last executing test programs:

1.078151531s ago: executing program 2 (id=1117):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x2000)

996.448962ms ago: executing program 2 (id=1119):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)

995.945223ms ago: executing program 2 (id=1121):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x19, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000feffffff000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50)

812.580032ms ago: executing program 2 (id=1122):
r0 = socket(0x2, 0x3, 0x81)
setsockopt(r0, 0xff, 0x1, 0x0, 0x26)

746.423853ms ago: executing program 2 (id=1124):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x66}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)

745.783832ms ago: executing program 2 (id=1126):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x278, 0x100000c, 0x148, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x1000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "3a2a8fa7d4b22c81086c268084a9c7223d88d322ef00"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0xfe}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff000000, 0xffffff00, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21, 0x0, 0x28}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xd, 0xa1, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, 0x0, &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x13}, 0x94)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c)

398.604061ms ago: executing program 0 (id=1139):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r0 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24000001}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@local, 0x0, 0x1, 0x0, 0x6}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r2, 0x29, 0x1c, 0x0, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$kcm(0x2, 0x8, 0x2)
r5 = accept4(r3, 0x0, 0x0, 0x0)
close(r5)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)

276.011204ms ago: executing program 0 (id=1142):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x400101a0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0xff, 0x0, 0xfffffeff}})

275.647359ms ago: executing program 0 (id=1144):
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

196.408947ms ago: executing program 1 (id=1146):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x4e, 0x7ff, 0x7ff, 0x1, 0xc, 0x6}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8)

195.95381ms ago: executing program 1 (id=1147):
socket$kcm(0x11, 0x200000000000002, 0x300)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x2000)

106.308132ms ago: executing program 0 (id=1148):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x368, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [0x0, 0xff000000], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0)

105.877821ms ago: executing program 1 (id=1149):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x620542, 0x0)
unshare(0x20000400)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000)
pwritev(r0, 0x0, 0x0, 0x0, 0x0)

105.77466ms ago: executing program 1 (id=1150):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910435000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

105.282293ms ago: executing program 0 (id=1151):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x800, 0x28, 0x0, 0xb, 0x3e, 0xeef6, 0x2, 0x6, 0x9, 0x5, 0x401, 0x4fa0, 0x0, 0x7ff, 0x7, 0x2, 0x1ff, 0x2, 0x92e4, 0x6, 0x561, 0x0, 0x5, 0x8, 0x8, 0xa00, 0x2, 0x8, 0xfffffff8, 0x9, 0x3, 0x8000, 0x80c6, 0x3, 0x6, 0x2, 0x6, 0x9, 0x2, 0x2, 0x8a0b, 0x100, 0x10001, 0x3, 0x4, 0xf3a, 0x6, 0xf, 0x5c72, 0x9, 0x4, 0x7fff, 0x6, 0x2, 0xec89, 0x2, 0xa, 0x3, 0x80000000, 0x7fffffff, 0x5, 0x1, 0x9, 0x6, 0x293, 0x16214, 0x9, 0x1, 0x1, 0x5, 0x8, 0x5, 0x7, 0x4, 0xfffffffe, 0x437, 0x10000, 0x8001, 0x3, 0x54, 0x2, 0x2, 0x9, 0x2, 0x7, 0xe, 0x5, 0x0, 0x1, 0x0, 0x5, 0x7615154, 0xfe000000, 0x0, 0x5, 0x7, 0x7, 0xa0, 0x7, 0x3, 0x8000, 0x3, 0x3, 0x6, 0xcc8, 0x6, 0x1400000, 0x9, 0xffffffff, 0x3, 0x7, 0x0, 0x8, 0x6, 0x7ff, 0x101, 0x8001, 0x1, 0x1, 0x405, 0x7, 0x0, 0xfffffbff, 0xffff0000, 0x9, 0x7fff, 0x1, 0x0, 0x9, 0x7, 0x7ff, 0x1000, 0x6, 0x3, 0xf42e, 0xba, 0x3, 0xd24, 0x40, 0x6, 0xfffffffe, 0x9, 0x9, 0x8, 0x4, 0x1, 0xffffaa35, 0x5, 0x6104df6a, 0x6, 0x5, 0x0, 0x6, 0x8, 0x1, 0x9, 0x8001, 0x8bb, 0x6, 0x4, 0x4, 0x2, 0x7, 0x0, 0x5, 0x4, 0x2, 0x7, 0x101, 0xc7, 0x7, 0x1, 0x6, 0x3, 0x4, 0x13d1, 0x2, 0x9d0, 0x3ff, 0x2, 0x6, 0x5, 0x726, 0x9522, 0x9, 0x9, 0x0, 0x401, 0x5, 0x7f, 0x2, 0xe2, 0xff, 0x19, 0x1, 0x189, 0x34, 0xc, 0xff, 0xdef, 0x3, 0x401, 0x6, 0x185e, 0xb, 0x8, 0xfff, 0x0, 0x5, 0x4, 0x4, 0x10, 0x2, 0x2, 0x7, 0x1, 0x4cbc, 0x7, 0x80000000, 0x40, 0xeb5, 0x7f, 0xdfb, 0x7ff, 0x8, 0x5, 0x4, 0x9, 0xffffffff, 0x7, 0x2, 0xc1d, 0x6, 0x96cc0000, 0x4, 0x3, 0x0, 0x1, 0x5, 0x0, 0x7f, 0x6, 0xd, 0x0, 0x9fd2, 0x6, 0xa0, 0x2ad, 0x8, 0x3ff, 0xbb, 0x2, 0xf9, 0x400, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6e, 0x1, 0x1, 0x7, 0x0, {0x6, 0x1, 0x1, 0xeaeb, 0x5, 0x7}, {0x9, 0x3, 0x1, 0xf2, 0x1, 0x1}, 0x9, 0x4, 0xa}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xc2d, 0x4, 0x80000001, 0x8, 0x0, 0x1, 0x0, 0x93, 0x3, 0x8, 0x9, 0x615d37e8, 0xe, 0x6, 0x7, 0x8, 0x0, 0x5, 0x9, 0x2, 0x568000, 0x9, 0x8, 0x5, 0x6, 0x5a, 0xc, 0x9, 0x84fe, 0xb7, 0x10001, 0x6, 0x3, 0x2000000, 0x83, 0x3, 0x4, 0xbd1, 0xffffffff, 0x9, 0x4, 0x401, 0x414b, 0x4ac5, 0xc, 0x5, 0x37, 0x2, 0x7, 0x9ee4, 0x0, 0x2, 0x81, 0x403, 0x2, 0x9, 0x9, 0x8, 0x9531, 0x1, 0x29, 0xffff0001, 0x3, 0x8000, 0xadc3, 0x10000, 0x3cf, 0x1, 0x3, 0xe, 0x7, 0x3, 0x400, 0xaa7, 0x6950, 0xfff, 0x3, 0x7, 0x6, 0x7, 0x1, 0xc0a, 0x1, 0x3, 0x70a482f2, 0xe00, 0x6, 0x1, 0x6, 0x5, 0x8, 0x7, 0x1, 0xe, 0x45, 0x10, 0x93d1, 0x10001, 0x3, 0x6, 0x3, 0x57, 0x7fff, 0x3, 0xfffffe01, 0x7b56, 0xe542, 0x7, 0x9, 0x10000, 0x4, 0x8, 0x7, 0x3, 0x685, 0x5160, 0x7, 0x3, 0xfbb, 0x8, 0xfffffff7, 0x1, 0xffffffff, 0x9, 0x80000001, 0x31, 0xc7, 0x4c, 0x400, 0x4, 0x5, 0x9, 0x1ff, 0x291, 0x4, 0xfffffff9, 0x1ff, 0x50, 0x1, 0x0, 0xfffffffb, 0x100, 0x6, 0x205, 0x7fff, 0x8, 0x9, 0xc, 0x8d3, 0x6, 0xfffffff7, 0x2, 0x9, 0x10000, 0x7a, 0x4, 0x400, 0x1, 0x6, 0x1ff, 0x200, 0xa2680000, 0xa0, 0xe6, 0x8, 0x5, 0xfffffffa, 0x2, 0x10001, 0x9, 0x66, 0x5, 0x80000001, 0xac4, 0x6, 0x6, 0x8, 0x4, 0x7f, 0x2, 0x5, 0x4, 0x9, 0x7f, 0x9, 0x3, 0x4, 0x3, 0x8, 0xf, 0x8, 0x5, 0x5, 0x6, 0x5, 0x3, 0x8, 0x8, 0x1, 0x10000, 0x800, 0x2, 0x9, 0x7, 0x2, 0x1, 0x9, 0x4, 0x9, 0x4, 0x3, 0x4, 0xd3, 0x3, 0x80, 0x8, 0x9, 0xa, 0x2, 0xab, 0x5, 0x7, 0x0, 0x9, 0x2, 0x9, 0x4, 0xb, 0x7, 0x0, 0x2, 0x3ff, 0x5, 0x5, 0x2, 0x5f8, 0x3, 0xff, 0x4bf, 0x1, 0xff, 0x4, 0x4f4, 0x6, 0x2, 0x4, 0x81, 0x9, 0x9, 0x0, 0x7fffffff, 0x8001, 0x6, 0x3, 0xfffffff8]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

