last executing test programs:

915.91909ms ago: executing program 2 (id=3):
r0 = epoll_create(0x3ff)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3f, 0xffffffffffffffff, &(0x7f00000000c0)={0x72000002})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x38)
r2 = socket$netlink(0x10, 0x3, 0xc)
ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00')

765.678014ms ago: executing program 2 (id=4):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
getsockname$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, r1, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x66}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8080}, 0x8000)
sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000440)=[{&(0x7f00000002c0)="fff4c698a5d9c09a37ea428d2db5c37654bf62313ba8b9b89341c18d0bf93535891b871018d50a267f5e14d36c2bd3d466967286e7870835d5e878bb4ff288c753061072ec3324a7464a006e23ecdd087949583332fe", 0x56}, {&(0x7f0000000340)="1c0815762a660cf1ddec18dd9d2430641f0a1d4939af16fd2bf62f0570d461a7b9253b707dbb4c64cbc8b73f50e1c1fedb1554733d890fb352582c3ac217e7cff1cba7c4e58e92eae42731b96e01", 0x4e}, {&(0x7f00000003c0)="be88d1411a37298f2c5d409b6cf984a80744969bb2e29f998730c6c06bc291071e2c926c91d4223a1c5e39cbe2d87ee14b8afdbe37ade5fb6f506025f9fae125d2525824d92fe01fb021d0894da5f5a1da4985c88afbb401604a", 0x5a}], 0x3, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x18}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}}, {{@in=@broadcast}}}, &(0x7f0000000600)=0xe8)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000640)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x4e24, 0x1, 0x4e24, 0x9, 0xa, 0x0, 0xa0, 0xc, 0x0, r3}, {0x7, 0x1, 0x11d, 0x0, 0xad, 0x80000000, 0x1, 0x7}, {0x4, 0x4, 0xfffffffffffffff8, 0x2}, 0x9, 0x6e6bb1, 0x1, 0x1, 0x3}, {{@in=@multicast2, 0x4d3}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3507, 0x4, 0x2, 0xf3, 0x80, 0x940}}, 0xe8)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r4, 0x8935, &(0x7f0000000740)={'bond_slave_1\x00', @ifru_flags=0x2})
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x60004001}, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r4)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x108, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xae1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2000}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff4ed7}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "4a831f23c956b7b38b0f5be90bc03fbcc30c397027a2838b5aef31cbecf0ff267cb554"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffe}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20008084}, 0x20004000)
ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000ac0)=0x2)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000b00)={{0x2, 0x4e23, @multicast2}, {0x1, @remote}, 0x12, {0x2, 0x4e20, @remote}, 'veth1\x00'})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r0, <r6=>0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{r0, <r7=>0xffffffffffffffff}, &(0x7f0000000e80), &(0x7f0000000ec0)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x11, 0x24, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d80)='syzkaller\x00', 0xc0, 0x2c, &(0x7f0000000dc0)=""/44, 0x41000, 0x31, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000e00)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000e40)={0x3, 0xd, 0x690, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[r7, r0, r0, r0, r0, r0], 0x0, 0x10, 0x3}, 0x94)
r8 = accept(r4, &(0x7f0000001040)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000010c0)=0x80)
connect$bt_l2cap(r8, &(0x7f0000001100)={0x1f, 0x3, @none, 0x8, 0x2}, 0xe)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001140)={<r9=>0x0, 0x1}, &(0x7f0000001180)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f00000011c0)={r9, 0x49}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001280)={'ip6gre0\x00', &(0x7f0000001200)={'ip6gre0\x00', <r10=>r2, 0x29, 0x9b, 0x5, 0x5, 0x5c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x10, 0x6, 0x400}})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, r10, 0x25, 0x0, @void}, 0x10)
getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f0000001300)=""/1, &(0x7f0000001340)=0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001380))
bind$ax25(r0, &(0x7f00000013c0)={{0x3, @default, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48)
sendto$phonet(r0, &(0x7f0000001440)="70836683e3acfcb1ff58", 0xa, 0x4030, &(0x7f0000001480)={0x23, 0x9, 0x34, 0x51}, 0x10)
write$cgroup_int(r0, &(0x7f00000014c0), 0x12)
bind$nfc_llcp(r8, &(0x7f0000001540)={0x27, 0x0, 0xffffffffffffffff, 0x4, 0x8, 0x7f, "f5a826c1e37860fdfa06d935dae56768333d7ae00ffa8a76563d10859552db954c8c17ce98020b11961a9e9859a8f83eae655d746f65b2f38ee3f5c25b0520", 0xb}, 0x60)

670.746512ms ago: executing program 2 (id=5):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a0104000000000000000001edffff07000a40000000c79a9213876e6348d01c0b4227e4d1000900020073797a32000000000900010073797a30000000000800054000000003580000000c0a0102000000000000000001000900020073797a32000000002c000380280086d700000000000000001c000b801800018007000100637400000c00028008000140000000000900010073797a300000000014000000100eb6d34fd8e73a7f9f165e4e9116b900010000000000000000000000000a0000"], 0xdc}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7fc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0xf, 0x2, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) (async)
ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000001380)={0x54, "11e69940ca3464eb678b47cb56fdfd067db27e57f4a3ef71854d56751593ee301f434275c9e7d03ebad44b84c6d2ffe6e3b7975741439ca1e2f39fffe5fae731e44437016662c0c6f06118e85ba0e9e7cdde2a506ab4cb890253d678b899ada47bcadbc4978fcd27dc792c80fd78cc96a6066c1a239d6bb1ec56164face94224"}) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r5], 0x20}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) (async)
sendmsg$nl_route(r5, 0x0, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0)

667.625315ms ago: executing program 1 (id=2):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x20}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
r2 = socket$inet6(0xa, 0x3, 0x3c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001e00010000000000e0ffffff0100000003000007000000000800080000000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', <r3=>0x0, 0x4, 0x0, 0x3d, 0x0, 0x59, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x7, 0x4, 0xe3}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000600)=@netrom={'nr', 0x0}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r4, 0x5)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r6, &(0x7f0000000b40)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="a8", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0xf, @dev={0xfe, 0x80, '\x00', 0x29}, 0x3}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000680)="e8d5b23341ca2005478d63675bfb46a8a8408192aecbe47fa8e33d5d858c35f387817d3ea8a3190bb0ba482b1fe0a41ae2e41c60772cc4c4df594be54e217521", 0x40}, {&(0x7f0000000700)="de06d7c0f63c8dcf89efd1ecec11bc5e44b55ed2ef610a4b8e0dc68d8656264f7ceab08fa652088b32e084028fea254a162e5305554212296838ae98d5decb63197b2cf60134a1b9cb080b4e851cf7faefc889dec38fec7874038c79f9f19af85fd7aea4b7ffd3fd929264013aa452020d84b2e03fb4fd5912fecf4116cf42dd65a1333a", 0x84}, {&(0x7f00000007c0)="ba8ca6c0964f7c73e4bc27b0d660fa7abfb79523b174e410f27b", 0x1a}, {&(0x7f0000000800)="de2a616c70b6c0dcb80516b26aba51bce3025a7df1053327a75b45cdb19d77cc84b00a0dde561852a5f9974f5741037cb844873c52d3435e0d0c48f79c220e14e3e042123ef376b5e8d7dbf3806074c614b40b709805830780ce801264a66c273c7a13bbc4f712818992f8511046021cbf3607d0ace2a052cc4244dc59667a137aa944cead541cb09b1359320522a9d6e38783012b5bf9f91977d8e4356a578e4690a9834d7913da936f0302a0a157347f7e746b209f8582d3558c41a82e020623", 0xc1}, {&(0x7f0000000900)="330373b6204d692464b27dafc0befa100925116ec43e4eb1e765384b5ef0f9bb4c09", 0x22}], 0x5, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3], 0xf0}}], 0x3, 0x24000045)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
accept(r4, &(0x7f0000000080)=@can, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a00170000000004003700090003002e2e2564b758b9a64411f6bb744dc48f57", 0x39}], 0x1)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000005000000000000000100000d000000000200002e2e2000000000000000"], 0x0, 0x31, 0x0, 0x1, 0x7}, 0x28)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0x2a0f5, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x30000000, @loopback}, 0x1c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000240), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)

664.925301ms ago: executing program 0 (id=1):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40500000000000061107400000000001f010000000000009500000000000000704fff7649b0983f42d01eccd13e9ec8a0a0ba6f00720c38fb17c6973e6361f5710065aaf625b96d173daf810865508ce8e9e1fa28e8bc8620294d24b6e609fa8a42156ea7394b8e0f09362f9e2576fd38cecff65abf747c96f88c9e0d54c135a1666ac39044329aaff9afb6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, r3, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x84)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0)
syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01400010000600000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000000000000001000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r1, 0x3) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40500000000000061107400000000001f010000000000009500000000000000704fff7649b0983f42d01eccd13e9ec8a0a0ba6f00720c38fb17c6973e6361f5710065aaf625b96d173daf810865508ce8e9e1fa28e8bc8620294d24b6e609fa8a42156ea7394b8e0f09362f9e2576fd38cecff65abf747c96f88c9e0d54c135a1666ac39044329aaff9afb6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) (async)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, r3, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x84) (async)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async)
syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) (async)
syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) (async)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01400010000600000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000000000000001000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x4) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) (async)

590.280864ms ago: executing program 2 (id=6):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48)
socketpair(0x1, 0x2, 0x8000, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1800000000380104000400028000"/24], 0x18}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7fffffff, 0x0, 0x5, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x200488c5)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0x4, 0x1e}, [@FRA_FLOW={0x8, 0xb, 0x3f34}, @FRA_SRC={0x8, 0x2, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c00000051eb5d280c50df4224fc5381bea94ded5fe3804e6b0c153043820aed9133bf53a12f49f08d04416c7d1d1d111152b72a99c89c627e1c31e906f7a9d3ffb54019741ddc8a135874d2260e125c5e732dbd61b8ed934f08d81c2499ba", @ANYRES16=r4, @ANYBLOB="c39203100400000000008900000008000300", @ANYRES32=r6, @ANYBLOB="10001d800c0000800600050012000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4050)
ioctl$TUNGETVNETLE(r2, 0x40047452, &(0x7f0000001200))
