last executing test programs:

1.610400799s ago: executing program 2 (id=3469):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000006c00190cfcfffffffedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9e840500000000f317003480140035006e696336663005000000000000000000140003007665746831"], 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x40040)

1.521715868s ago: executing program 2 (id=3472):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003bc0)=""/1, 0x1}, 0xb}], 0x1, 0x45833af92e4b39ff, 0x0)

1.148657167s ago: executing program 2 (id=3480):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x107}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44015)
socket$nl_xfrm(0x10, 0x3, 0x6)

362.260737ms ago: executing program 1 (id=3504):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x24004800)

362.073364ms ago: executing program 0 (id=3505):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0)
r2 = epoll_create1(0x0)
sendfile(r2, r1, &(0x7f00000000c0)=0xd, 0x4)

314.857723ms ago: executing program 0 (id=3506):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10)

314.186903ms ago: executing program 1 (id=3507):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_drr={0x8}, @qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xed}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x73}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB=',[\x00\x00\"\x00\x00\x00z\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00'], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = epoll_create1(0x80000)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000", @ANYRESOCT], 0x30}}, 0x0)
clock_gettime(0x2, &(0x7f0000001140))
epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3)
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB='\a\x00', @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000100080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14020000f403010000000000000000000000000a14000000f903010000000000000000000000000a"], 0x28}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="1400000010000100000000cf2f66fa1b00000000000000000a50000000060a0b0400000000000000000200fffe24000480200001800700010063740000140002800100024001cdb7a813179b530000000c0900010073797a30000000000900020073797a3200000000140000001100010000bea3d6a70000000500000a"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2})
syz_emit_ethernet(0x11e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r5)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000a80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000328bd7000ffdbdf256b00000008000300", @ANYRES32=r13, @ANYBLOB="0a000600ffffffffffff00000a001affffff00000a001a00ffffffffffff00000a001a0008021100"/60], 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x4008010)
r14 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNDEL(r14, 0x400448c9, &(0x7f0000000000)={@any, 0x200})

254.653495ms ago: executing program 0 (id=3508):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000080)=@udp, 0x2000000}, 0x20)

237.380188ms ago: executing program 0 (id=3509):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000d40)={0x283, 0x1})

232.660807ms ago: executing program 2 (id=3510):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="900000000002010400000000000000000a0000003c0003800c00028004000100000000002c00018014008300fe8000000000000000000000000000bb14000400000000000000000000000000000000003c0002802c00018014000300fc00000000000000000000000000000014000400ff0200000000000000000000000000010c0002800500010000000000040001"], 0x90}}, 0x80)

189.584306ms ago: executing program 1 (id=3511):
r0 = socket(0x2, 0x3, 0x6)
bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f00000023c0)="8ce2ad4d", 0x4, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10)

148.327722ms ago: executing program 2 (id=3512):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400030076657468305f746f5f626f6e6400000008003a00", @ANYBLOB="180016"], 0x54}, 0x1, 0x0, 0x0, 0x80d0}, 0x0)

147.926848ms ago: executing program 1 (id=3513):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0x5, 0x820, 0xfffffffb, {}, {0x77359400}, {0x0, 0x1, 0x1}, 0x1, @canfd={{0x31c, 0x1, 0x0, 0x1}, 0x2c, 0x0, 0x0, 0x0, "3fb3d4e4011ae684b84cb775fb1b69033846574452064067f6aa7310e759482da9b7b6578ae61afcd1997acf06273fa76185ad16116b2ce25faaeb2a49823b9f"}}, 0x80}, 0x1, 0x0, 0x0, 0x40805}, 0x4840)

91.542395ms ago: executing program 0 (id=3514):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x5, [0x0, <r0=>0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000140)={r0, 0x9, 0xb5}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4810)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x40048a4)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x30, r5, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x4c000)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040804}, 0xc0)
socket$kcm(0x11, 0x3, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r6)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0)

91.316609ms ago: executing program 2 (id=3515):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0xac0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0xfffffffe, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

90.649718ms ago: executing program 1 (id=3516):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r0, 0x0, 0xfaf}, 0x18)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=<r4=>0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_procfs$namespace(r4, &(0x7f00000002c0)='ns/pid_for_children\x00')
recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xa000}], 0x3}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

72.350879ms ago: executing program 0 (id=3517):
r0 = socket$kcm(0x11, 0x200000000000003, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000003c0), 0x4)
recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0)