26.455786ms ago: executing program 1 (id=1152):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x41100}, 0x94)
r1 = socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000002600000085200000010000006608000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000100850000da060000009500000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x7c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d616328736861323234"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lc\x00', 0xc, 0x80005, 0x39}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000008c0)={{0x73, @local, 0x4e22, 0x3, 'lc\x00', 0x5, 0x8, 0x75}, {@remote, 0x4e20, 0x2, 0x1}}, 0x44)
sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000ffdbdf250c000000200001801400020076657468315f746f5f6873720000000008000300030000001400038010000380"], 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004)
getsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x20040880)
socket$kcm(0x10, 0x2, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10)

24.393303ms ago: executing program 0 (id=1153):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x82}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}}, 0x20008000)

0s ago: executing program 1 (id=1154):
pipe(&(0x7f0000000080))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4)
pipe(&(0x7f00000000c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000031c0))
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {0xffff, 0x1}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084)

0s ago: executing program 0 (id=1155):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x29}}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:47905' (ED25519) to the list of known hosts.
syzkaller login: [   57.868959][ T5589] cgroup: Unknown subsys name 'net'
[   57.991876][ T5589] cgroup: Unknown subsys name 'cpuset'
[   57.996018][ T5589] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.835129][ T5589] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.436701][ T4996] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.449104][ T4996] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.453144][ T4996] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.457068][ T4996] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.461778][ T4996] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.498742][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.502853][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.506545][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.511859][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.515833][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.538501][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.543976][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.547831][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.552482][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.556395][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.376498][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.380060][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.382974][ T5612] bridge_slave_0: entered allmulticast mode
[   65.386935][ T5612] bridge_slave_0: entered promiscuous mode
[   65.418545][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.421544][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.424357][ T5612] bridge_slave_1: entered allmulticast mode
[   65.428091][ T5612] bridge_slave_1: entered promiscuous mode
[   65.497770][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.501411][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.503738][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.506678][ T5606] bridge_slave_0: entered allmulticast mode
[   65.511672][ T5606] bridge_slave_0: entered promiscuous mode
[   65.527963][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.532006][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.534612][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.537328][ T5606] bridge_slave_1: entered allmulticast mode
[   65.541830][ T5606] bridge_slave_1: entered promiscuous mode
[   65.545416][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.548382][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.551568][ T5613] bridge_slave_0: entered allmulticast mode
[   65.554446][ T5613] bridge_slave_0: entered promiscuous mode
[   65.580001][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.583036][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.585871][ T5613] bridge_slave_1: entered allmulticast mode
[   65.590671][ T5613] bridge_slave_1: entered promiscuous mode
[   65.627256][ T5612] team0: Port device team_slave_0 added
[   65.632185][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.648380][ T5612] team0: Port device team_slave_1 added
[   65.652979][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.659442][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.687107][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.726955][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.729742][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.739536][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.746856][ T5606] team0: Port device team_slave_0 added
[   65.750323][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.753037][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.762963][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.780441][ T5606] team0: Port device team_slave_1 added
[   65.791842][ T5613] team0: Port device team_slave_0 added
[   65.808501][ T5613] team0: Port device team_slave_1 added
[   65.838496][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.841767][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.851770][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.869190][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.871902][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.881957][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.886912][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.890123][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.899924][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.916566][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.919955][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.930136][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.948546][ T5612] hsr_slave_0: entered promiscuous mode
[   65.952327][ T5612] hsr_slave_1: entered promiscuous mode
[   66.011367][ T5613] hsr_slave_0: entered promiscuous mode
[   66.014410][ T5613] hsr_slave_1: entered promiscuous mode
[   66.017211][ T5613] debugfs: 'hsr0' already exists in 'hsr'
[   66.019924][ T5613] Cannot create hsr debugfs directory
[   66.049314][ T5606] hsr_slave_0: entered promiscuous mode
[   66.051565][ T5606] hsr_slave_1: entered promiscuous mode
[   66.053622][ T5606] debugfs: 'hsr0' already exists in 'hsr'
[   66.055515][ T5606] Cannot create hsr debugfs directory
[   66.328386][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.338711][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.356337][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.362478][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.412943][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.425331][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.435874][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.446733][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.509590][   T55] Bluetooth: hci0: command tx timeout
[   66.536788][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.549178][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.556730][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.565766][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.589071][   T55] Bluetooth: hci1: command tx timeout
[   66.589107][ T5616] Bluetooth: hci2: command tx timeout
[   66.598598][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.638179][ T5612] 8021q: adding VLAN 0 to HW filter on device team0
[   66.655989][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.658255][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.678523][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.680768][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.694818][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.737867][ T5606] 8021q: adding VLAN 0 to HW filter on device team0
[   66.762212][ T2117] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.765036][ T2117] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.776792][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.791368][ T2117] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.794229][ T2117] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.846552][ T5613] 8021q: adding VLAN 0 to HW filter on device team0
