057]        netlink_unicast+0x75b/0x8d0
[   97.093935][ T7057]        netlink_sendmsg+0x805/0xb30
[   97.096203][ T7057]        __sock_sendmsg+0x21c/0x270
[   97.098380][ T7057]        ____sys_sendmsg+0x505/0x830
[   97.100648][ T7057]        ___sys_sendmsg+0x21f/0x2a0
[   97.102899][ T7057]        __x64_sys_sendmsg+0x19b/0x260
[   97.105230][ T7057]        do_syscall_64+0xfa/0x3b0
[   97.107416][ T7057]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.110146][ T7057] 
[   97.110146][ T7057] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[   97.113410][ T7057]        lock_acquire+0x120/0x360
[   97.115593][ T7057]        __mutex_lock+0x182/0xe80
[   97.117764][ T7057]        nbd_queue_rq+0x257/0xf10
[   97.119940][ T7057]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[   97.122560][ T7057]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[   97.125453][ T7057]        blk_mq_sched_dispatch_requests+0xd7/0x190
[   97.128203][ T7057]        blk_mq_run_hw_queue+0x348/0x4f0
[   97.130643][ T7057]        blk_mq_dispatch_list+0xd0c/0xe00
[   97.133093][ T7057]        blk_mq_flush_plug_list+0x469/0x550
[   97.135672][ T7057]        __blk_flush_plug+0x3d3/0x4b0
[   97.137610][ T7057]        __submit_bio+0x2d3/0x5a0
[   97.139262][ T7057]        submit_bio_noacct_nocheck+0x4ab/0xb50
[   97.141274][ T7057]        block_read_full_folio+0x599/0x830
[   97.143194][ T7057]        filemap_read_folio+0x117/0x380
[   97.145006][ T7057]        do_read_cache_folio+0x350/0x590
[   97.146837][ T7057]        read_part_sector+0xb6/0x2b0
[   97.148586][ T7057]        adfspart_check_ICS+0xa4/0xa50
[   97.150364][ T7057]        bdev_disk_changed+0x75f/0x14b0
[   97.152166][ T7057]        blkdev_get_whole+0x380/0x510
[   97.153935][ T7057]        bdev_open+0x31e/0xd30
[   97.155515][ T7057]        blkdev_open+0x3a8/0x510
[   97.157134][ T7057]        do_dentry_open+0xdf3/0x1970
[   97.158871][ T7057]        vfs_open+0x3b/0x340
[   97.160364][ T7057]        path_openat+0x2ee5/0x3830
[   97.161986][ T7057]        do_filp_open+0x1fa/0x410
[   97.163645][ T7057]        do_sys_openat2+0x121/0x1c0
[   97.165252][ T7057]        __x64_sys_openat+0x138/0x170
[   97.166934][ T7057]        do_syscall_64+0xfa/0x3b0
[   97.168556][ T7057]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.170638][ T7057] 
[   97.170638][ T7057] -> #2 (&cmd->lock){+.+.}-{4:4}:
[   97.172943][ T7057]        lock_acquire+0x120/0x360
[   97.174509][ T7057]        __mutex_lock+0x182/0xe80
[   97.176119][ T7057]        nbd_queue_rq+0xc8/0xf10
[   97.177842][ T7057]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[   97.179731][ T7057]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[   97.181941][ T7057]        blk_mq_sched_dispatch_requests+0xd7/0x190
[   97.184074][ T7057]        blk_mq_run_hw_queue+0x348/0x4f0
[   97.185896][ T7057]        blk_mq_dispatch_list+0xd0c/0xe00
[   97.187685][ T7057]        blk_mq_flush_plug_list+0x469/0x550
[   97.189571][ T7057]        __blk_flush_plug+0x3d3/0x4b0
[   97.191405][ T7057]        __submit_bio+0x2d3/0x5a0
[   97.192991][ T7057]        submit_bio_noacct_nocheck+0x4ab/0xb50
[   97.194918][ T7057]        block_read_full_folio+0x599/0x830
[   97.196723][ T7057]        filemap_read_folio+0x117/0x380
[   97.198485][ T7057]        do_read_cache_folio+0x350/0x590
[   97.200202][ T7057]        read_part_sector+0xb6/0x2b0