0s ago: executing program 1 (id=3518):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000004a104c408bcb472c9c3dfcd076a7afc5848e1c6978ed0757d1f83737b2a11"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000001180)={0x1, 0x5, @status={[0x8000, 0x7, 0x2, 0xe9e, 0xe6f, 0x9]}, [0xffffffff, 0x81, 0x4, 0xfffffffffffffffb, 0x6, 0x1, 0x4, 0x216, 0x6, 0x0, 0x3, 0x1, 0x8, 0x8000, 0x0, 0x8a, 0x0, 0x81, 0x9, 0x0, 0x100000001, 0x400, 0x6, 0x4ed51dc3, 0xfffffffffffffffd, 0x6, 0x8, 0xce5b, 0x2, 0x7b3, 0x79710883, 0x9, 0x1, 0x9, 0x5, 0x3, 0x5, 0x4, 0xf, 0x2, 0xa959, 0x8ad7, 0xfff, 0xd, 0x0, 0x8, 0x6, 0x1, 0x10, 0x1, 0x7, 0x6, 0x2, 0x9, 0x4, 0x953, 0x3, 0x5, 0x7, 0x7, 0x6, 0x1e1b, 0x0, 0x3]})
socket$l2tp6(0xa, 0x2, 0x73)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:19224' (ED25519) to the list of known hosts.
syzkaller login: [   48.118757][ T5814] cgroup: Unknown subsys name 'net'
[   48.202530][ T5814] cgroup: Unknown subsys name 'cpuset'
[   48.209152][ T5814] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.948604][ T5814] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.053127][ T5871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.055933][ T5871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.058608][ T5871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.061179][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.063828][ T5871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.097347][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.103006][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.105543][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.111819][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.118054][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.202896][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.208356][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.210907][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.215914][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.223940][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.424465][ T5870] chnl_net:caif_netlink_parms(): no params data found
[   62.461220][ T5873] chnl_net:caif_netlink_parms(): no params data found
[   62.540980][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.544920][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.547061][ T5870] bridge_slave_0: entered allmulticast mode
[   62.550268][ T5870] bridge_slave_0: entered promiscuous mode
[   62.557502][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.561755][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.564048][ T5870] bridge_slave_1: entered allmulticast mode
[   62.566745][ T5870] bridge_slave_1: entered promiscuous mode
[   62.615880][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.646297][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.661360][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.664120][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.666828][ T5873] bridge_slave_0: entered allmulticast mode
[   62.671754][ T5873] bridge_slave_0: entered promiscuous mode
[   62.676405][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.679685][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.682545][ T5873] bridge_slave_1: entered allmulticast mode
[   62.686108][ T5873] bridge_slave_1: entered promiscuous mode
[   62.723059][ T5870] team0: Port device team_slave_0 added
[   62.743784][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.751424][ T5870] team0: Port device team_slave_1 added
[   62.755528][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.771123][ T5878] chnl_net:caif_netlink_parms(): no params data found
[   62.814761][ T5873] team0: Port device team_slave_0 added
[   62.836229][ T5873] team0: Port device team_slave_1 added
[   62.839366][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.841424][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.849539][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.885758][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.889516][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.900245][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.912965][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.915593][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.925605][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.961313][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.963942][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.974812][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.985404][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.988467][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.991511][ T5878] bridge_slave_0: entered allmulticast mode
[   62.994261][ T5878] bridge_slave_0: entered promiscuous mode
[   63.006821][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.009509][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.011625][ T5878] bridge_slave_1: entered allmulticast mode
[   63.014187][ T5878] bridge_slave_1: entered promiscuous mode
[   63.068409][ T5870] hsr_slave_0: entered promiscuous mode
[   63.071079][ T5870] hsr_slave_1: entered promiscuous mode
[   63.074944][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.079930][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.086034][ T5873] hsr_slave_0: entered promiscuous mode
[   63.088909][ T5873] hsr_slave_1: entered promiscuous mode
[   63.090939][ T5873] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.093272][ T5873] Cannot create hsr debugfs directory
[   63.135663][ T5878] team0: Port device team_slave_0 added
[   63.165206][ T5878] team0: Port device team_slave_1 added
[   63.204620][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.206752][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.215603][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.226968][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.230278][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.238302][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.335809][ T5878] hsr_slave_0: entered promiscuous mode
[   63.338201][ T5878] hsr_slave_1: entered promiscuous mode
[   63.340379][ T5878] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.342681][ T5878] Cannot create hsr debugfs directory
[   63.426974][ T5870] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.442698][ T5870] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.484385][ T5870] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.497727][ T5870] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.560828][ T5873] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.582538][ T5873] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.589682][ T5873] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.605910][ T5873] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.641903][ T5878] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.647207][ T5878] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.653427][ T5878] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.659661][ T5878] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.730467][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.765926][ T5870] 8021q: adding VLAN 0 to HW filter on device team0
[   63.781554][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.784379][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.808168][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.810349][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.816774][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.862728][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.877390][ T5870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   63.881054][ T5870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.905949][ T5878] 8021q: adding VLAN 0 to HW filter on device team0
[   63.914276][ T5873] 8021q: adding VLAN 0 to HW filter on device team0
[   63.923215][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.925791][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.934875][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.937809][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.962970][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.965746][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.001377][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.003876][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.100166][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.117422][ T5873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.158794][ T5221] Bluetooth: hci1: command tx timeout