[   66.868536][ T4691] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.871726][ T4691] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.894968][ T4691] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.897824][ T4691] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.218429][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.230152][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.292841][ T5612] veth0_vlan: entered promiscuous mode
[   67.297693][ T5613] veth0_vlan: entered promiscuous mode
[   67.305042][ T5612] veth1_vlan: entered promiscuous mode
[   67.309399][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.313539][ T5613] veth1_vlan: entered promiscuous mode
[   67.347934][ T5612] veth0_macvtap: entered promiscuous mode
[   67.367130][ T5612] veth1_macvtap: entered promiscuous mode
[   67.378591][ T5606] veth0_vlan: entered promiscuous mode
[   67.401781][ T5613] veth0_macvtap: entered promiscuous mode
[   67.410150][ T5606] veth1_vlan: entered promiscuous mode
[   67.421711][ T5613] veth1_macvtap: entered promiscuous mode
[   67.437790][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.462187][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.484695][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.488697][ T5666] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.499666][ T5666] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.506237][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.512551][ T5606] veth0_macvtap: entered promiscuous mode
[   67.518480][ T5666] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.523346][ T5666] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.531660][ T5606] veth1_macvtap: entered promiscuous mode
[   67.547745][ T5666] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.562042][ T5666] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.573272][ T5666] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.578183][ T5666] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.618413][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.637070][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.682639][ T5666] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.686333][ T5666] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.701667][ T5666] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.723630][ T5666] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.728153][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.732934][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.789444][ T4691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.802767][ T4691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.837963][ T3735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.847120][ T3735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.849795][ T4691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.854188][ T4691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.926417][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.932709][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.957704][ T5613] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.996988][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.016104][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.074790][ T5723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   68.077448][ T5723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   68.171439][ T5730] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4'.
[   68.344252][ T5741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'.
[   68.352951][ T5740] netlink: 'syz.0.9': attribute type 1 has an invalid length.
[   68.374911][ T5736] Zero length message leads to an empty skb
[   68.482258][ T5743] netlink: 'syz.0.9': attribute type 10 has an invalid length.
[   68.485310][ T5743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9'.
[   68.492092][ T5743] dummy0: entered promiscuous mode
[   68.531869][ T5686] IPVS: starting estimator thread 0...
[   68.604661][ T5616] Bluetooth: hci0: command tx timeout
[   68.631300][ T5749] IPVS: using max 49 ests per chain, 117600 per kthread
[   68.670612][ T5616] Bluetooth: hci2: command tx timeout
[   68.670696][   T55] Bluetooth: hci1: command tx timeout
[   68.692306][ T5755] 5: entered promiscuous mode
[   68.948539][ T5768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23'.
[   68.976278][ T5770] netlink: 'syz.0.22': attribute type 1 has an invalid length.
[   68.979306][ T5770] netlink: 244 bytes leftover after parsing attributes in process `syz.0.22'.
[   69.107292][ T5775] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   69.125350][ T5775] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   69.127755][ T5775] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   69.129917][ T5775] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   69.132013][ T5775] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   69.134084][ T5775] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   69.136179][ T5775] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   69.138225][ T5775] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   69.140372][ T5775] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   69.142415][ T5775] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   69.219750][ T5782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'.
[   69.222470][ T5782] netlink: 348 bytes leftover after parsing attributes in process `syz.1.25'.
[   69.225367][ T5782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'.
[   69.700915][ T5795] syz.0.34 uses obsolete (PF_INET,SOCK_PACKET)
[   69.724398][ T5799] Cannot find del_set index 14804 as target
[   69.807634][ T5801] syzkaller0: entered promiscuous mode
[   69.811381][ T5801] syzkaller0: entered allmulticast mode
[   70.224647][ T5818] x_tables: duplicate underflow at hook 2
[   70.380660][ T5825] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   70.383430][ T5825] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   70.477515][ T5831] xt_l2tp: invalid flags combination: 0
[   70.663785][ T5845] tipc: Started in network mode
[   70.665584][ T5845] tipc: Node identity ac14140f, cluster identity 4711
[   70.668356][ T5845] tipc: Enabled bearer <udp:syz2>, priority 10
[   70.671224][   T55] Bluetooth: hci0: command tx timeout
[   70.749339][   T55] Bluetooth: hci2: command tx timeout
[   70.749355][ T5616] Bluetooth: hci1: command tx timeout
[   71.032062][ T5863] x_tables: duplicate entry at hook 1
[   71.077170][ T5863] netlink: 'syz.1.63': attribute type 1 has an invalid length.
[   71.137615][ T5865] warning: `syz.2.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.340948][ T5877] netlink: 'syz.2.71': attribute type 2 has an invalid length.
[   71.343883][ T5877] netlink: 'syz.2.71': attribute type 1 has an invalid length.
[   71.349111][ T5877] nbd: illegal input index -120127480
[   71.780056][   T24] tipc: Node number set to 2886997007
[   72.386871][ T5893] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   72.648443][ T5927] Driver unsupported XDP return value 0 on prog  (id 14) dev N/A, expect packet loss!
[   72.677669][ T5930] bond1: Removing last ns target with arp_interval on
[   72.749032][   T55] Bluetooth: hci0: command tx timeout
[   72.771052][   T34] audit: type=1800 audit(1782821941.829:2): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.97" name="blkio.bfq.time_recursive" dev="tmpfs" ino=201 res=0 errno=0
[   72.825799][ T5943] netlink: 'syz.2.98': attribute type 2 has an invalid length.
[   72.829962][   T55] Bluetooth: hci1: command tx timeout
[   72.830704][ T5616] Bluetooth: hci2: command tx timeout
[   73.015196][ T5951] tc action pedit 'at' offset 9 out of bounds
[   73.365114][ T5977] __nla_validate_parse: 6 callbacks suppressed
[   73.365126][ T5977] netlink: 44 bytes leftover after parsing attributes in process `syz.0.116'.
[   73.371756][ T5977] netlink: 47 bytes leftover after parsing attributes in process `syz.0.116'.
[   73.381937][ T5977] netlink: 'syz.0.116': attribute type 6 has an invalid length.
[   73.385194][ T5977] netlink: 'syz.0.116': attribute type 6 has an invalid length.
[   73.623408][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'.
[   73.670416][ T6002] netlink: 104 bytes leftover after parsing attributes in process `syz.1.128'.
[   73.731482][ T6006] netlink: 'syz.1.130': attribute type 4 has an invalid length.