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', <r10=>0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x3}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r10, 0x29, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, @private1, 0x0, 0x20, 0x0, 0x7}})
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="180000002e00210000004000fccbdf0500000000000000aa"], 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000580)={0x0, @qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x4}, @in={0x2, 0x4e20, @private=0xa010102}, 0x3, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000480)='ip_vti0\x00', 0x0, 0xff, 0x5})
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r11], 0x90}}, 0x0)

200.713553ms ago: executing program 0 (id=7):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

77.681045ms ago: executing program 0 (id=8):
r0 = socket$rds(0x15, 0x5, 0x0) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc) (async)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000280)={<r2=>0x0, 0xff}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={<r3=>r2, 0xdb18, 0x8, [0x4, 0x3e46, 0x0, 0x4, 0x9, 0xe, 0x6d30, 0x8]}, &(0x7f0000000340)=0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_emit_ethernet(0x0, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}) (rerun: 64)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4)
sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
connect$inet(r6, 0x0, 0x0) (async)
recvfrom$inet6(r1, &(0x7f00000003c0)=""/237, 0xed, 0x2000, &(0x7f00000001c0)={0xa, 0x4e23, 0x7a0090cb, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x3d95a577}, 0x1c) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2810000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000e180000008001b0000000000"], 0x28}}, 0x0) (async, rerun: 32)
r11 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32)
getsockopt$sock_buf(r11, 0x1, 0x1c, 0x0, &(0x7f0000000740)) (async)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
r13 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r14=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r13, 0x84, 0x9, &(0x7f0000000080)={r14, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={r3, 0x16, 0x100}, &(0x7f0000000380)=0x8) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x1, 0xb7, 0x4, 0xe, 0x0, 0x6, 0x6, 0x1ff, r14}, 0x20)
sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000004a070100140000001100010000000000000000000000000a"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0xc800)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000000000b7e2c2a7d328ef058006000100020000f6b661a732488c8b56e3e3860300ac1414aa28f006ce03b52d7740cc1c6c8680eb75dcb30db375ae0a1ba16281873c6d93a6c47a6f0846fb5617361a27c6ee7a37beef0803b21a666c13feac8a16dea349d80c05016dc0ce18919680ba39afae8cbeb7f08709f2f2645ab5fe1be062d378b5d3b8ab8ee74337a4d4e62d83f4b445f55470952cc2b3cbfc74656a52aef6770adec7b1cdff214ffb191711cfb8ddf44bd813ea8bea4af81d1855f188acbe28b8de473de036ec6566cc31cd7ad472e9df074cd7fb62bb4f30e272bbbc8688be887ea982e02efa63d9dc97c786784963d0"], 0x28}}, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)

71.568698ms ago: executing program 1 (id=9):
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000080) (async)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', <r3=>0x0}) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000006c0)=<r4=>0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x33}, 0x4e20, 0x0, 0x4e20, 0x5, 0xa, 0x120, 0xa0, 0x3b, r3, r4}, {0x4498a237, 0x7, 0x1, 0x29085b9a, 0x3, 0x6, 0xe5, 0x6}, {0x10000000000007f, 0x8, 0xa3da, 0x6}, 0x2, 0x6e6bb1, 0x1, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4d3, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3507, 0x0, 0x0, 0xb2, 0x9ac, 0x80000001, 0x854}}, 0xe8) (async)
bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x7, @any, 0x73, 0x2}, 0xe)
connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x7101}) (async)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0) (async)
sendmsg$nl_route(r5, 0x0, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0}) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000400018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r9}, 0x18)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000300)={0x96, 0x7, 0x8, 0xc}, 0x8) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x7}, {0x0, 0xffff}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880)
close(0x3)
r11 = socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'hsr0\x00'})

0s ago: executing program 0 (id=10):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) (async)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0xdc}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r4], 0x20}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0) (async)
sendmsg$nl_route(r4, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
socket(0x1, 0x6, 0x0) (async)
r8 = socket(0x1, 0x6, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200001a00000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0xc, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x38}}, 0x0)
recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) (async)
recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) (async)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x44, r12, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0xfffffffffffffff6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0x44}}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000001300)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x100000000}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:48103' (ED25519) to the list of known hosts.