[   64.161142][   T55] Bluetooth: hci0: command tx timeout
[   64.186138][ T5870] veth0_vlan: entered promiscuous mode
[   64.199226][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.211896][ T5870] veth1_vlan: entered promiscuous mode
[   64.238312][ T5221] Bluetooth: hci2: command tx timeout
[   64.264866][ T5870] veth0_macvtap: entered promiscuous mode
[   64.272286][ T5870] veth1_macvtap: entered promiscuous mode
[   64.300641][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.330850][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.341796][ T5878] veth0_vlan: entered promiscuous mode
[   64.350279][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.355842][ T5870] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.360378][ T5870] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.363380][ T5870] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.366551][ T5870] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.373816][ T5878] veth1_vlan: entered promiscuous mode
[   64.452466][ T5873] veth0_vlan: entered promiscuous mode
[   64.464953][ T5878] veth0_macvtap: entered promiscuous mode
[   64.478894][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.481869][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.490220][ T5878] veth1_macvtap: entered promiscuous mode
[   64.502606][ T5873] veth1_vlan: entered promiscuous mode
[   64.549749][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.560157][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.563114][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.571431][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.576194][ T5873] veth0_macvtap: entered promiscuous mode
[   64.600801][ T5873] veth1_macvtap: entered promiscuous mode
[   64.612134][ T5878] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.614986][ T5878] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.620899][ T5878] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.623768][ T5878] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.646649][ T5870] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.654937][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.671832][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.693200][ T5873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.695886][ T5873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.710014][ T5873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.713948][ T5873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.796922][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.805763][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.924194][ T5938] ieee802154 phy0 wpan0: encryption failed: -22
[   64.934539][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.937530][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.001121][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.004470][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.071052][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.076526][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.169352][ T5946] netlink: 'syz.1.23': attribute type 10 has an invalid length.
[   65.178439][ T5946] netlink: 40 bytes leftover after parsing attributes in process `syz.1.23'.
[   65.215645][ T5946] team0: Port device geneve0 added
[   65.501727][ T5970] netlink: 'syz.2.36': attribute type 1 has an invalid length.
[   65.504155][ T5970] netlink: 224 bytes leftover after parsing attributes in process `syz.2.36'.
[   65.683312][ T5984] netlink: 'syz.2.40': attribute type 1 has an invalid length.
[   65.796567][ T5990] netlink: 'syz.0.44': attribute type 3 has an invalid length.
[   65.808395][ T5990] netlink: 'syz.0.44': attribute type 3 has an invalid length.
[   65.817111][ T5994] netlink: 'syz.2.43': attribute type 3 has an invalid length.
[   65.828121][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'.
[   65.870399][ T5996] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.113825][ T6013] netlink: 16 bytes leftover after parsing attributes in process `syz.1.54'.
[   66.250786][ T5221] Bluetooth: hci1: command tx timeout
[   66.253064][ T5221] Bluetooth: hci0: command tx timeout
[   66.263804][ T6020] netlink: 256 bytes leftover after parsing attributes in process `syz.1.57'.
[   66.318038][ T5221] Bluetooth: hci2: command tx timeout
[   66.352500][ T6027] openvswitch: netlink: IP tunnel dst address not specified
[   66.611663][ T6050] netlink: 96 bytes leftover after parsing attributes in process `syz.0.72'.
[   66.675052][ T6056] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   66.902584][ T6074] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.80'.
[   66.911522][ T6068] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.80'.
[   67.475122][ T6115] netlink: 830 bytes leftover after parsing attributes in process `syz.0.102'.
[   67.518590][ T6122] netlink: 'syz.2.106': attribute type 12 has an invalid length.
[   67.528093][ T6122] netlink: 132 bytes leftover after parsing attributes in process `syz.2.106'.
[   67.549000][ T6124] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.557940][ T6124] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[   68.317926][ T5221] Bluetooth: hci1: command tx timeout
[   68.319606][ T5221] Bluetooth: hci0: command tx timeout
[   68.409627][   T55] Bluetooth: hci2: command tx timeout
[   68.660898][ T6182] delete_channel: no stack
[   68.702817][   T47] IPVS: starting estimator thread 0...
[   68.800132][ T6185] IPVS: using max 62 ests per chain, 148800 per kthread
[   69.052040][ T6208] netlink: 'syz.2.138': attribute type 1 has an invalid length.
[   69.325074][ T6224] sctp: [Deprecated]: syz.1.144 (pid 6224) Use of int in max_burst socket option.
[   69.325074][ T6224] Use struct sctp_assoc_value instead
[   69.371191][ T6225] syzkaller1: entered promiscuous mode
[   69.372948][ T6225] syzkaller1: entered allmulticast mode
[   69.565857][ T6237] gretap0: entered promiscuous mode
[   69.570526][ T6237] gretap0: left promiscuous mode
[   69.621484][ T6242] xt_hashlimit: max too large, truncated to 1048576
[   69.624089][ T6242] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[   69.689868][ T6245] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   69.853644][ T6256] netlink: 'syz.0.163': attribute type 83 has an invalid length.
[   70.397761][   T55] Bluetooth: hci0: command tx timeout
[   70.399423][   T55] Bluetooth: hci1: command tx timeout
[   70.478477][ T5221] Bluetooth: hci2: command tx timeout
[   70.638841][ T6284] Zero length message leads to an empty skb
[   71.053393][ T6316] __nla_validate_parse: 7 callbacks suppressed
[   71.053408][ T6316] netlink: 3072 bytes leftover after parsing attributes in process `syz.1.186'.
[   71.122483][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.127862][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.356544][ T6332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.193'.
[   71.426540][ T6334] netlink: 'syz.2.194': attribute type 1 has an invalid length.
[   71.430126][ T6334] netlink: 244 bytes leftover after parsing attributes in process `syz.2.194'.
[   71.431354][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.195'.
[   71.504541][ T6336] bond1: (slave bridge2): Enslaving as an active interface with an up link
[   71.522733][ T6336] bond1: entered promiscuous mode
[   71.524438][ T6336] bridge2: entered promiscuous mode
[   71.526389][ T6336] macvlan2: entered promiscuous mode
[   71.529319][ T6336] macvlan2: entered allmulticast mode
[   71.531851][ T6336] bond1: entered allmulticast mode
[   71.533718][ T6336] bridge2: entered allmulticast mode
[   71.536703][ T6336] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   71.540882][ T6336] bond1: left promiscuous mode
[   71.542525][ T6336] bridge2: left promiscuous mode
[   71.780172][ T6356] netlink: 180 bytes leftover after parsing attributes in process `syz.1.204'.
[   71.781494][ T6351] wireguard0: entered promiscuous mode
[   71.785122][ T6351] wireguard0: entered allmulticast mode
[   72.043498][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'.