[   73.745278][ T6006] netlink: 'syz.1.130': attribute type 4 has an invalid length.
[   73.757559][ T6006] netlink: 'syz.1.130': attribute type 4 has an invalid length.
[   75.586236][  T838] IPVS: starting estimator thread 0...
[   75.679008][ T6131] IPVS: using max 62 ests per chain, 148800 per kthread
[   75.862784][ T6153] vlan0: entered promiscuous mode
[   75.998180][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.207'.
[   76.032528][   T56] block nbd0: Receive control failed (result -107)
[   76.086004][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.211'.
[   76.146133][ T6182] tc action pedit 'at' offset 5 out of bounds
[   76.148813][ T6182] tc action pedit 'at' offset 5 out of bounds
[   76.151198][ T6182] tc action pedit 'at' offset 5 out of bounds
[   76.153829][ T6182] tc action pedit 'at' offset 5 out of bounds
[   76.156266][ T6182] tc action pedit 'at' offset 5 out of bounds
[   76.158608][ T6182] tc action pedit 'at' offset 5 out of bounds
[   76.161107][ T6182] tc action pedit 'at' offset 5 out of bounds
[   76.163465][ T6182] tc action pedit 'at' offset 5 out of bounds
[   76.165796][ T6182] tc action pedit 'at' offset 5 out of bounds
[   76.168134][ T6182] net_ratelimit: 3324 callbacks suppressed
[   76.168145][ T6182] 0: reclassify loop, rule prio 0, protocol 800
[   76.175874][ T6184] netlink: 100 bytes leftover after parsing attributes in process `syz.1.213'.
[   76.289644][ T6188] syzkaller0: entered promiscuous mode
[   76.291381][ T6188] syzkaller0: entered allmulticast mode
[   76.337560][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.217'.
[   76.341147][ T6192] netlink: 'syz.0.217': attribute type 2 has an invalid length.
[   76.590725][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   76.592652][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   76.620438][ T6217] x_tables: ip_tables: osf match: only valid for protocol 6
[   76.702926][ T6223] tipc: Started in network mode
[   76.704627][ T6223] tipc: Node identity aab84597976e, cluster identity 4711
[   76.707445][ T6223] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.710697][ T6223] syzkaller0: entered promiscuous mode
[   76.712550][ T6223] syzkaller0: entered allmulticast mode
[   76.716731][ T6223] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[   76.732983][ T6223] tipc: Resetting bearer <eth:syzkaller0>
[   76.738530][ T6222] tipc: Resetting bearer <eth:syzkaller0>
[   76.757655][ T6222] tipc: Disabling bearer <eth:syzkaller0>
[   76.832915][ T6226] netlink: 'syz.2.232': attribute type 4 has an invalid length.
[   77.213631][ T6253] syzkaller0: entered promiscuous mode
[   77.215370][ T6253] syzkaller0: entered allmulticast mode
[   78.207086][ T6311] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[   78.234288][ T6310] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.238178][ T6310] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.262456][ T6310] dummy0: left promiscuous mode
[   78.404010][ T6310] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.421244][ T6310] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.435302][ T5686] IPVS: starting estimator thread 0...
[   78.484183][ T6310] vlan0: left promiscuous mode
[   78.529942][ T6319] IPVS: using max 37 ests per chain, 88800 per kthread
[   78.567662][ T6310] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[   78.570577][ T6310] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[   78.586414][ T6311] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   78.600095][ T5666] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.603556][ T5666] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.622515][ T5666] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.625645][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'.
[   78.625932][ T5666] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.317263][ T6348] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.321729][ T6348] 8021q: adding VLAN 0 to HW filter on device team0
[   79.328693][ T6348] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.391353][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.396070][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.426017][ T6348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   79.430707][ T6348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.454514][ T6348] veth1_vlan: left promiscuous mode
[   79.479378][ T6348] veth0_vlan: left promiscuous mode
[   79.482751][ T6348] veth0_vlan: entered promiscuous mode
[   79.489937][ T6348] veth1_vlan: entered promiscuous mode
[   79.497402][ T6348] veth1_macvtap: left promiscuous mode
[   79.500726][ T6348] veth0_macvtap: left promiscuous mode
[   79.504034][ T6348] veth0_macvtap: entered promiscuous mode
[   79.507326][ T6348] veth1_macvtap: entered promiscuous mode
[   79.544720][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.547385][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.560180][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.562768][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.598511][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.604378][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.655136][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.659954][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.771028][ T6362] syzkaller1: entered promiscuous mode
[   79.772688][ T6362] syzkaller1: entered allmulticast mode
[   80.125471][ T6395] syzkaller0: entered promiscuous mode
[   80.127277][ T6395] syzkaller0: entered allmulticast mode
[   80.309410][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.306'.
[   80.477033][ T6421] netlink: 200 bytes leftover after parsing attributes in process `syz.0.310'.
[   80.522018][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'.
[   80.548101][ T6424] 8021q: adding VLAN 0 to HW filter on device bond2
[   80.742621][ T6433] syzkaller1: entered promiscuous mode
[   80.747409][ T6433] syzkaller1: entered allmulticast mode
[   81.169497][ T6467] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0
[   81.362059][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'.
[   81.497934][ T6492] geneve2: entered promiscuous mode
[   82.195162][ T6501] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   82.302373][ T6505] tcf_pedit_act: 8 callbacks suppressed
[   82.302389][ T6505] tc action pedit 'at' offset 45 out of bounds
[   82.307328][ T6505] tc action pedit 'at' offset 45 out of bounds
[   82.309946][ T6505] tc action pedit 'at' offset 45 out of bounds
[   82.312409][ T6505] tc action pedit 'at' offset 45 out of bounds
[   82.314933][ T6505] tc action pedit 'at' offset 45 out of bounds
[   82.317478][ T6505] tc action pedit 'at' offset 45 out of bounds
[   82.320011][ T6505] tc action pedit 'at' offset 45 out of bounds
[   82.322520][ T6505] tc action pedit 'at' offset 45 out of bounds
[   82.324987][ T6505] tc action pedit 'at' offset 45 out of bounds
[   82.327431][ T6505] tc action pedit 'at' offset 45 out of bounds
[   82.329970][ T6505] 0: reclassify loop, rule prio 0, protocol 800
[   82.752396][ T6530] netlink: 56 bytes leftover after parsing attributes in process `syz.0.360'.
[   83.398860][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   83.414296][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'.
[   83.690446][ T6581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.380'.
[   84.003425][   T12] tipc: Subscription rejected, illegal request
[   84.083572][ T6598] netlink: 'syz.2.389': attribute type 5 has an invalid length.
[   84.572579][ T6639] netlink: 9 bytes leftover after parsing attributes in process `syz.0.409'.
[   84.578140][ T6639] gretap0: entered promiscuous mode
[   84.710074][ T6651] syzkaller0: entered promiscuous mode
[   84.712042][ T6651] syzkaller0: entered allmulticast mode
[   84.789726][ T6656] netlink: 'syz.0.417': attribute type 1 has an invalid length.
[   84.959333][ T6667] netlink: 56 bytes leftover after parsing attributes in process `syz.0.422'.
[   85.033730][ T6671] netlink: 'syz.1.424': attribute type 7 has an invalid length.
[   85.151866][ T6683] netlink: 32 bytes leftover after parsing attributes in process `syz.0.431'.
[   85.306060][ T6694] syzkaller0: create flow: hash 2061690928 index 1
[   85.326989][ T6696] team0: Port device syz_tun added
[   85.367536][ T6693] syzkaller0: delete flow: hash 2061690928 index 1
[   86.120044][ T6707] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   86.521751][ T6723] netlink: 72 bytes leftover after parsing attributes in process `syz.0.446'.