syzkaller login: [   57.574171][ T5835] cgroup: Unknown subsys name 'net'
[   57.700532][ T5835] cgroup: Unknown subsys name 'cpuset'
[   57.706169][ T5835] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.834473][ T5835] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.094682][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.106223][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.109749][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.113817][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.117622][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.120873][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.124638][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.147368][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.173308][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.176560][   T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.180087][   T56] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.187879][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.194780][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.201186][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.215838][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.590244][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   65.628481][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   65.704057][ T5860] chnl_net:caif_netlink_parms(): no params data found
[   65.742148][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.745511][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.749422][ T5855] bridge_slave_0: entered allmulticast mode
[   65.753426][ T5855] bridge_slave_0: entered promiscuous mode
[   65.784813][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.788103][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.791026][ T5855] bridge_slave_1: entered allmulticast mode
[   65.794868][ T5855] bridge_slave_1: entered promiscuous mode
[   65.838954][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.842091][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.845020][ T5851] bridge_slave_0: entered allmulticast mode
[   65.849694][ T5851] bridge_slave_0: entered promiscuous mode
[   65.880003][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.883106][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.886132][ T5851] bridge_slave_1: entered allmulticast mode
[   65.890627][ T5851] bridge_slave_1: entered promiscuous mode
[   65.910195][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.942837][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.962975][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.996626][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.999806][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.002235][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.004658][ T5860] bridge_slave_0: entered allmulticast mode
[   66.007984][ T5860] bridge_slave_0: entered promiscuous mode
[   66.012857][ T5855] team0: Port device team_slave_0 added
[   66.032505][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.034807][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.038350][ T5860] bridge_slave_1: entered allmulticast mode
[   66.041238][ T5860] bridge_slave_1: entered promiscuous mode
[   66.045658][ T5855] team0: Port device team_slave_1 added
[   66.063408][ T5851] team0: Port device team_slave_0 added
[   66.089413][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.092168][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.102827][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.110214][ T5851] team0: Port device team_slave_1 added
[   66.128048][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.130871][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.141427][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.161612][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.189252][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.209157][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.211964][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.222500][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.256192][ T5855] hsr_slave_0: entered promiscuous mode
[   66.259917][ T5855] hsr_slave_1: entered promiscuous mode
[   66.264004][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.267655][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.277941][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.320160][ T5860] team0: Port device team_slave_0 added
[   66.332087][ T5860] team0: Port device team_slave_1 added
[   66.403412][ T5851] hsr_slave_0: entered promiscuous mode
[   66.406026][ T5851] hsr_slave_1: entered promiscuous mode
[   66.409225][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   66.411255][ T5851] Cannot create hsr debugfs directory
[   66.427809][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.430591][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.441842][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.459497][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.461682][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.470454][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.622917][ T5860] hsr_slave_0: entered promiscuous mode
[   66.625271][ T5860] hsr_slave_1: entered promiscuous mode
[   66.627984][ T5860] debugfs: 'hsr0' already exists in 'hsr'
[   66.629866][ T5860] Cannot create hsr debugfs directory
[   66.740033][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.772873][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.793365][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.832608][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.898572][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.910270][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.934511][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.957289][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.013245][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.021533][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.040345][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.050050][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.118525][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.162424][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   67.180475][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.184200][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.198085][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.200983][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.227325][ T5853] Bluetooth: hci0: command tx timeout
[   67.242928][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.263471][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.283375][ T5855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.296620][ T5853] Bluetooth: hci1: command tx timeout
[   67.296924][ T5235] Bluetooth: hci2: command tx timeout
[   67.305174][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   67.311646][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[   67.329618][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.332963][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.338191][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.340319][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.359380][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.361913][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.379904][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.390910][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.393751][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.502257][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.611690][ T5855] veth0_vlan: entered promiscuous mode
[   67.636003][ T5855] veth1_vlan: entered promiscuous mode
[   67.663040][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.674578][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.730127][ T5855] veth0_macvtap: entered promiscuous mode
[   67.749004][ T5855] veth1_macvtap: entered promiscuous mode
[   67.772958][ T5860] veth0_vlan: entered promiscuous mode
[   67.779562][ T5851] veth0_vlan: entered promiscuous mode
[   67.791587][ T5860] veth1_vlan: entered promiscuous mode
[   67.803191][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.820935][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.825427][ T5851] veth1_vlan: entered promiscuous mode
[   67.848434][ T5904] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.857790][ T5904] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.870276][ T5904] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.873807][ T5904] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.912899][ T5860] veth0_macvtap: entered promiscuous mode
[   67.932431][ T5851] veth0_macvtap: entered promiscuous mode
[   67.938614][ T5860] veth1_macvtap: entered promiscuous mode
[   67.951902][ T5851] veth1_macvtap: entered promiscuous mode
[   67.986960][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.011784][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.022490][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.040833][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.058454][ T4381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.062178][ T4381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.069850][ T5904] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.077054][ T5904] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.088329][ T5904] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.116021][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.117188][ T5904] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.119981][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.122828][ T5904] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.122864][ T5904] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.150959][ T5904] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.155308][ T5904] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.232243][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.284808][ T4381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.290124][ T4381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.319791][ T4381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.325887][ T4381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.353296][ T5921] bridge0: port 3(hsr0) entered blocking state
[   68.355771][ T5921] bridge0: port 3(hsr0) entered disabled state
[   68.359398][ T5921] hsr0: entered allmulticast mode
[   68.361042][ T5921] hsr_slave_0: entered allmulticast mode
[   68.363170][ T5921] hsr_slave_1: entered allmulticast mode
[   68.366192][ T5921] hsr0: entered promiscuous mode
[   68.369655][ T5921] bridge0: port 3(hsr0) entered blocking state
[   68.371930][ T5921] bridge0: port 3(hsr0) entered forwarding state
[   68.383137][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.386557][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.418054][ T4381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.421266][ T4381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.552483][ T5932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   68.651452][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.655526][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.684030][ T5943] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2'.