[   97.201883][ T7057]        adfspart_check_ICS+0xa4/0xa50
[   97.203672][ T7057]        bdev_disk_changed+0x75f/0x14b0
[   97.205488][ T7057]        blkdev_get_whole+0x380/0x510
[   97.207249][ T7057]        bdev_open+0x31e/0xd30
[   97.208833][ T7057]        blkdev_open+0x3a8/0x510
[   97.210436][ T7057]        do_dentry_open+0xdf3/0x1970
[   97.212095][ T7057]        vfs_open+0x3b/0x340
[   97.213574][ T7057]        path_openat+0x2ee5/0x3830
[   97.215189][ T7057]        do_filp_open+0x1fa/0x410
[   97.216837][ T7057]        do_sys_openat2+0x121/0x1c0
[   97.218502][ T7057]        __x64_sys_openat+0x138/0x170
[   97.220203][ T7057]        do_syscall_64+0xfa/0x3b0
[   97.221806][ T7057]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.223833][ T7057] 
[   97.223833][ T7057] -> #1 (set->srcu){.+.+}-{0:0}:
[   97.226640][ T7057]        lock_sync+0xba/0x160
[   97.228634][ T7057]        __synchronize_srcu+0x96/0x3a0
[   97.230936][ T7057]        elevator_switch+0x12b/0x5f0
[   97.233136][ T7057]        elevator_change+0x21b/0x320
[   97.235360][ T7057]        elevator_set_default+0x144/0x210
[   97.237719][ T7057]        blk_register_queue+0x35d/0x400
[   97.239574][ T7057]        __add_disk+0x677/0xd50
[   97.241131][ T7057]        add_disk_fwnode+0xfc/0x480
[   97.243052][ T7057]        nbd_dev_add+0x70e/0xb00
[   97.245117][ T7057]        nbd_init+0x21a/0x2d0
[   97.247160][ T7057]        do_one_initcall+0x236/0x820
[   97.249176][ T7057]        do_initcall_level+0x137/0x1f0
[   97.250965][ T7057]        do_initcalls+0x69/0xd0
[   97.252625][ T7057]        kernel_init_freeable+0x3d9/0x570
[   97.254969][ T7057]        kernel_init+0x1d/0x1d0
[   97.256929][ T7057]        ret_from_fork+0x3fc/0x770
[   97.259017][ T7057]        ret_from_fork_asm+0x1a/0x30
[   97.261153][ T7057] 
[   97.261153][ T7057] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[   97.264408][ T7057]        validate_chain+0xb9b/0x2140
[   97.266689][ T7057]        __lock_acquire+0xab9/0xd20
[   97.268943][ T7057]        lock_acquire+0x120/0x360
[   97.271116][ T7057]        __mutex_lock+0x182/0xe80
[   97.273277][ T7057]        elv_update_nr_hw_queues+0x87/0x2a0
[   97.275839][ T7057]        blk_mq_update_nr_hw_queues+0xd54/0x14c0
[   97.278519][ T7057]        nbd_start_device+0x16c/0xac0
[   97.280843][ T7057]        nbd_genl_connect+0x1250/0x1930
[   97.283179][ T7057]        genl_family_rcv_msg_doit+0x215/0x300
[   97.285716][ T7057]        genl_rcv_msg+0x60e/0x790
[   97.287837][ T7057]        netlink_rcv_skb+0x208/0x470
[   97.290116][ T7057]        genl_rcv+0x28/0x40
[   97.292036][ T7057]        netlink_unicast+0x75b/0x8d0
[   97.294315][ T7057]        netlink_sendmsg+0x805/0xb30
[   97.296503][ T7057]        __sock_sendmsg+0x21c/0x270
[   97.298672][ T7057]        ____sys_sendmsg+0x505/0x830
[   97.300808][ T7057]        ___sys_sendmsg+0x21f/0x2a0
[   97.303022][ T7057]        __x64_sys_sendmsg+0x19b/0x260
[   97.304887][ T7057]        do_syscall_64+0xfa/0x3b0
[   97.306527][ T7057]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.309046][ T7057] 
[   97.309046][ T7057] other info that might help us debug this:
[   97.309046][ T7057] 
[   97.313355][ T7057] Chain exists of:
[   97.313355][ T7057]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#49
[   97.313355][ T7057] 
[   97.319110][ T7057]  Possible unsafe locking scenario:
[   97.319110][ T7057] 