[   86.581429][ T6727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   86.815750][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.456'.
[   86.834746][    T9] cfg80211: failed to load regulatory.db
[   86.843535][ T6746] 8021q: adding VLAN 0 to HW filter on device bond1
[   86.879216][   T34] audit: type=1804 audit(1782821955.929:3): pid=6748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.455" name="/newroot/159/cgroup.controllers" dev="tmpfs" ino=823 res=1 errno=0
[   86.910427][   T34] audit: type=1800 audit(1782821955.939:4): pid=6748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.455" name="cgroup.controllers" dev="tmpfs" ino=823 res=0 errno=0
[   86.932620][   T34] audit: type=1804 audit(1782821955.969:5): pid=6748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.455" name="/newroot/159/cgroup.controllers" dev="tmpfs" ino=823 res=1 errno=0
[   87.367734][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'.
[   87.664991][ T6772] netlink: 32 bytes leftover after parsing attributes in process `syz.1.464'.
[   88.742321][ T6784] 0: reclassify loop, rule prio 0, protocol 700
[   88.853633][ T6790] netlink: 20 bytes leftover after parsing attributes in process `syz.0.472'.
[   88.863341][ T6790] Bluetooth: MGMT ver 1.23
[   89.055660][ T6811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.482'.
[   89.058711][ T6811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.482'.
[   89.067291][ T6811] netlink: 128 bytes leftover after parsing attributes in process `syz.1.482'.
[   89.383022][ T6825] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.403542][ T6825] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.055202][ T6854] vlan2: entered promiscuous mode
[   90.056805][ T6854] bridge0: entered promiscuous mode
[   90.179550][ T6860] syzkaller0: entered promiscuous mode
[   90.181517][ T6860] syzkaller0: entered allmulticast mode
[   90.476535][ T6864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.504'.
[   90.761048][ T6845] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   90.909000][   T55] Bluetooth: hci0: command tx timeout
[   91.209432][ T6900] syzkaller0: entered promiscuous mode
[   91.211203][ T6900] syzkaller0: entered allmulticast mode
[   91.392355][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.527'.
[   91.398280][ T5666] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   91.403484][ T5666] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   91.407543][ T5666] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   91.414003][ T5666] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   91.637476][ T6928] syzkaller0: entered promiscuous mode
[   91.643590][ T6928] syzkaller0: entered allmulticast mode
[   91.790737][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'.
[   91.889395][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'.
[   91.893010][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'.
[   91.981350][ T6959] netlink: 3 bytes leftover after parsing attributes in process `syz.0.549'.
[   92.465695][ T7003] Cannot find map_set index 3 as target
[   92.582438][ T7015] netlink: 'syz.0.577': attribute type 1 has an invalid length.
[   92.661451][ T7026] netlink: 'syz.2.582': attribute type 11 has an invalid length.
[   92.989116][   T55] Bluetooth: hci0: command 0x0401 tx timeout
[   93.226348][ T7071] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   93.229506][ T7071] IPv6: NLM_F_CREATE should be set when creating new route
[   93.232268][ T7071] IPv6: NLM_F_CREATE should be set when creating new route
[   93.235113][ T7071] IPv6: NLM_F_CREATE should be set when creating new route
[   93.659968][ T7104] netlink: 'syz.0.620': attribute type 4 has an invalid length.
[   93.673871][ T7104] netlink: 'syz.0.620': attribute type 4 has an invalid length.
[   94.031892][ T7136] netlink: 'syz.0.634': attribute type 6 has an invalid length.
[   94.097559][ T7142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.401998][ T7165] netlink: 'syz.1.650': attribute type 10 has an invalid length.
[   94.407459][ T7165] bond0: (slave 5): Enslaving as an active interface with an up link
[   94.435233][ T7168] __nla_validate_parse: 7 callbacks suppressed
[   94.435250][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'.
[   94.961998][ T7216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.675'.
[   95.076583][ T7221] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.079667][ T7221] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.104902][ T7221] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.107224][ T7221] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.110261][ T7221] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.113109][ T7221] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.116741][ T7221] bridge0: entered allmulticast mode
[   95.127391][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'.
[   95.255211][ T7234] netlink: 64 bytes leftover after parsing attributes in process `syz.0.683'.
[   95.652220][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'.
[   95.702563][ T7271] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma?
[   96.153608][ T5643] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   96.156919][ T5643] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   96.167905][ T5643] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   96.176323][ T5643] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   96.564371][ T7325] syzkaller0: entered promiscuous mode
[   96.566674][ T7325] syzkaller0: entered allmulticast mode
[   96.594739][ T7327] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   96.597701][ T7327] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   96.817586][ T7344] netlink: 128 bytes leftover after parsing attributes in process `syz.1.733'.
[   96.820726][ T7344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   96.908026][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.738'.
[   96.912080][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.738'.
[   96.947060][ T7356] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   97.009133][ T7363] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[   97.011680][ T7363] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   97.306039][ T7390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.755'.
[   97.382206][ T7394] netlink: 'syz.0.757': attribute type 1 has an invalid length.
[   97.415527][ T7394] 8021q: adding VLAN 0 to HW filter on device bond2
[   97.439665][ T7394] vlan2: entered promiscuous mode
[   97.441356][ T7394] bond2: entered promiscuous mode
[   97.448954][ T7394] vlan2: entered allmulticast mode
[   97.450752][ T7394] bond2: entered allmulticast mode
[   97.485935][ T7394] bond2: (slave bridge2): making interface the new active one
[   97.492176][ T7394] bridge2: entered promiscuous mode
[   97.494368][ T7394] bridge2: entered allmulticast mode
[   97.503081][ T7394] bond2: (slave bridge2): Enslaving as an active interface with an up link
[   97.677673][ T7414] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   97.684392][ T7414] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   97.828427][ T7417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.852201][ T7423] netlink: 64 bytes leftover after parsing attributes in process `syz.2.769'.
[   98.112555][ T7440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   99.098087][ T7475] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[   99.104457][ T7475] bond3 (unregistering): Released all slaves
[   99.440229][ T7486] netlink: 'syz.1.798': attribute type 15 has an invalid length.
[   99.442560][ T7486] __nla_validate_parse: 1 callbacks suppressed
[   99.442567][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.798'.
[   99.472902][ T7486] netlink: 'syz.1.798': attribute type 15 has an invalid length.
[   99.472927][ T5666] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[   99.475508][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.798'.
[   99.480820][ T5666] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[   99.483455][ T5666] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[   99.486059][ T5666] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[   99.512352][ T7488] netlink: 'syz.0.799': attribute type 12 has an invalid length.
[   99.514960][ T7488] netlink: 'syz.0.799': attribute type 29 has an invalid length.
[   99.517493][ T7488] netlink: 148 bytes leftover after parsing attributes in process `syz.0.799'.
[  100.265320][ T7531] gre1: entered promiscuous mode
[  100.629032][ T7561] netlink: 64 bytes leftover after parsing attributes in process `syz.1.824'.