[   68.749489][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.764173][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.928326][ T5943] ..0: renamed from hsr0 (while UP)
[   68.938695][ T5943] ..0: entered allmulticast mode
[   68.947054][ T5943] hsr_slave_0: entered allmulticast mode
[   68.949392][ T5943] hsr_slave_1: entered allmulticast mode
[   68.952175][ T5943] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[   68.989474][ T5904] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.995374][ T5904] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.013841][ T5904] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.024321][ T5904] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.033532][ T5935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6'.
[   69.046574][ T5935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6'.
[   69.078606][ T5935] bond0: entered promiscuous mode
[   69.080607][ T5935] bond_slave_0: entered promiscuous mode
[   69.082872][ T5935] bond_slave_1: entered promiscuous mode
[   69.088114][ T5935] bridge0: entered promiscuous mode
[   69.228747][ T1277] 
[   69.229890][ T1277] ============================================
[   69.232600][ T1277] WARNING: possible recursive locking detected
[   69.235307][ T1277] syzkaller #0 Not tainted
[   69.237905][ T1277] --------------------------------------------
[   69.240990][ T1277] kworker/0:2/1277 is trying to acquire lock:
[   69.243663][ T1277] ffff88801e53cf30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360
[   69.247617][ T1277] 
[   69.247617][ T1277] but task is already holding lock:
[   69.250790][ T1277] ffff8880276d0f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360
[   69.254732][ T1277] 
[   69.254732][ T1277] other info that might help us debug this:
[   69.258393][ T1277]  Possible unsafe locking scenario:
[   69.258393][ T1277] 
[   69.261688][ T1277]        CPU0
[   69.263171][ T1277]        ----
[   69.264657][ T1277]   lock(&hsr->seqnr_lock);
[   69.266692][ T1277]   lock(&hsr->seqnr_lock);
[   69.268682][ T1277] 
[   69.268682][ T1277]  *** DEADLOCK ***
[   69.268682][ T1277] 
[   69.272140][ T1277]  May be due to missing lock nesting notation
[   69.272140][ T1277] 
[   69.275582][ T1277] 13 locks held by kworker/0:2/1277:
[   69.277910][ T1277]  #0: ffff888107ca7d48 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[   69.282567][ T1277]  #1: ffffc900075cfbc0 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[   69.288110][ T1277]  #2: ffff888119d85538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xd60
[   69.292166][ T1277]  #3: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x1e7/0xe60
[   69.296239][ T1277]  #4: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550
[   69.300092][ T1277]  #5: ffffffff8e13a140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[   69.304289][ T1277]  #6: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360
[   69.308251][ T1277]  #7: ffff8880276d0f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360
[   69.312324][ T1277]  #8: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860
[   69.316350][ T1277]  #9: ffffffff8e13a140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[   69.320569][ T1277]  #10: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840
[   69.324597][ T1277]  #11: ffffffff8e13a140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[   69.328780][ T1277]  #12: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360
[   69.332819][ T1277] 
[   69.332819][ T1277] stack backtrace:
[   69.335439][ T1277] CPU: 0 UID: 0 PID: 1277 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) 
[   69.335456][ T1277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   69.335466][ T1277] Workqueue: mld mld_ifc_work