[   97.322222][ T7057]        CPU0                    CPU1
[   97.324485][ T7057]        ----                    ----
[   97.326717][ T7057]   lock(&q->q_usage_counter(io)#49);
[   97.329041][ T7057]                                lock(fs_reclaim);
[   97.331816][ T7057]                                lock(&q->q_usage_counter(io)#49);
[   97.335135][ T7057]   lock(&q->elevator_lock);
[   97.337031][ T7057] 
[   97.337031][ T7057]  *** DEADLOCK ***
[   97.337031][ T7057] 
[   97.340473][ T7057] 7 locks held by syz.0.328/7057:
[   97.342640][ T7057]  #0: ffffffff8f576230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[   97.346068][ T7057]  #1: ffffffff8f576048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[   97.349739][ T7057]  #2: ffff888020ec8a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[   97.353976][ T7057]  #3: ffff888020ec8988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   97.358766][ T7057]  #4: ffff888020ec88d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x49/0x14c0
[   97.363385][ T7057]  #5: ffff888108dbd8b0 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x16c/0xac0
[   97.367888][ T7057]  #6: ffff888108dbd8e8 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: nbd_start_device+0x16c/0xac0
[   97.371801][ T7057] 
[   97.371801][ T7057] stack backtrace:
[   97.374203][ T7057] CPU: 1 UID: 0 PID: 7057 Comm: syz.0.328 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   97.374221][ T7057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   97.374230][ T7057] Call Trace:
[   97.374238][ T7057]  <TASK>
[   97.374245][ T7057]  dump_stack_lvl+0x189/0x250
[   97.374269][ T7057]  ? __pfx_dump_stack_lvl+0x10/0x10
[   97.374314][ T7057]  ? __pfx__printk+0x10/0x10
[   97.374332][ T7057]  ? print_lock_name+0xde/0x100
[   97.374346][ T7057]  print_circular_bug+0x2ee/0x310
[   97.374363][ T7057]  check_noncircular+0x134/0x160
[   97.374378][ T7057]  validate_chain+0xb9b/0x2140
[   97.374395][ T7057]  __lock_acquire+0xab9/0xd20
[   97.374412][ T7057]  ? elv_update_nr_hw_queues+0x87/0x2a0
[   97.374428][ T7057]  lock_acquire+0x120/0x360
[   97.374443][ T7057]  ? elv_update_nr_hw_queues+0x87/0x2a0
[   97.374462][ T7057]  __mutex_lock+0x182/0xe80
[   97.374482][ T7057]  ? elv_update_nr_hw_queues+0x87/0x2a0
[   97.374496][ T7057]  ? xa_find_after+0x402/0x430
[   97.374508][ T7057]  ? xa_find_after+0xae/0x430
[   97.374520][ T7057]  ? elv_update_nr_hw_queues+0x87/0x2a0
[   97.374536][ T7057]  ? __pfx___mutex_lock+0x10/0x10
[   97.374557][ T7057]  elv_update_nr_hw_queues+0x87/0x2a0
[   97.374573][ T7057]  ? blk_mq_update_nr_hw_queues+0x91c/0x14c0
[   97.374594][ T7057]  blk_mq_update_nr_hw_queues+0xd54/0x14c0
[   97.374629][ T7057]  nbd_start_device+0x16c/0xac0
[   97.374646][ T7057]  ? __nla_parse+0x40/0x60
[   97.374664][ T7057]  nbd_genl_connect+0x1250/0x1930
[   97.374682][ T7057]  ? __pfx_nbd_genl_connect+0x10/0x10
[   97.374701][ T7057]  ? __nla_parse+0x40/0x60
[   97.374717][ T7057]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   97.374737][ T7057]  genl_family_rcv_msg_doit+0x215/0x300
[   97.374754][ T7057]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   97.374771][ T7057]  ? __lock_acquire+0xab9/0xd20
[   97.374788][ T7057]  genl_rcv_msg+0x60e/0x790
[   97.374804][ T7057]  ? __pfx_genl_rcv_msg+0x10/0x10
[   97.374818][ T7057]  ? __pfx_nbd_genl_connect+0x10/0x10
[   97.374838][ T7057]  netlink_rcv_skb+0x208/0x470