[  100.680420][ T7561] syzkaller1: entered promiscuous mode
[  100.682912][ T7561] syzkaller1: entered allmulticast mode
[  101.194450][ T7617] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  101.454292][ T7636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.850'.
[  101.803623][ T7668] netlink: 'syz.0.866': attribute type 1 has an invalid length.
[  101.806040][ T7668] netlink: 224 bytes leftover after parsing attributes in process `syz.0.866'.
[  102.696513][ T7697] pim6reg: entered allmulticast mode
[  102.700664][ T7697] pim6reg: left allmulticast mode
[  102.846128][ T7705] netlink: 6 bytes leftover after parsing attributes in process `syz.2.881'.
[  102.920760][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.885'.
[  103.095083][ T7728] netlink: 'syz.0.891': attribute type 1 has an invalid length.
[  103.130381][ T7728] bond3: entered promiscuous mode
[  103.134336][ T7728] 8021q: adding VLAN 0 to HW filter on device bond3
[  103.192037][ T7728] veth3: entered promiscuous mode
[  103.196462][ T7728] bond3: (slave veth3): Enslaving as a backup interface with a down link
[  103.300533][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'.
[  103.482985][ T7749] syzkaller0: entered promiscuous mode
[  103.485202][ T7749] syzkaller0: entered allmulticast mode
[  103.554875][ T7753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.901'.
[  103.629463][ T7756] syzkaller1: entered promiscuous mode
[  103.631617][ T7756] syzkaller1: entered allmulticast mode
[  103.816452][ T7776] netlink: 'syz.2.905': attribute type 1 has an invalid length.
[  103.842878][ T7776] bond1: entered promiscuous mode
[  103.846128][ T7776] 8021q: adding VLAN 0 to HW filter on device bond1
[  103.879772][ T7776] 8021q: adding VLAN 0 to HW filter on device bond1
[  103.882566][ T7776] bond1: (slave gre1): The slave device specified does not support setting the MAC address
[  103.886261][ T7776] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  103.893390][ T7776] bond1: (slave gre1): making interface the new active one
[  103.895986][ T7776] gre1: entered promiscuous mode
[  103.900301][ T7776] bond1: (slave gre1): Enslaving as an active interface with an up link
[  103.973556][ T7787] sit1: entered promiscuous mode
[  104.370860][ T7815] nbd: nbd0 already in use
[  104.372441][ T7815] block nbd0: NBD_DISCONNECT
[  104.374100][ T7815] block nbd0: Send disconnect failed -32
[  104.375956][ T7815] block nbd0: shutting down sockets
[  104.400070][ T7815] gretap0: left promiscuous mode
[  104.466142][ T7815] geneve2: left promiscuous mode
[  104.474652][ T7815] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  104.485233][ T7815] vlan2: left promiscuous mode
[  104.490989][ T7815] bond2: left promiscuous mode
[  104.492712][ T7815] bridge2: left promiscuous mode
[  104.496297][ T7815] bond3: left promiscuous mode
[  104.497942][ T7815] veth3: left promiscuous mode
[  104.503592][ T7815] sit1: left promiscuous mode
[  104.594725][ T5665] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  104.598211][ T5665] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  104.608967][ T5665] bond3: active interface up!
[  104.724505][ T7853] netlink: 'syz.0.939': attribute type 1 has an invalid length.
[  104.744971][ T7853] 8021q: adding VLAN 0 to HW filter on device bond4
[  104.769854][ T7853] vlan3: entered promiscuous mode
[  104.771475][ T7853] bond4: entered promiscuous mode
[  104.773110][ T7853] vlan3: entered allmulticast mode
[  104.774686][ T7853] bond4: entered allmulticast mode
[  104.795126][ T7853] __nla_validate_parse: 6 callbacks suppressed
[  104.795137][ T7853] netlink: 44 bytes leftover after parsing attributes in process `syz.0.939'.
[  104.804661][ T7853] 8021q: adding VLAN 0 to HW filter on device batadv1
[  104.812526][ T7853] bond4: (slave batadv1): making interface the new active one
[  104.815503][ T7853] batadv1: entered promiscuous mode
[  104.817662][ T7853] batadv1: entered allmulticast mode
[  104.821687][ T7853] bond4: (slave batadv1): Enslaving as an active interface with an up link
[  104.881846][ T7864] netlink: 'syz.0.943': attribute type 1 has an invalid length.
[  104.884624][ T7864] netlink: 'syz.0.943': attribute type 2 has an invalid length.
[  105.180948][ T7879] geneve0: entered promiscuous mode
[  105.183412][ T7879] macvlan3: entered promiscuous mode
[  105.697933][ T7893] Cannot find set identified by id 0 to match
[  105.855992][ T7901] netlink: 'syz.2.958': attribute type 2 has an invalid length.
[  105.939032][ T7909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.961'.
[  105.950848][ T5643] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0
[  105.954386][ T5643] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0
[  105.954700][ T7909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.961'.
[  105.957066][ T5643] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0
[  105.957096][ T5643] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0
[  105.971617][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.960'.
[  106.211462][ T7923] tipc: Failed to remove unknown binding: 66,1,1/0:3872632084/3872632086
[  106.215053][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.967'.
[  106.301234][ T7925] bridge_slave_1: left allmulticast mode
[  106.303066][ T7925] bridge_slave_1: left promiscuous mode
[  106.305313][ T7925] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.312945][ T7932] xt_l2tp: v2 doesn't support IP mode
[  106.325761][ T7925] bridge_slave_0: left allmulticast mode
[  106.328516][ T7925] bridge_slave_0: left promiscuous mode
[  106.330985][ T7925] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.630310][ T7952] netlink: 92 bytes leftover after parsing attributes in process `syz.2.981'.
[  106.764223][ T7963] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  106.766727][ T7963] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  106.795456][ T7965] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.987'.
[  106.812055][ T7965] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.987'.
[  107.221855][ T7988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.995'.
[  107.574826][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.999'.
[  108.202337][ T8032] nbd: must specify a size in bytes for the device
[  108.887085][ T8058] netlink: 'syz.1.1026': attribute type 1 has an invalid length.
[  109.025289][ T7971] Set syz1 is full, maxelem 65536 reached
[  109.128723][ T8074] netlink: 'syz.2.1033': attribute type 4 has an invalid length.
[  109.144298][ T8074] netlink: 'syz.2.1033': attribute type 4 has an invalid length.
[  109.662801][ T8126] ieee802154 phy0 wpan0: encryption failed: -22
[  109.915435][ T8142] __nla_validate_parse: 8 callbacks suppressed
[  109.915448][ T8142] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1065'.
[  110.250874][ T8157] xt_hashlimit: size too large, truncated to 1048576
[  110.769858][ T8151] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  110.772409][ T8151] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  110.775189][ T8155] tipc: Started in network mode
[  110.777247][ T8155] tipc: Node identity 76657468115f, cluster identity 4711
[  110.779789][ T8155] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.782109][ T8160] @0: renamed from bond_slave_1 (while UP)
[  110.789132][ T8161] tipc: Resetting bearer <eth:syzkaller0>
[  110.895076][ T8168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1072'.
[  110.899347][ T8168] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1072'.
[  110.992353][ T8182] netlink: 'syz.1.1080': attribute type 1 has an invalid length.
[  111.104532][ T8192] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1085'.
[  111.736802][ T8212] netem: change failed
[  111.742717][ T8212] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.789014][ T5608] tipc: Node number set to 1731884136
[  112.529833][ T8259] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1111'.
[  112.639308][ T8268] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1115'.
[  112.812271][ T8278] syzkaller0: entered promiscuous mode
[  112.815226][ T8278] syzkaller0: entered allmulticast mode
[  112.822745][ T8278] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.841205][ T8278] tipc: Resetting bearer <eth:syzkaller0>
[  112.851310][ T8276] tipc: Resetting bearer <eth:syzkaller0>
[  112.872188][ T8276] tipc: Disabling bearer <eth:syzkaller0>
[  113.100525][ T8292] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1127'.