[   69.335484][ T1277] Call Trace:
[   69.335491][ T1277]  <TASK>
[   69.335498][ T1277]  dump_stack_lvl+0x189/0x250
[   69.335524][ T1277]  ? __pfx_dump_stack_lvl+0x10/0x10
[   69.335539][ T1277]  ? __pfx__printk+0x10/0x10
[   69.335560][ T1277]  print_deadlock_bug+0x28b/0x2a0
[   69.335575][ T1277]  validate_chain+0x1a3f/0x2140
[   69.335590][ T1277]  ? skb_network_protocol+0x508/0x760
[   69.335610][ T1277]  ? __pfx_skb_network_protocol+0x10/0x10
[   69.335629][ T1277]  __lock_acquire+0xab9/0xd20
[   69.335649][ T1277]  ? hsr_dev_xmit+0x237/0x360
[   69.335666][ T1277]  lock_acquire+0x120/0x360
[   69.335684][ T1277]  ? hsr_dev_xmit+0x237/0x360
[   69.335702][ T1277]  ? check_noncircular+0xe0/0x160
[   69.335716][ T1277]  ? hsr_dev_xmit+0x237/0x360
[   69.335733][ T1277]  _raw_spin_lock_bh+0x36/0x50
[   69.335752][ T1277]  ? hsr_dev_xmit+0x237/0x360
[   69.335769][ T1277]  hsr_dev_xmit+0x237/0x360
[   69.335785][ T1277]  ? hsr_dev_xmit+0x2d/0x360
[   69.335803][ T1277]  dev_hard_start_xmit+0x2d7/0x830
[   69.335825][ T1277]  __dev_queue_xmit+0x1b8d/0x3b50
[   69.335843][ T1277]  ? __lock_acquire+0xab9/0xd20
[   69.335868][ T1277]  ? __dev_queue_xmit+0x27b/0x3b50
[   69.335887][ T1277]  ? __lock_acquire+0xab9/0xd20
[   69.335907][ T1277]  ? __pfx___dev_queue_xmit+0x10/0x10
[   69.335926][ T1277]  ? unwind_next_frame+0xa5/0x2390
[   69.335941][ T1277]  ? unwind_next_frame+0xa5/0x2390
[   69.335957][ T1277]  ? __lock_acquire+0xab9/0xd20
[   69.335981][ T1277]  br_dev_queue_push_xmit+0x6c5/0x890
[   69.336000][ T1277]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[   69.336017][ T1277]  ? NF_HOOK+0x9e/0x3c0
[   69.336033][ T1277]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[   69.336049][ T1277]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[   69.336065][ T1277]  NF_HOOK+0x320/0x3c0
[   69.336081][ T1277]  ? NF_HOOK+0x9e/0x3c0
[   69.336095][ T1277]  ? __pfx_NF_HOOK+0x10/0x10
[   69.336111][ T1277]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[   69.336129][ T1277]  br_forward_finish+0xd3/0x130
[   69.336145][ T1277]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[   69.336161][ T1277]  ? __pfx_br_forward_finish+0x10/0x10
[   69.336177][ T1277]  ? __pfx_br_forward_finish+0x10/0x10
[   69.336192][ T1277]  NF_HOOK+0x320/0x3c0
[   69.336233][ T1277]  ? NF_HOOK+0x9e/0x3c0
[   69.336250][ T1277]  ? __pfx_NF_HOOK+0x10/0x10
[   69.336268][ T1277]  __br_forward+0x41e/0x600
[   69.336284][ T1277]  ? __pfx_br_forward_finish+0x10/0x10
[   69.336301][ T1277]  ? __pfx___br_forward+0x10/0x10
[   69.336318][ T1277]  ? skb_clone+0x246/0x3a0
[   69.336336][ T1277]  maybe_deliver+0xb5/0x160
[   69.336354][ T1277]  br_flood+0x31a/0x6a0
[   69.336371][ T1277]  ? br_dev_xmit+0x185/0x1840
[   69.336383][ T1277]  br_dev_xmit+0x11b3/0x1840
[   69.336395][ T1277]  ? br_dev_xmit+0x185/0x1840
[   69.336409][ T1277]  ? __pfx_br_dev_xmit+0x10/0x10
[   69.336419][ T1277]  ? validate_xmit_xfrm+0xbf/0x1160
[   69.336438][ T1277]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[   69.336455][ T1277]  ? kasan_save_track+0x4f/0x80
[   69.336475][ T1277]  dev_hard_start_xmit+0x2d7/0x830
[   69.336497][ T1277]  __dev_queue_xmit+0x1b8d/0x3b50
[   69.336518][ T1277]  ? __dev_queue_xmit+0x27b/0x3b50
[   69.336538][ T1277]  ? trace_kmem_cache_alloc+0x1f/0xc0
[   69.336555][ T1277]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[   69.336573][ T1277]  ? __pfx___dev_queue_xmit+0x10/0x10
[   69.336590][ T1277]  ? __copy_skb_header+0xa7/0x550
[   69.336607][ T1277]  ? __asan_memcpy+0x40/0x70
[   69.336622][ T1277]  ? __pskb_copy_fclone+0x9b5/0xfb0
[   69.336639][ T1277]  ? __asan_memcpy+0x40/0x70
[   69.336653][ T1277]  ? __pskb_copy_fclone+0x9b5/0xfb0