[   97.374850][ T7057]  ? __pfx_genl_rcv_msg+0x10/0x10
[   97.374865][ T7057]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   97.374882][ T7057]  ? down_read+0x1ad/0x2e0
[   97.374895][ T7057]  genl_rcv+0x28/0x40
[   97.374910][ T7057]  netlink_unicast+0x75b/0x8d0
[   97.374924][ T7057]  netlink_sendmsg+0x805/0xb30
[   97.374940][ T7057]  ? __pfx_netlink_sendmsg+0x10/0x10
[   97.374953][ T7057]  ? aa_sock_msg_perm+0x94/0x160
[   97.374969][ T7057]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   97.374985][ T7057]  ? __pfx_netlink_sendmsg+0x10/0x10
[   97.374998][ T7057]  __sock_sendmsg+0x21c/0x270
[   97.375018][ T7057]  ____sys_sendmsg+0x505/0x830
[   97.375033][ T7057]  ? __pfx_____sys_sendmsg+0x10/0x10
[   97.375048][ T7057]  ? import_iovec+0x74/0xa0
[   97.375061][ T7057]  ___sys_sendmsg+0x21f/0x2a0
[   97.375075][ T7057]  ? __pfx____sys_sendmsg+0x10/0x10
[   97.375098][ T7057]  ? __fget_files+0x2a/0x420
[   97.375112][ T7057]  ? __fget_files+0x3a0/0x420
[   97.375126][ T7057]  __x64_sys_sendmsg+0x19b/0x260
[   97.375140][ T7057]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   97.375155][ T7057]  ? rcu_is_watching+0x15/0xb0
[   97.375174][ T7057]  ? do_syscall_64+0xbe/0x3b0
[   97.375185][ T7057]  do_syscall_64+0xfa/0x3b0
[   97.375193][ T7057]  ? lockdep_hardirqs_on+0x9c/0x150
[   97.375208][ T7057]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.375220][ T7057]  ? exc_page_fault+0x9f/0xf0
[   97.375235][ T7057]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.375248][ T7057] RIP: 0033:0x7f10c5b8e929
[   97.375263][ T7057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.375273][ T7057] RSP: 002b:00007f10c6a19038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   97.375287][ T7057] RAX: ffffffffffffffda RBX: 00007f10c5db5fa0 RCX: 00007f10c5b8e929
[   97.375326][ T7057] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000008
[   97.375335][ T7057] RBP: 00007f10c5c10b39 R08: 0000000000000000 R09: 0000000000000000
[   97.375343][ T7057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   97.375351][ T7057] R13: 0000000000000000 R14: 00007f10c5db5fa0 R15: 00007ffcce095f28
[   97.375364][ T7057]  </TASK>

VM DIAGNOSIS:
21:27:34  Registers:
info registers vcpu 0

CPU#0
RAX=e94c323817862900 RBX=ffffffff81974d58 RCX=e94c323817862900 RDX=0000000000000001
RSI=ffffffff8be28d20 RDI=ffffffff81974d58 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa10df0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b66c4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c387e5d CR3=000000012403a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fbde9d84478 00007fbde9d84450 XMM03=00007fbde9d84488 00007fbde9d84480
XMM04=00007fbdea8ed100 00007fbde9d84440 XMM05=00007fbde9d84458 00007fbde9d844a0
XMM06=00007fbde9d84498 00007fbde9d84490 XMM07=00007fbde9d84488 00007fbde9d84480
XMM08=fba9d18cc9d61269 940000000004d72d XMM09=0000000000000000 00007fbde9c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000039fa RDI=00000000000039fb RBP=00000000000003f8 RSP=ffffc900047565b0
R8 =ffff888107fe0237 R9 =1ffff11020ffc046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48f4 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f10c6a196c0 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbdea97efc8 CR3=0000000027b80000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fe762e11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