[   72.046947][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'.
[   72.050968][ T6369] Illegal XDP return value 4294967274 on prog  (id 36) dev N/A, expect packet loss!
[   72.057694][ T6370] netlink: 'syz.1.210': attribute type 18 has an invalid length.
[   72.196620][ T6373] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   73.149038][ T6391] netlink: 256 bytes leftover after parsing attributes in process `syz.0.217'.
[   73.154757][ T6391] netlink: 72 bytes leftover after parsing attributes in process `syz.0.217'.
[   73.490831][ T6412] netlink: 'syz.0.227': attribute type 2 has an invalid length.
[   73.493893][ T6412] netlink: 'syz.0.227': attribute type 1 has an invalid length.
[   73.501658][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'.
[   73.669454][ T6421] warning: `syz.2.233' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.396223][ T6452] syz.1.245 uses obsolete (PF_INET,SOCK_PACKET)
[   74.402596][ T6454] vlan2: entered promiscuous mode
[   74.404367][ T6454] dummy0: entered promiscuous mode
[   74.409781][ T6454] bridge0: port 3(vlan2) entered blocking state
[   74.411995][ T6454] bridge0: port 3(vlan2) entered disabled state
[   74.414549][ T6454] vlan2: entered allmulticast mode
[   74.416266][ T6454] dummy0: entered allmulticast mode
[   75.770773][ T6519] netlink: 'syz.0.273': attribute type 6 has an invalid length.
[   77.778291][ T6609] __nla_validate_parse: 6 callbacks suppressed
[   77.778303][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.315'.
[   77.950729][ T6617] netlink: 60 bytes leftover after parsing attributes in process `syz.1.320'.
[   78.480297][ T6646] netlink: 124 bytes leftover after parsing attributes in process `syz.0.334'.
[   78.594037][ T6653] xt_CT: No such helper "netbios-ns"
[   78.609214][ T6644] netlink: 40 bytes leftover after parsing attributes in process `syz.1.329'.
[   79.396593][ T6693] tipc: Failed to remove unknown binding: 66,1,1/0:2416935577/2416935579
[   79.404578][ T6693] tipc: Failed to remove unknown binding: 66,1,1/0:2416935577/2416935579
[   79.410684][ T6693] tipc: Failed to remove unknown binding: 66,1,1/0:2416935577/2416935579
[   79.693427][ T6711] x_tables: duplicate entry at hook 1
[   79.809629][ T6675] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   80.091489][ T6737] IPv6: Can't replace route, no match found
[   81.128849][ T6764] netlink: 'syz.0.388': attribute type 1 has an invalid length.
[   81.164528][ T6764] 8021q: adding VLAN 0 to HW filter on device bond3
[   81.169658][ T6764] bond2: (slave bond3): making interface the new active one
[   81.173250][ T6764] bond2: (slave bond3): Enslaving as an active interface with an up link
[   81.243777][ T6769] netlink: 28 bytes leftover after parsing attributes in process `syz.0.388'.
[   81.275509][ T6768] pimreg: entered allmulticast mode
[   81.292113][ T6768] pimreg: left allmulticast mode
[   81.358974][ T1270] cfg80211: failed to load regulatory.db
[   81.476991][ T6780] openvswitch: netlink: IP tunnel dst address not specified
[   81.626505][ T6790] netlink: 'syz.2.397': attribute type 7 has an invalid length.
[   81.800447][ T6797] netlink: 'syz.2.399': attribute type 13 has an invalid length.
[   81.803419][ T6797] netlink: 'syz.2.399': attribute type 17 has an invalid length.
[   81.858310][ T6797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.001222][ T6797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.024666][ T6805] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   82.094086][ T6797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.160068][ T6797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.479166][ T6835] netlink: 56 bytes leftover after parsing attributes in process `syz.0.409'.
[   82.716357][ T6844] nbd: must specify at least one socket
[   82.974964][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.422'.
[   82.985834][ T6859] netlink: 68 bytes leftover after parsing attributes in process `syz.0.422'.
[   82.994870][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.422'.
[   83.042490][ T6865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.423'.
[   83.045214][ T6865] netlink: 36 bytes leftover after parsing attributes in process `syz.2.423'.
[   83.162890][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'.
[   83.207443][ T6874] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   83.322075][ T6886] bond0: Unable to set down delay as MII monitoring is disabled
[   83.530363][ T6905] netlink: 44 bytes leftover after parsing attributes in process `syz.0.443'.
[   83.534091][ T6905] netlink: 43 bytes leftover after parsing attributes in process `syz.0.443'.
[   83.537296][ T6905] netlink: 'syz.0.443': attribute type 6 has an invalid length.
[   83.541566][ T6905] netlink: 'syz.0.443': attribute type 5 has an invalid length.
[   83.544782][ T6905] netlink: 43 bytes leftover after parsing attributes in process `syz.0.443'.
[   83.666029][ T6911] netlink: 'syz.1.446': attribute type 64 has an invalid length.
[   83.672556][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'.
[   84.526794][ T6949] team1: entered promiscuous mode
[   84.539573][ T6949] team1: entered allmulticast mode
[   84.779395][ T6962] netlink: 'syz.2.468': attribute type 1 has an invalid length.
[   84.832992][ T6962] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.867456][ T6962] bond1: (slave gretap1): making interface the new active one
[   84.872610][ T6962] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   84.883540][ T6962] syz.2.468 (6962) used greatest stack depth: 20040 bytes left
[   85.678963][ T7015] netlink: 'syz.0.487': attribute type 1 has an invalid length.
[   85.711665][ T7015] bond4: entered promiscuous mode
[   85.714174][ T7015] 8021q: adding VLAN 0 to HW filter on device bond4
[   85.751664][ T7015] batadv1: entered promiscuous mode
[   85.753334][ T7015] batadv1: entered allmulticast mode
[   85.756495][ T7015] 8021q: adding VLAN 0 to HW filter on device batadv1
[   85.761689][ T7015] bond4: (slave batadv1): making interface the new active one
[   85.764669][ T7015] bond4: (slave batadv1): Enslaving as an active interface with an up link
[   85.953996][ T7018] batman_adv: batadv0: Adding interface: ip6gretap1
[   85.956851][ T7018] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.970625][ T7018] batman_adv: batadv0: Interface activated: ip6gretap1
[   86.736347][ T6920] Set syz1 is full, maxelem 65536 reached
[   87.485776][ T7088] sctp: [Deprecated]: syz.0.516 (pid 7088) Use of int in max_burst socket option.
[   87.485776][ T7088] Use struct sctp_assoc_value instead
[   87.526508][ T7090] Bluetooth: MGMT ver 1.23
[   87.672630][ T7102] netlink: 'syz.0.523': attribute type 7 has an invalid length.
[   87.675846][ T7102] netlink: 'syz.0.523': attribute type 8 has an invalid length.
[   87.929111][ T7117] veth3: entered promiscuous mode
[   87.933903][ T7117] bond2: (slave veth3): Enslaving as an active interface with an up link
[   87.943135][ T7117] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.990706][ T7124] wireguard0: entered promiscuous mode
[   88.994251][ T7124] wireguard0: entered allmulticast mode
[   89.282354][ T7140] tipc: Started in network mode
[   89.284357][ T7140] tipc: Node identity 4, cluster identity 4711
[   89.286971][ T7140] tipc: Node number set to 4
[   89.408249][ T7144] __nla_validate_parse: 14 callbacks suppressed
[   89.408272][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.540'.
[   90.188469][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.556'.
[   90.600538][ T7204] netlink: 'syz.1.568': attribute type 1 has an invalid length.
[   90.603608][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'.
[   91.194060][ T7251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.589'.
[   91.480759][ T7272] netlink: 'syz.1.599': attribute type 11 has an invalid length.
[   91.483752][ T7272] netlink: 140 bytes leftover after parsing attributes in process `syz.1.599'.
[   92.095862][ T7280] netlink: 256 bytes leftover after parsing attributes in process `syz.0.603'.
[   92.186440][ T7284] netlink: 136784 bytes leftover after parsing attributes in process `syz.2.604'.
[   92.190612][ T7284] netlink: zone id is out of range
[   92.192842][ T7284] netlink: zone id is out of range
[   92.195011][ T7284] netlink: zone id is out of range