[   69.336673][ T1277]  ? hsr_create_tagged_frame+0x449/0xc30
[   69.336685][ T1277]  ? __asan_memmove+0x40/0x70
[   69.336700][ T1277]  ? hsr_addr_subst_dest+0x307/0xac0
[   69.336720][ T1277]  hsr_forward_skb+0x158b/0x2860
[   69.336736][ T1277]  ? hsr_forward_skb+0x9e/0x2860
[   69.336749][ T1277]  ? __pfx_hsr_forward_skb+0x10/0x10
[   69.336760][ T1277]  ? do_raw_spin_lock+0x121/0x290
[   69.336776][ T1277]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   69.336792][ T1277]  ? hsr_dev_xmit+0x237/0x360
[   69.336810][ T1277]  hsr_dev_xmit+0x242/0x360
[   69.336826][ T1277]  ? hsr_dev_xmit+0x2d/0x360
[   69.336848][ T1277]  dev_hard_start_xmit+0x2d7/0x830
[   69.336871][ T1277]  __dev_queue_xmit+0x1b8d/0x3b50
[   69.336888][ T1277]  ? register_lock_class+0x51/0x320
[   69.336908][ T1277]  ? __dev_queue_xmit+0x27b/0x3b50
[   69.336930][ T1277]  ? __pfx___dev_queue_xmit+0x10/0x10
[   69.336948][ T1277]  ? read_seqbegin+0x122/0x250
[   69.336961][ T1277]  ? neigh_connected_output+0x1ea/0x460
[   69.336975][ T1277]  ? lockdep_hardirqs_on+0x9c/0x150
[   69.336989][ T1277]  ? read_seqbegin+0x1ac/0x250
[   69.337001][ T1277]  ? __pfx_read_seqbegin+0x10/0x10
[   69.337014][ T1277]  ? eth_header+0x11b/0x200
[   69.337031][ T1277]  ? __asan_memcpy+0x40/0x70
[   69.337045][ T1277]  ? eth_header+0x11b/0x200
[   69.337060][ T1277]  ? __pfx_eth_header+0x10/0x10
[   69.337076][ T1277]  ? neigh_connected_output+0x3b6/0x460
[   69.337094][ T1277]  ip6_finish_output2+0xfb3/0x1480
[   69.337114][ T1277]  ? __pfx_ip6_finish_output2+0x10/0x10
[   69.337129][ T1277]  ? ip6_mtu+0x7d/0x490
[   69.337141][ T1277]  ? ip6_mtu+0x38c/0x490
[   69.337153][ T1277]  ? ip6_finish_output+0x2ef/0x4e0
[   69.337166][ T1277]  ? ip6_output+0x126/0x550
[   69.337178][ T1277]  ip6_output+0x340/0x550
[   69.337192][ T1277]  NF_HOOK+0x9e/0x380
[   69.337206][ T1277]  ? __pfx_NF_HOOK+0x10/0x10
[   69.337243][ T1277]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[   69.337256][ T1277]  ? do_raw_spin_unlock+0x4d/0x240
[   69.337271][ T1277]  ? icmp6_dst_alloc+0x3a5/0x420
[   69.337284][ T1277]  ? icmp6_dst_alloc+0x3a5/0x420
[   69.337297][ T1277]  mld_sendpack+0x8d4/0xe60
[   69.337316][ T1277]  ? mld_sendpack+0x1e7/0xe60
[   69.337330][ T1277]  ? __pfx_mld_sendpack+0x10/0x10
[   69.337350][ T1277]  mld_ifc_work+0x83e/0xd60
[   69.337364][ T1277]  ? _raw_spin_unlock_irq+0x23/0x50
[   69.337376][ T1277]  ? process_scheduled_works+0x9ef/0x17b0
[   69.337389][ T1277]  process_scheduled_works+0xae1/0x17b0
[   69.337410][ T1277]  ? __pfx_process_scheduled_works+0x10/0x10
[   69.337428][ T1277]  worker_thread+0x8a0/0xda0
[   69.337448][ T1277]  kthread+0x711/0x8a0
[   69.337464][ T1277]  ? __pfx_worker_thread+0x10/0x10
[   69.337477][ T1277]  ? __pfx_kthread+0x10/0x10
[   69.337492][ T1277]  ? _raw_spin_unlock_irq+0x23/0x50
[   69.337503][ T1277]  ? lockdep_hardirqs_on+0x9c/0x150
[   69.337516][ T1277]  ? __pfx_kthread+0x10/0x10
[   69.337531][ T1277]  ret_from_fork+0x439/0x7d0
[   69.337545][ T1277]  ? __pfx_ret_from_fork+0x10/0x10
[   69.337558][ T1277]  ? __switch_to_asm+0x39/0x70
[   69.337575][ T1277]  ? __switch_to_asm+0x33/0x70
[   69.337591][ T1277]  ? __pfx_kthread+0x10/0x10
[   69.337605][ T1277]  ret_from_fork_asm+0x1a/0x30
[   69.337623][ T1277]  </TASK>
[   69.597569][ T5235] Bluetooth: hci0: command tx timeout
[   69.599306][ T5235] Bluetooth: hci1: command tx timeout
[   69.600999][ T5235] Bluetooth: hci2: command tx timeout
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   69.629018][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'.
[   69.638487][ T5975] netlink: 'syz.2.11': attribute type 2 has an invalid length.
[   69.641633][ T5975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11'.