[  113.103375][ T8292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1127'.
[  113.106323][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'.
[  113.230764][ T8300] netlink: 'syz.1.1131': attribute type 3 has an invalid length.
[  113.605517][ T8332] Bluetooth: MGMT ver 1.23
[  113.606944][ T8332] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  113.776506][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1152'.
[  113.783167][ T8344] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20002
[  113.861515][ T8348] veth0: entered promiscuous mode
[  113.864023][ T8348] macvtap1: entered promiscuous mode
[  113.866292][ T8348] macvtap1: entered allmulticast mode
[  113.868434][ T8348] veth0: entered allmulticast mode
[  113.872940][ T8350] 
[  113.874009][ T8350] ======================================================
[  113.876662][ T8350] WARNING: possible circular locking dependency detected
[  113.879307][ T8350] syzkaller #0 Not tainted
[  113.881127][ T8350] ------------------------------------------------------
[  113.883801][ T8350] syz.0.1155/8350 is trying to acquire lock:
[  113.886111][ T8350] ffff88816ced88d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_dumpreset_rules+0x72/0xa0
[  113.890079][ T8350] 
[  113.890079][ T8350] but task is already holding lock:
[  113.892864][ T8350] ffff8881127ed6f0 (nlk_cb_mutex-NETFILTER){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0
[  113.896689][ T8350] 
[  113.896689][ T8350] which lock already depends on the new lock.
[  113.896689][ T8350] 
[  113.900588][ T8350] 
[  113.900588][ T8350] the existing dependency chain (in reverse order) is:
[  113.904019][ T8350] 
[  113.904019][ T8350] -> #2 (nlk_cb_mutex-NETFILTER){+.+.}-{4:4}:
[  113.907131][ T8350]        __mutex_lock+0x199/0x12d0
[  113.909081][ T8350]        __netlink_dump_start+0xf4/0x7b0
[  113.911211][ T8350]        ip_set_dump+0x15b/0x1f0
[  113.913090][ T8350]        nfnetlink_rcv_msg+0xcbf/0x12a0
[  113.915211][ T8350]        netlink_rcv_skb+0x226/0x4a0
[  113.917247][ T8350]        nfnetlink_rcv+0x2b9/0x28c0
[  113.919337][ T8350]        netlink_unicast+0x833/0x9f0
[  113.921418][ T8350]        netlink_sendmsg+0x813/0xb40
[  113.923499][ T8350]        ____sys_sendmsg+0xa67/0xad0
[  113.925590][ T8350]        ___sys_sendmsg+0x2a5/0x360
[  113.927652][ T8350]        __x64_sys_sendmsg+0x1bd/0x2a0
[  113.929780][ T8350]        do_syscall_64+0xf0/0xf80
[  113.931751][ T8350]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.934196][ T8350] 
[  113.934196][ T8350] -> #1 (nfnl_subsys_ipset){+.+.}-{4:4}:
[  113.937169][ T8350]        __mutex_lock+0x199/0x12d0
[  113.939136][ T8350]        ip_set_nfnl_get_byindex+0x67/0x230
[  113.941447][ T8350]        set_match_v1_checkentry+0x71/0x230
[  113.943714][ T8350]        xt_check_match+0x425/0xaf0
[  113.945716][ T8350]        __nft_match_init+0x686/0x8d0
[  113.947766][ T8350]        nf_tables_newrule+0x179a/0x28c0
[  113.949886][ T8350]        nfnetlink_rcv+0x128a/0x28c0
[  113.951933][ T8350]        netlink_unicast+0x833/0x9f0
[  113.953966][ T8350]        netlink_sendmsg+0x813/0xb40
[  113.955988][ T8350]        ____sys_sendmsg+0xa67/0xad0
[  113.957995][ T8350]        ___sys_sendmsg+0x2a5/0x360
[  113.959997][ T8350]        __x64_sys_sendmsg+0x1bd/0x2a0
[  113.962126][ T8350]        do_syscall_64+0xf0/0xf80
[  113.964073][ T8350]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.966530][ T8350] 
[  113.966530][ T8350] -> #0 (&nft_net->commit_mutex){+.+.}-{4:4}:
[  113.969529][ T8350]        __lock_acquire+0x1520/0x2cd0
[  113.971531][ T8350]        lock_acquire+0x116/0x340
[  113.973473][ T8350]        __mutex_lock+0x199/0x12d0
[  113.975436][ T8350]        nf_tables_dumpreset_rules+0x72/0xa0
[  113.977714][ T8350]        netlink_dump+0x727/0xf30
[  113.979567][ T8350]        __netlink_dump_start+0x589/0x7b0
[  113.981775][ T8350]        nft_netlink_dump_start_rcu+0xdb/0x1a0
[  113.984077][ T8350]        nf_tables_getrule_reset+0x1e0/0x620
[  113.986345][ T8350]        nfnetlink_rcv_msg+0x8a6/0x12a0
[  113.988437][ T8350]        netlink_rcv_skb+0x226/0x4a0
[  113.990474][ T8350]        nfnetlink_rcv+0x2b9/0x28c0
[  113.992472][ T8350]        netlink_unicast+0x833/0x9f0
[  113.994514][ T8350]        netlink_sendmsg+0x813/0xb40
[  113.996545][ T8350]        ____sys_sendmsg+0xa67/0xad0
[  113.998587][ T8350]        ___sys_sendmsg+0x2a5/0x360
[  114.000588][ T8350]        __x64_sys_sendmsg+0x1bd/0x2a0
[  114.002738][ T8350]        do_syscall_64+0xf0/0xf80
[  114.004664][ T8350]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.007146][ T8350] 
[  114.007146][ T8350] other info that might help us debug this:
[  114.007146][ T8350] 
[  114.010993][ T8350] Chain exists of:
[  114.010993][ T8350]   &nft_net->commit_mutex --> nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER
[  114.010993][ T8350] 
[  114.016423][ T8350]  Possible unsafe locking scenario:
[  114.016423][ T8350] 
[  114.019263][ T8350]        CPU0                    CPU1
[  114.021332][ T8350]        ----                    ----
[  114.023402][ T8350]   lock(nlk_cb_mutex-NETFILTER);
[  114.025343][ T8350]                                lock(nfnl_subsys_ipset);
[  114.028002][ T8350]                                lock(nlk_cb_mutex-NETFILTER);
[  114.030814][ T8350]   lock(&nft_net->commit_mutex);
[  114.032884][ T8350] 
[  114.032884][ T8350]  *** DEADLOCK ***
[  114.032884][ T8350] 
[  114.036226][ T8350] 1 lock held by syz.0.1155/8350:
[  114.038249][ T8350]  #0: ffff8881127ed6f0 (nlk_cb_mutex-NETFILTER){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0
[  114.042276][ T8350] 
[  114.042276][ T8350] stack backtrace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  114.044510][ T8350] CPU: 1 UID: 0 PID: 8350 Comm: syz.0.1155 Not tainted syzkaller #0 PREEMPT(full) 
[  114.044529][ T8350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  114.044539][ T8350] Call Trace:
[  114.044547][ T8350]  <TASK>
[  114.044556][ T8350]  dump_stack_lvl+0x1a9/0x280
[  114.044580][ T8350]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.044598][ T8350]  ? __pfx__printk+0x10/0x10
[  114.044613][ T8350]  ? print_lock_name+0x68/0x90
[  114.044635][ T8350]  print_circular_bug+0x2e1/0x300
[  114.044652][ T8350]  check_noncircular+0x12e/0x150
[  114.044668][ T8350]  __lock_acquire+0x1520/0x2cd0
[  114.044713][ T8350]  ? netlink_unicast+0x833/0x9f0
[  114.044734][ T8350]  ? ____sys_sendmsg+0xa67/0xad0
[  114.044758][ T8350]  ? nf_tables_dumpreset_rules+0x72/0xa0
[  114.044773][ T8350]  lock_acquire+0x116/0x340
[  114.044790][ T8350]  ? nf_tables_dumpreset_rules+0x72/0xa0
[  114.044806][ T8350]  ? __lock_acquire+0x683/0x2cd0
[  114.044834][ T8350]  __mutex_lock+0x199/0x12d0
[  114.044849][ T8350]  ? nf_tables_dumpreset_rules+0x72/0xa0
[  114.044866][ T8350]  ? trace_kmalloc+0x1f/0xb0
[  114.044885][ T8350]  ? __kmalloc_node_track_caller_noprof+0x58a/0x800
[  114.044907][ T8350]  ? nf_tables_dumpreset_rules+0x72/0xa0
[  114.044923][ T8350]  ? __pfx___mutex_lock+0x10/0x10
[  114.044937][ T8350]  ? nft_pernet+0x23/0x240
[  114.044955][ T8350]  ? nft_pernet+0x23/0x240
[  114.044971][ T8350]  ? nft_pernet+0x23/0x240
[  114.044987][ T8350]  ? nft_pernet+0x23/0x240
[  114.045005][ T8350]  nf_tables_dumpreset_rules+0x72/0xa0
[  114.045021][ T8350]  netlink_dump+0x727/0xf30
[  114.045045][ T8350]  ? __pfx_netlink_dump+0x10/0x10
[  114.045064][ T8350]  ? __netlink_lookup+0x7e4/0x8b0
[  114.045083][ T8350]  ? netlink_lookup+0x30/0x200
[  114.045102][ T8350]  ? netlink_lookup+0x30/0x200
[  114.045124][ T8350]  __netlink_dump_start+0x589/0x7b0
[  114.045145][ T8350]  ? nft_netlink_dump_start_rcu+0xb6/0x1a0
[  114.045164][ T8350]  nft_netlink_dump_start_rcu+0xdb/0x1a0
[  114.045184][ T8350]  nf_tables_getrule_reset+0x1e0/0x620
[  114.045204][ T8350]  ? __pfx_nf_tables_getrule_reset+0x10/0x10
[  114.045220][ T8350]  ? __pfx_nf_tables_dumpreset_rules_start+0x10/0x10
[  114.045235][ T8350]  ? __pfx_nf_tables_dumpreset_rules+0x10/0x10
[  114.045250][ T8350]  ? __pfx_nf_tables_dump_rules_done+0x10/0x10
[  114.045272][ T8350]  ? __nla_parse+0x40/0x60
[  114.045289][ T8350]  ? __pfx_nf_tables_getrule_reset+0x10/0x10
[  114.045307][ T8350]  nfnetlink_rcv_msg+0x8a6/0x12a0
[  114.045326][ T8350]  ? unwind_get_return_address+0x4d/0x90
[  114.045343][ T8350]  ? nfnetlink_rcv_msg+0x227/0x12a0
[  114.045368][ T8350]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  114.045403][ T8350]  netlink_rcv_skb+0x226/0x4a0
[  114.045424][ T8350]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  114.045444][ T8350]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  114.045470][ T8350]  ? bpf_lsm_capable+0x9/0x20