[   92.197154][ T7284] netlink: zone id is out of range
[   92.200896][ T7284] netlink: zone id is out of range
[   92.203139][ T7284] netlink: zone id is out of range
[   92.205604][ T7284] netlink: zone id is out of range
[   92.208145][ T7284] netlink: zone id is out of range
[   92.210440][ T7284] netlink: zone id is out of range
[   92.212596][ T7284] netlink: zone id is out of range
[   92.306151][ T7290] xt_socket: unknown flags 0x8
[   92.905441][ T7332] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.628'.
[   93.014258][ T7338] netlink: 'syz.1.631': attribute type 1 has an invalid length.
[   93.017236][ T7338] netlink: 72 bytes leftover after parsing attributes in process `syz.1.631'.
[   93.021988][ T7338] netlink: 97 bytes leftover after parsing attributes in process `syz.1.631'.
[   93.275962][ T7351] vlan2: left allmulticast mode
[   93.282157][ T7351] dummy0: left allmulticast mode
[   93.286443][ T7351] bridge0: port 3(vlan2) entered disabled state
[   93.310475][ T7351] bridge_slave_1: left allmulticast mode
[   93.312729][ T7351] bridge_slave_1: left promiscuous mode
[   93.316415][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.323604][ T7351] bridge_slave_0: left allmulticast mode
[   93.326228][ T7351] bridge_slave_0: left promiscuous mode
[   93.330458][ T7351] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.612396][ T7362] 8021q: adding VLAN 0 to HW filter on device bond5
[   93.616365][ T7362] bond0: (slave bond5): Enslaving as an active interface with an up link
[   94.309638][ T7401] netlink: 'syz.1.658': attribute type 29 has an invalid length.
[   94.322906][ T7401] netlink: 'syz.1.658': attribute type 29 has an invalid length.
[   94.472455][ T7410] __nla_validate_parse: 3 callbacks suppressed
[   94.472466][ T7410] netlink: 36 bytes leftover after parsing attributes in process `syz.1.661'.
[   94.606854][ T7422] netlink: 24 bytes leftover after parsing attributes in process `syz.1.666'.
[   94.623555][ T7422] netlink: 24 bytes leftover after parsing attributes in process `syz.1.666'.
[   94.725704][ T7423] bond0: (slave bond_slave_0): Releasing backup interface
[   94.731699][ T7423] bond0: (slave bond_slave_1): Releasing backup interface
[   94.760678][ T7423] team0: Port device team_slave_0 removed
[   94.779983][ T7423] team0: Port device team_slave_1 removed
[   94.791173][ T7423] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.804213][ T7423] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.825834][ T7423] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.841061][ T7423] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.055147][ T7423] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.063768][ T7423] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.067304][ T7423] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.072300][ T7423] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.252601][ T7423] vlan2: left promiscuous mode
[   95.254319][ T7423] dummy0: left promiscuous mode
[   95.335412][ T7423] bond1: (slave gretap1): Releasing active interface
[   95.339813][ T7423] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   95.345411][ T7423] batman_adv: batadv0: Removing interface: ip6gretap1
[   95.585069][ T7423] syz.2.665 (7423) used greatest stack depth: 19672 bytes left
[   95.688113][ T7437] netlink: 'syz.1.669': attribute type 3 has an invalid length.
[   95.721233][ T7439] bond0: entered promiscuous mode
[   95.722907][ T7439] bond_slave_0: entered promiscuous mode
[   95.725466][ T7439] bond_slave_1: entered promiscuous mode
[   95.933223][ T7449] netlink: 'syz.0.674': attribute type 13 has an invalid length.
[   96.875257][ T7497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.696'.
[   98.097393][ T7535] netlink: 'syz.2.713': attribute type 1 has an invalid length.
[   98.394334][ T7560] tipc: Started in network mode
[   98.395924][ T7560] tipc: Node identity 3eb898c4dbaa, cluster identity 4711
[   98.401656][ T7560] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.404642][ T7560] syzkaller0: entered promiscuous mode
[   98.406847][ T7560] syzkaller0: entered allmulticast mode
[   98.451841][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880204f4c00: rx timeout, send abort
[   98.455730][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880204f4c00: 0x3ff00: (3) A timeout occurred and this is the connection abort to close the session.
[   98.477153][ T7560] tipc: Resetting bearer <eth:syzkaller0>
[   98.493799][ T7559] tipc: Resetting bearer <eth:syzkaller0>
[   98.502608][ T7559] tipc: Disabling bearer <eth:syzkaller0>
[   98.611853][ T7572] netlink: 152 bytes leftover after parsing attributes in process `syz.0.729'.
[   99.453409][ T7618] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.456100][ T7618] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.575333][ T7618] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.588527][ T7618] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.692708][ T7618] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.695635][ T7618] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.704423][ T7618] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.707321][ T7618] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.754397][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'.
[  100.106604][ T7658] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  100.374510][ T7674] IPv6: NLM_F_REPLACE set, but no existing node found!
[  100.433347][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'.
[  100.485235][ T5554] IPVS: starting estimator thread 0...
[  100.577732][ T7686] IPVS: using max 62 ests per chain, 148800 per kthread
[  100.590471][ T7694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.778'.
[  100.806270][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.790'.
[  100.809452][ T7723] nbd: illegal input index -381222912
[  100.898251][ T7733] syzkaller0: entered promiscuous mode
[  100.899998][ T7733] syzkaller0: entered allmulticast mode
[  101.179231][ T7754] netlink: 'syz.2.804': attribute type 1 has an invalid length.
[  101.211570][ T7754] 8021q: adding VLAN 0 to HW filter on device bond2
[  101.226993][ T7754] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.230022][ T7754] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.232720][ T7754] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.235444][ T7754] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.242129][ T7754] bond2: (slave geneve2): making interface the new active one
[  101.245334][ T7754] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  101.259261][ T7754] bond2: entered promiscuous mode
[  101.261788][ T7754] geneve2: entered promiscuous mode
[  101.298068][ T7761] netlink: 56 bytes leftover after parsing attributes in process `syz.0.807'.
[  101.301043][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'.
[  101.310934][ T7763] netlink: 'syz.2.808': attribute type 1 has an invalid length.
[  101.313318][ T7763] netlink: 112 bytes leftover after parsing attributes in process `syz.2.808'.
[  101.600342][ T7790] netlink: 'syz.2.821': attribute type 1 has an invalid length.
[  101.602804][ T7790] netlink: 228 bytes leftover after parsing attributes in process `syz.2.821'.
[  101.780505][ T7807] netlink: 32 bytes leftover after parsing attributes in process `syz.0.828'.
[  101.787763][ T7807] netlink: 40 bytes leftover after parsing attributes in process `syz.0.828'.
[  101.945238][ T7821] syzkaller1: tun_chr_ioctl cmd 1074025677
[  101.947295][ T7821] syzkaller1: linktype set to 6
[  102.014565][ T7823] netlink: 'syz.0.835': attribute type 4 has an invalid length.
[  102.158536][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  103.050205][ T7866] netlink: 'syz.2.852': attribute type 1 has an invalid length.
[  103.810035][ T7921] syzkaller1: entered promiscuous mode
[  103.812119][ T7921] syzkaller1: entered allmulticast mode
[  103.935572][ T7929] netlink: 'syz.0.881': attribute type 32 has an invalid length.
[  104.313379][ T7966] net_ratelimit: 4055 callbacks suppressed
[  104.313397][ T7966] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.943486][ T8016] __nla_validate_parse: 4 callbacks suppressed
[  104.943499][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.923'.
[  105.297077][ T8057] vlan2: entered promiscuous mode