[   70.992518][ T5904] bridge_slave_1: left allmulticast mode
[   70.998934][ T5904] bridge_slave_1: left promiscuous mode
[   71.000862][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.004162][ T5904] bridge_slave_0: left allmulticast mode
[   71.005978][ T5904] bridge_slave_0: left promiscuous mode
[   71.007944][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.139494][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.141482][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.169000][ T5904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.172373][ T5904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.175388][ T5904] bond0 (unregistering): Released all slaves
[   71.394561][ T5904] hsr_slave_0: left promiscuous mode
[   71.397853][ T5904] hsr_slave_1: left promiscuous mode
[   71.400863][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.404497][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.564593][ T5855] syz-executor (5855) used greatest stack depth: 19064 bytes left
[   71.573835][ T5904] team0 (unregistering): Port device team_slave_1 removed
[   71.589830][ T5904] team0 (unregistering): Port device team_slave_0 removed
[   72.043509][ T5904] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.100470][ T5904] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.140626][ T5904] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.181851][ T5904] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.265830][ T5904] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.302878][ T5904] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.353370][ T5904] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.421395][ T5904] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.490161][ T5904] bridge_slave_1: left allmulticast mode
[   72.492577][ T5904] bridge_slave_1: left promiscuous mode
[   72.495172][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.501138][ T5904] bridge_slave_0: left allmulticast mode
[   72.503369][ T5904] bridge_slave_0: left promiscuous mode
[   72.505645][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.512406][ T5904] hsr0: left allmulticast mode
[   72.514353][ T5904] hsr_slave_0: left allmulticast mode
[   72.516720][ T5904] hsr_slave_1: left allmulticast mode
[   72.518914][ T5904] hsr0: left promiscuous mode
[   72.521057][ T5904] bridge0: port 3(hsr0) entered disabled state
[   72.524858][ T5904] bridge_slave_1: left allmulticast mode
[   72.527793][ T5904] bridge_slave_1: left promiscuous mode
[   72.530306][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.534712][ T5904] bridge_slave_0: left allmulticast mode
[   72.538230][ T5904] bridge_slave_0: left promiscuous mode
[   72.540716][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.684307][ T5904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.689220][ T5904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.693394][ T5904] bond0 (unregistering): Released all slaves
[   72.736122][ T5904] bridge0 (unregistering): left promiscuous mode
[   72.821604][ T5904] bond0 (unregistering): left promiscuous mode
[   72.824098][ T5904] bond_slave_0: left promiscuous mode
[   72.826907][ T5904] bond_slave_1: left promiscuous mode
[   72.832372][ T5904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.837229][ T5904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.841552][ T5904] bond0 (unregistering): Released all slaves
[   73.232969][ T5904] hsr_slave_0: left promiscuous mode
[   73.235148][ T5904] hsr_slave_1: left promiscuous mode
[   73.238596][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.241435][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.244041][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.248287][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.253029][ T5904] hsr_slave_0: left promiscuous mode
[   73.255200][ T5904] hsr_slave_1: left promiscuous mode
[   73.257750][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.260187][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.262801][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.265247][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.272779][ T5904] veth1_macvtap: left promiscuous mode
[   73.274626][ T5904] veth0_macvtap: left promiscuous mode
[   73.276659][ T5904] veth1_vlan: left promiscuous mode
[   73.278499][ T5904] veth0_vlan: left promiscuous mode
[   73.280977][ T5904] veth1_macvtap: left promiscuous mode
[   73.282798][ T5904] veth0_macvtap: left promiscuous mode
[   73.284644][ T5904] veth1_vlan: left promiscuous mode
[   73.286919][ T5904] veth0_vlan: left promiscuous mode
[   73.478539][ T5904] team0 (unregistering): Port device team_slave_1 removed
[   73.492700][ T5904] team0 (unregistering): Port device team_slave_0 removed
[   73.649234][ T5904] team0 (unregistering): Port device team_slave_1 removed
[   73.662950][ T5904] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
11:57:40  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006f RBX=000000000000006f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900075cd850
R8 =ffff8880207a0237 R9 =1ffff110040f4046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99b028e6 R14=ffffffff99df7480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0c4d188d58 CR3=000000010f3d2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=000000000000006f 0000000000003331
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffff0000 XMM09=00000000000000e1 0000000000003331
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44e7b RBX=1ffff11009608349 RCX=ffff88810600d640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900042174c0 RSP=ffffc90004217340
R8 =ffffffff8fa38f37 R9 =1ffffffff1f471e6 R10=dffffc0000000000 R11=fffffbfff1f471e7
R12=ffff88804b041a48 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44e63 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0c4d187fc8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0c4c5a7498 00007f0c4c5a7470 XMM03=00007f0c4c5a74a8 00007f0c4c5a74a0
XMM04=00007f0c4d10d100 00007f0c4c5a7460 XMM05=00007f0c4c5a7478 00007f0c4c5a74c0
XMM06=00007f0c4c5a74b8 00007f0c4c5a74b0 XMM07=00007f0c4c5a74a8 00007f0c4c5a74a0
XMM08=0000000000000000 00007f0c4c412f0f XMM09=0000000000000000 00007f0c4c412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