[  114.045488][ T8350]  ? security_capable+0x7e/0x2c0
[  114.045510][ T8350]  nfnetlink_rcv+0x2b9/0x28c0
[  114.045530][ T8350]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  114.045553][ T8350]  ? __dev_queue_xmit+0x274/0x36f0
[  114.045571][ T8350]  ? __dev_queue_xmit+0x274/0x36f0
[  114.045588][ T8350]  ? __dev_queue_xmit+0x274/0x36f0
[  114.045606][ T8350]  ? __dev_queue_xmit+0x1da4/0x36f0
[  114.045623][ T8350]  ? __x64_sys_sendmsg+0x1bd/0x2a0
[  114.045639][ T8350]  ? do_syscall_64+0xf0/0xf80
[  114.045654][ T8350]  ? __dev_queue_xmit+0x274/0x36f0
[  114.045674][ T8350]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  114.045726][ T8350]  ? __pfx___dev_queue_xmit+0x10/0x10
[  114.045748][ T8350]  ? ref_tracker_free+0x689/0x830
[  114.045764][ T8350]  ? __copy_skb_header+0xa3/0x4a0
[  114.045781][ T8350]  ? __pfx_ref_tracker_free+0x10/0x10
[  114.045802][ T8350]  ? skb_clone+0x246/0x3a0
[  114.045820][ T8350]  ? __netlink_deliver_tap+0x811/0x860
[  114.045841][ T8350]  ? netlink_deliver_tap+0x2e/0x1b0
[  114.045856][ T8350]  ? netlink_deliver_tap+0x2e/0x1b0
[  114.045872][ T8350]  netlink_unicast+0x833/0x9f0
[  114.045896][ T8350]  ? __pfx_netlink_unicast+0x10/0x10
[  114.045916][ T8350]  ? netlink_sendmsg+0x650/0xb40
[  114.045929][ T8350]  ? skb_put+0x112/0x210
[  114.045945][ T8350]  netlink_sendmsg+0x813/0xb40
[  114.045961][ T8350]  ? __pfx_netlink_sendmsg+0x10/0x10
[  114.045976][ T8350]  ? aa_sock_msg_perm+0xf1/0x1b0
[  114.045996][ T8350]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  114.046010][ T8350]  ? __pfx_netlink_sendmsg+0x10/0x10
[  114.046024][ T8350]  ____sys_sendmsg+0xa67/0xad0
[  114.046044][ T8350]  ? __pfx_____sys_sendmsg+0x10/0x10
[  114.046064][ T8350]  ? import_iovec+0x73/0xa0
[  114.046083][ T8350]  ___sys_sendmsg+0x2a5/0x360
[  114.046100][ T8350]  ? __lock_acquire+0x683/0x2cd0
[  114.046120][ T8350]  ? __pfx____sys_sendmsg+0x10/0x10
[  114.046138][ T8350]  ? futex_wait+0x29a/0x380
[  114.046161][ T8350]  ? __fget_files+0x2a/0x420
[  114.046175][ T8350]  ? __fget_files+0x3a2/0x420
[  114.046193][ T8350]  __x64_sys_sendmsg+0x1bd/0x2a0
[  114.046211][ T8350]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  114.046234][ T8350]  ? do_syscall_64+0xb4/0xf80
[  114.046249][ T8350]  do_syscall_64+0xf0/0xf80
[  114.046263][ T8350]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.046278][ T8350]  ? exc_page_fault+0xa7/0xf0
[  114.046299][ T8350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.046313][ T8350] RIP: 0033:0x7fc514d9ce59
[  114.046328][ T8350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.046342][ T8350] RSP: 002b:00007fc515cae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  114.046358][ T8350] RAX: ffffffffffffffda RBX: 00007fc515015fa0 RCX: 00007fc514d9ce59
[  114.046370][ T8350] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  114.046379][ T8350] RBP: 00007fc514e32e6f R08: 0000000000000000 R09: 0000000000000000
[  114.046388][ T8350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  114.046397][ T8350] R13: 00007fc515016038 R14: 00007fc515015fa0 R15: 00007ffdd6159f68
[  114.046415][ T8350]  </TASK>
[  114.260190][ T8348] veth0: left allmulticast mode
[  114.269010][ T8348] veth0: left promiscuous mode
[  114.280996][ T8348] macvtap1: left promiscuous mode
[  114.291030][ T8348] macvtap1: left allmulticast mode
[  114.549932][ T5643] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.553896][ T5643] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.607001][ T8347] team0: Port device syz_tun removed
[  114.628167][ T5643] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.632326][ T5643] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.727820][ T5643] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.731982][ T5643] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.787937][ T5643] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.792089][ T5643] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.874517][ T5643] bridge_slave_1: left allmulticast mode
[  114.876330][ T5643] bridge_slave_1: left promiscuous mode
[  114.878173][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.891953][ T5643] bridge_slave_0: left allmulticast mode
[  114.893814][ T5643] bridge_slave_0: left promiscuous mode
[  114.895585][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.036074][ T5643] geneve0 (unregistering): left promiscuous mode
[  115.156037][ T5643] bond2 (unregistering): (slave bridge2): Releasing active interface
[  115.159279][ T5643] bridge2 (unregistering): left allmulticast mode
[  115.217893][ T5643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.221832][ T5643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.225095][ T5643] bond0 (unregistering): Released all slaves
[  115.276167][ T5643] bond1 (unregistering): Released all slaves
[  115.331377][ T5643] bond2 (unregistering): Released all slaves
[  115.381582][ T5643] bond3 (unregistering): (slave veth3): Removing an active aggregator
[  115.384297][ T5643] bond3 (unregistering): (slave veth3): Releasing backup interface
[  115.387321][ T5643] bond3 (unregistering): Released all slaves
[  115.395899][ T5643] bond4 (unregistering): (slave batadv1): Releasing active interface
[  115.398299][ T5643] batadv1: left promiscuous mode
[  115.400234][ T5643] batadv1: left allmulticast mode
[  115.402422][ T5643] bond4 (unregistering): Released all slaves
[  115.453794][ T5643] tipc: Disabling bearer <udp:syz2>
[  115.455485][ T5643] tipc: Left network mode
[  115.479829][ T5643] IPVS: stopping backup sync thread 6467 ...
[  115.670324][ T5643] hsr_slave_0: left promiscuous mode
[  115.673111][ T5643] hsr_slave_1: left promiscuous mode
[  115.675722][ T5643] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.680469][ T5643] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.684041][ T5643] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.687009][ T5643] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.695298][ T5643] veth1_macvtap: left promiscuous mode
[  115.697625][ T5643] veth0_macvtap: left promiscuous mode
[  115.700292][ T5643] veth1_vlan: left promiscuous mode
[  115.702488][ T5643] veth0_vlan: left promiscuous mode
[  115.958056][ T5643] team0 (unregistering): Port device team_slave_1 removed
[  115.974779][ T5643] team0 (unregistering): Port device team_slave_0 removed
[  116.517352][ T5643] IPVS: stop unused estimator thread 0...
[  116.652096][ T5643] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  116.655181][ T5643] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  116.658243][ T5643] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.713661][ T5643] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  116.717876][ T5643] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  116.722644][ T5643] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.775298][ T5643] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  116.779626][ T5643] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  116.783782][ T5643] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.850241][ T5643] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  116.854324][ T5643] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  116.858286][ T5643] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.217073][ T5643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.222468][ T5643] bond0 (unregistering): (slave c@0): Releasing backup interface
[  117.226819][ T5643] bond0 (unregistering): (slave 5): Releasing backup interface
[  117.231177][ T5643] bond0 (unregistering): Released all slaves
[  117.235481][ T5643] bond1 (unregistering): Released all slaves
[  117.293592][ T5643] bond2 (unregistering): Released all slaves
[  117.351666][ T5643] 5: left promiscuous mode
[  117.404633][ T5643] tipc: Left network mode
[  117.542204][ T5643] hsr_slave_0: left promiscuous mode
[  117.545002][ T5643] hsr_slave_1: left promiscuous mode
[  117.546821][ T5643] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.551428][ T5643] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.563277][ T5643] veth1_macvtap: left promiscuous mode
[  117.565001][ T5643] veth0_macvtap: left promiscuous mode
[  117.566730][ T5643] veth1_vlan: left promiscuous mode
[  117.568597][ T5643] veth0_vlan: left promiscuous mode
[  117.676911][ T5643] team0 (unregistering): Port device team_slave_1 removed
[  117.687919][ T5643] team0 (unregistering): Port device team_slave_0 removed
[  117.968996][ T5643] IPVS: stop unused estimator thread 0...