[  105.301581][ T8057] syz_tun: entered promiscuous mode
[  105.566145][ T8072] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  105.704964][ T8078] netlink: zone id is out of range
[  105.710924][ T8078] netlink: zone id is out of range
[  105.712761][ T8078] netlink: zone id is out of range
[  105.714527][ T8078] netlink: zone id is out of range
[  105.717471][ T8078] netlink: zone id is out of range
[  105.719898][ T8078] netlink: zone id is out of range
[  105.721688][ T8078] netlink: zone id is out of range
[  105.723536][ T8078] netlink: zone id is out of range
[  106.717155][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'.
[  106.766308][ T8119] netlink: 'syz.0.971': attribute type 10 has an invalid length.
[  106.769076][ T8119] netlink: 40 bytes leftover after parsing attributes in process `syz.0.971'.
[  106.772044][ T8119] dummy0: entered promiscuous mode
[  106.776367][ T8119] bridge0: port 3(dummy0) entered blocking state
[  106.779968][ T8119] bridge0: port 3(dummy0) entered disabled state
[  106.782134][ T8119] dummy0: entered allmulticast mode
[  106.853524][ T8123] netlink: 'syz.0.973': attribute type 5 has an invalid length.
[  107.336392][ T8164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.993'.
[  107.340514][ T8164] smc: net device bond0 applied user defined pnetid SYZ
[  107.489822][ T8176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.999'.
[  107.765538][ T8196] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1009'.
[  107.910913][ T8207] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1014'.
[  107.976283][ T8213] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.980519][ T8213] syzkaller0: entered promiscuous mode
[  107.983164][ T8213] syzkaller0: entered allmulticast mode
[  108.003321][ T8213] tipc: Resetting bearer <eth:syzkaller0>
[  108.007126][ T8210] tipc: Resetting bearer <eth:syzkaller0>
[  108.020353][ T8210] tipc: Disabling bearer <eth:syzkaller0>
[  108.166525][ T8226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'.
[  108.203887][ T8226] syz_tun: entered allmulticast mode
[  108.210756][ T8220] syz_tun: left allmulticast mode
[  108.401800][ T8249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1030'.
[  108.511622][ T8257] dummy0: left allmulticast mode
[  108.513500][ T8257] bridge0: port 3(dummy0) entered disabled state
[  108.519426][ T8257] bridge_slave_0: left allmulticast mode
[  108.521578][ T8257] bridge_slave_0: left promiscuous mode
[  108.523734][ T8257] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.541345][ T8257] bridge_slave_1: left allmulticast mode
[  108.546612][ T8257] bridge_slave_1: left promiscuous mode
[  108.550855][ T8257] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.558705][ T8257] bond0: (slave bond_slave_0): Releasing backup interface
[  108.563787][ T8257] bond0: (slave bond_slave_1): Releasing backup interface
[  108.573049][ T8257] team0: Port device team_slave_0 removed
[  108.576248][ T8257] team0: Port device team_slave_1 removed
[  108.578828][ T8257] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.581749][ T8257] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.586357][ T8257] bond2: (slave bond3): Releasing backup interface
[  108.591523][ T8257] bond4: (slave batadv1): Releasing active interface
[  108.595192][ T8257] bond0: (slave bond5): Releasing backup interface
[  108.599830][ T8260] team0: Mode changed to "activebackup"
[  108.624668][ T8257] vlan0: entered promiscuous mode
[  108.637499][ T8257] tipc: Started in network mode
[  108.640224][ T8257] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  108.643127][ T8257] tipc: Enabled bearer <eth:team0>, priority 0
[  108.962523][ T8275] syzkaller0: entered promiscuous mode
[  108.964460][ T8275] syzkaller0: entered allmulticast mode
[  109.759641][ T5900] tipc: Node number set to 11578026
[  110.080244][ T8298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1048'.
[  111.211419][ T8331] tipc: Can't bind to reserved service type 2
[  111.866637][ T8370] netlink: 'syz.0.1081': attribute type 2 has an invalid length.
[  111.982512][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1086'.
[  112.008273][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  112.123311][ T8388] ipvlan2: entered promiscuous mode
[  112.480931][ T8413] bridge_slave_0: left allmulticast mode
[  112.483392][ T8413] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.492875][ T8413] bridge_slave_1: left allmulticast mode
[  112.495137][ T8413] bridge_slave_1: left promiscuous mode
[  112.497638][ T8413] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.507513][ T8413] bond0: (slave bond_slave_0): Releasing backup interface
[  112.512441][ T8413] bond_slave_0: left promiscuous mode
[  112.517388][ T8413] bond0: (slave bond_slave_1): Releasing backup interface
[  112.521574][ T8413] bond_slave_1: left promiscuous mode
[  112.537348][ T8413] team0: Port device team_slave_0 removed
[  112.545745][ T8413] team0: Port device team_slave_1 removed
[  112.550113][ T8413] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.553066][ T8413] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.557248][ T8413] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.560904][ T8413] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.574566][ T8413] team0: Port device geneve0 removed
[  112.580919][ T8413] bond1: (slave bridge2): Releasing backup interface
[  112.584193][ T8413] bridge2: left allmulticast mode
[  112.594365][ T8413] bond2: (slave veth3): Releasing backup interface
[  112.632479][ T8417] team0: Mode changed to "activebackup"
[  112.682310][ T8413] tipc: Enabled bearer <eth:team0>, priority 0
[  112.801402][ T8431] xt_CT: You must specify a L4 protocol and not use inversions on it
[  112.909784][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'.
[  113.070857][ T8444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1111'.
[  113.103706][ T8446] bridge0: port 1(gretap0) entered blocking state
[  113.105744][ T8446] bridge0: port 1(gretap0) entered disabled state
[  113.109097][ T8446] gretap0: entered allmulticast mode
[  113.118370][ T8446] gretap0: entered promiscuous mode
[  113.138790][ T8446] bridge0: port 1(gretap0) entered blocking state
[  113.141300][ T8446] bridge0: port 1(gretap0) entered forwarding state
[  113.389308][ T8460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1119'.
[  113.401802][ T8460] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  113.849159][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1124'.
[  113.968262][ T8475] netlink: 'syz.1.1125': attribute type 25 has an invalid length.
[  114.841159][ T8485] xt_hashlimit: size too large, truncated to 1048576
[  115.029647][ T8423] net_ratelimit: 7 callbacks suppressed
[  115.029659][ T8423] Set syz1 is full, maxelem 65536 reached
[  115.218556][ T8502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1138'.
[  115.225371][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1138'.
[  115.873087][ T8527] netlink: 'syz.1.1146': attribute type 13 has an invalid length.
[  115.876005][ T8527] netlink: 'syz.1.1146': attribute type 17 has an invalid length.
[  115.915118][ T8527] bond0: left promiscuous mode
[  115.917300][ T8527] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.922834][ T8527] tipc: Resetting bearer <eth:team0>
[  115.925405][ T8527] tipc: Resetting bearer <eth:team0>
[  115.930143][ T8527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.126595][ T8527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.183226][ T8527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.251587][ T8528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.534866][ T8558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.820250][ T8574] xt_TCPMSS: Only works on TCP SYN packets
[  117.104566][ T8585] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.114810][ T8591] bond0: entered promiscuous mode
[  117.116427][ T8591] bond0: entered allmulticast mode
[  117.121285][ T8591] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.165528][ T8585] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.265140][ T8585] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.346583][ T8585] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.406081][ T8585] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.414282][ T8585] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.423311][ T8585] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.433201][ T8585] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.457161][ T8607] tun0: tun_chr_ioctl cmd 2147767521
[  118.723687][ T8643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1194'.
[  119.233404][ T8684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1212'.
[  119.447463][ T8701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1219'.
[  119.454517][ T8701] netlink: 'syz.2.1219': attribute type 7 has an invalid length.
[  119.458507][ T8701] netlink: 'syz.2.1219': attribute type 8 has an invalid length.
[  119.461618][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1219'.
[  119.675016][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'.
[  119.717031][ T8710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.903133][ T8728] netlink: 'syz.1.1229': attribute type 13 has an invalid length.
[  119.905790][ T8728] netlink: 'syz.1.1229': attribute type 17 has an invalid length.
[  119.918373][ T8728] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  119.926466][ T1270] IPVS: starting estimator thread 0...
[  120.017725][ T8736] IPVS: using max 62 ests per chain, 148800 per kthread
[  120.931726][ T8761] netlink: 'syz.2.1241': attribute type 1 has an invalid length.
[  120.960386][ T5882] IPVS: stop unused estimator thread 0...
[  121.086255][ T8774] xt_recent: Unsupported userspace flags (00000048)
[  121.164832][ T8780] xt_TPROXY: Can be used only with -p tcp or -p udp
[  121.622146][ T8815] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1261'.
[  121.957215][ T8848] 8021q: adding VLAN 0 to HW filter on device batadv2
[  121.962636][ T8848] team0: Failed to send port change of device batadv2 via netlink (err -105)
[  121.965411][ T8848] team0: Failed to send options change via netlink (err -105)
[  121.970824][ T8848] team0: Port device batadv2 added
[  122.138780][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1283'.
[  122.302609][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1289'.
[  122.402863][ T8888] trusted_key: syz.0.1293 sent an empty control message without MSG_MORE.
[  122.499962][ T8898] bond2: (slave geneve2): Releasing active interface
[  122.507058][ T8898] geneve2: left promiscuous mode
[  122.524467][ T8898] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.527042][ T8898] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.531941][ T8898] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.534519][ T8898] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.631771][ T8910] tc_dump_action: action bad kind
[  122.699402][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1307'.
[  122.766045][ T8924] netlink: 'syz.1.1310': attribute type 11 has an invalid length.
[  122.826780][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'.
[  122.842277][ T8934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1315'.
[  123.111126][ T8962] geneve2: entered promiscuous mode
[  123.184212][ T8973] syz_tun: entered allmulticast mode
[  123.865958][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1366'.
[  124.012720][ T9060] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  124.049463][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.053616][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.090080][ T9065] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.092527][ T9065] syzkaller0: entered promiscuous mode
[  124.094341][ T9065] syzkaller0: entered allmulticast mode
[  124.121972][ T9065] tipc: Resetting bearer <eth:syzkaller0>
[  124.150548][ T9064] tipc: Resetting bearer <eth:syzkaller0>
[  124.171764][ T9064] tipc: Disabling bearer <eth:syzkaller0>
[  124.246615][ T9077] lo speed is unknown, defaulting to 1000
[  124.255930][ T9077] lo speed is unknown, defaulting to 1000
[  124.266062][ T9077] lo speed is unknown, defaulting to 1000
[  124.281900][ T9077] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  124.304150][ T9077] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  124.330228][ T9077] lo speed is unknown, defaulting to 1000
[  124.333526][ T9077] lo speed is unknown, defaulting to 1000
[  124.336341][ T9077] lo speed is unknown, defaulting to 1000
[  124.640217][ T9102] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  124.740756][ T9114] netlink: 'syz.0.1396': attribute type 1 has an invalid length.
[  124.769108][ T9114] bond6: entered promiscuous mode
[  124.771050][ T9114] 8021q: adding VLAN 0 to HW filter on device bond6
[  124.788853][ T9114] 8021q: adding VLAN 0 to HW filter on device bond6
[  124.791154][ T9114] bond6: (slave vcan1): The slave device specified does not support setting the MAC address
[  124.794177][ T9114] bond6: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  124.799662][ T9114] bond6: (slave vcan1): making interface the new active one
[  124.801978][ T9114] vcan1: entered promiscuous mode
[  124.804307][ T9114] bond6: (slave vcan1): Enslaving as an active interface with an up link
[  125.074374][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1402'.
[  125.079216][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1402'.
[  125.083992][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1401'.
[  125.171094][ T9136] unknown channel width for channel at 909000KHz?
[  125.263833][ T9142] netlink: 'syz.2.1408': attribute type 1 has an invalid length.
[  125.816696][ T9182] netlink: zone id is out of range
[  125.819123][ T9183] Set syz1 is full, maxelem 65536 reached
[  125.824821][ T9182] netlink: get zone limit has 8 unknown bytes
[  126.671634][ T9274] __nla_validate_parse: 8 callbacks suppressed
[  126.671646][ T9274] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1461'.
[  126.682346][ T9276] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1462'.
[  126.814943][ T9287] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  126.817802][ T9287] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  126.820276][ T9287] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  126.822728][ T9287] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  126.826821][ T9287] vxlan0: entered promiscuous mode
[  126.830391][ T9287] vxlan0: entered allmulticast mode
[  126.832927][ T9287] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  127.057216][ T9302] netlink: 'syz.0.1474': attribute type 4 has an invalid length.
[  127.065135][ T9302] netlink: 'syz.0.1474': attribute type 4 has an invalid length.
[  127.073539][  T789] lo speed is unknown, defaulting to 1000
[  127.075827][  T789] syz2: Port: 1 Link ACTIVE
[  127.437372][ T9323] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.451091][ T9323] syzkaller0: entered promiscuous mode
[  127.457658][ T9323] syzkaller0: entered allmulticast mode
[  127.486947][ T9323] tipc: Resetting bearer <eth:syzkaller0>
[  127.503861][ T9322] tipc: Resetting bearer <eth:syzkaller0>
[  127.515943][ T9322] tipc: Disabling bearer <eth:syzkaller0>
[  127.678416][ T9335] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1490'.
[  127.687291][ T9335] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  127.692533][ T9335] openvswitch: netlink: Message has 1 unknown bytes.
[  127.885348][ T9358] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1501'.
[  128.087352][ T9380] netlink: 'syz.0.1512': attribute type 4 has an invalid length.
[  128.565097][ T9396] netlink: 'syz.2.1517': attribute type 13 has an invalid length.
[  128.567707][ T9396] netlink: 'syz.2.1517': attribute type 17 has an invalid length.
[  128.585963][ T9396] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.590259][ T9396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.597859][ T9392] lo speed is unknown, defaulting to 1000
[  129.645061][ T9424] xt_TPROXY: Can be used only with -p tcp or -p udp
[  129.912924][ T9452] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.1543'.
[  129.946946][ T9447] lo speed is unknown, defaulting to 1000
[  130.689943][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1571'.
[  131.022556][ T9548] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1587'.
[  131.030374][ T9549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  131.035327][ T9548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1587'.
[  131.104705][ T9551] lo speed is unknown, defaulting to 1000
[  131.141753][ T9557] netlink: 'syz.0.1589': attribute type 13 has an invalid length.
[  131.144929][ T9557] netlink: 'syz.0.1589': attribute type 17 has an invalid length.
[  131.188546][ T9557] bond0: left promiscuous mode
[  131.190044][ T9557] vxlan0: left promiscuous mode
[  131.191666][ T9557] bond0: left allmulticast mode
[  131.196062][ T9557] vxlan0: left allmulticast mode
[  131.201554][ T9557] 8021q: adding VLAN 0 to HW filter on device team0
[  131.204000][ T9557] dummy0: left promiscuous mode
[  131.212062][ T9557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  131.260025][ T5554] IPVS: starting estimator thread 0...
[  131.370295][ T9568] IPVS: using max 62 ests per chain, 148800 per kthread
[  131.449469][ T9576] netlink: 'syz.1.1599': attribute type 64 has an invalid length.
[  131.490221][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1599'.
[  131.977364][ T9588] netlink: 'syz.0.1601': attribute type 1 has an invalid length.
[  131.988172][ T9588] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1601'.
[  131.991695][ T9588] NCSI netlink: No device for ifindex 0
[  132.123487][ T5899] IPVS: stop unused estimator thread 0...
[  132.320643][ T9576] Set syz1 is full, maxelem 65536 reached
[  132.560564][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.562529][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.587826][ T9621] netlink: 'syz.1.1618': attribute type 10 has an invalid length.
[  132.609334][ T9621] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  132.763681][ T9638] 8021q: VLANs not supported on xfrm0
[  132.765769][ T9638] netlink: 'syz.1.1624': attribute type 10 has an invalid length.
[  132.952145][ T9654] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1632'.
[  133.181895][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1642'.
[  133.242340][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1643'.
[  133.317044][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1648'.
[  133.608616][ T9723] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1663'.
[  133.627164][ T9725] ieee802154 phy0 wpan0: encryption failed: -90
[  133.634619][ T9727] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  133.669315][ T9729] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  133.741897][ T9737] netlink: 'syz.1.1672': attribute type 12 has an invalid length.
[  133.871002][ T9740] lo speed is unknown, defaulting to 1000
[  133.911405][ T9745] netlink: 'syz.1.1673': attribute type 13 has an invalid length.
[  133.914071][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1673'.
[  134.134563][ T9760] sctp: [Deprecated]: syz.0.1678 (pid 9760) Use of int in maxseg socket option.
[  134.134563][ T9760] Use struct sctp_assoc_value instead
[  134.277527][ T9764] netlink: 'syz.1.1681': attribute type 2 has an invalid length.
[  134.410215][ T9767] netlink: 'syz.1.1682': attribute type 23 has an invalid length.
[  134.472165][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1683'.
[  134.475028][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1683'.
[  134.671434][ T9776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  135.361361][ T9828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1708'.
[  135.484239][ T9833] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  135.485656][   T10] IPVS: starting estimator thread 0...
[  135.598269][ T9835] IPVS: using max 62 ests per chain, 148800 per kthread
[  136.116721][ T9868] lo speed is unknown, defaulting to 1000
[  136.161115][ T9873] validate_nla: 1 callbacks suppressed
[  136.161138][ T9873] netlink: 'syz.1.1725': attribute type 13 has an invalid length.
[  136.176719][ T9873] netlink: 'syz.1.1725': attribute type 17 has an invalid length.
[  136.203240][ T9873] tipc: Resetting bearer <eth:team0>
[  136.212714][ T9873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  136.302416][  T789] IPVS: starting estimator thread 0...
[  136.412578][ T9884] IPVS: using max 62 ests per chain, 148800 per kthread
[  137.663769][ T5899] IPVS: stop unused estimator thread 0...
[  137.665822][ T9920] __nla_validate_parse: 1 callbacks suppressed
[  137.665830][ T9920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1745'.
[  137.673301][ T9920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1745'.
[  137.699116][ T9926] bond0: option min_links: invalid value (18446744073709551604)
[  137.706868][ T9926] bond0: option min_links: allowed values 0 - 2147483647
[  137.729210][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1750'.
[  137.733437][ T9930] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1749'.
[  137.806519][ T9938] xt_hashlimit: size too large, truncated to 1048576
[  137.857499][ T9946] : renamed from bridge_slave_0
[  137.995071][ T9958] netlink: 'syz.2.1763': attribute type 5 has an invalid length.
[  138.737117][T10013] lo speed is unknown, defaulting to 1000
[  139.173088][T10034] netlink: 'syz.1.1798': attribute type 3 has an invalid length.
[  139.387484][T10052] netlink: 'syz.1.1806': attribute type 1 has an invalid length.
[  139.426768][T10052] 8021q: adding VLAN 0 to HW filter on device bond3
[  139.456160][T10052] bond3: (slave veth7): Enslaving as an active interface with a down link
[  139.477320][T10052] vlan0: entered allmulticast mode
[  139.479303][T10052] bond3: entered allmulticast mode
[  139.482240][T10052] bond3: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  139.482668][T10057] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  139.714677][T10074] netlink: 'syz.0.1817': attribute type 1 has an invalid length.
[  139.717099][T10074] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1817'.
[  139.766461][T10083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1820'.
[  139.918814][T10098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1826'.
[  140.160108][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1836'.
[  140.230163][T10131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1841'.
[  140.325969][T10141] netlink: 'syz.1.1847': attribute type 1 has an invalid length.
[  140.328977][T10141] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1847'.
[  140.506852][T10159] pim6reg1: entered promiscuous mode
[  140.509150][T10159] pim6reg1: entered allmulticast mode
[  140.635705][T10173] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  140.640122][T10173] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  140.642834][T10173] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  140.645508][T10173] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  140.651859][T10173] geneve3: entered promiscuous mode
[  141.007294][T10215] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  141.354177][T10252] netlink: 'syz.1.1891': attribute type 6 has an invalid length.
[  141.508387][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881107e8400: rx timeout, send abort
[  142.008456][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881107ea400: rx timeout, send abort
[  142.011142][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881107e8400: abort rx timeout. Force session deactivation
[  142.063204][T10285] netlink: 'syz.0.1910': attribute type 1 has an invalid length.
[  142.511147][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881107ea400: abort rx timeout. Force session deactivation
[  143.207145][T10355] __nla_validate_parse: 1 callbacks suppressed
[  143.207164][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1941'.
[  143.293873][T10359] netlink: 'syz.1.1943': attribute type 1 has an invalid length.
[  143.472605][T10369] netlink: 'syz.0.1947': attribute type 2 has an invalid length.
[  143.475085][T10369] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1947'.
[  143.540790][T10373] lo speed is unknown, defaulting to 1000
[  143.580611][T10377] netlink: 'syz.0.1949': attribute type 13 has an invalid length.
[  143.583029][T10377] netlink: 'syz.0.1949': attribute type 17 has an invalid length.
[  143.606929][T10377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  143.641134][ T5554] IPVS: starting estimator thread 0...
[  143.729526][T10381] IPVS: using max 62 ests per chain, 148800 per kthread
[  144.513227][T10391] netlink: 'syz.2.1956': attribute type 12 has an invalid length.
[  144.529171][T10391] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1956'.
[  144.612950][T10403] netlink: 'syz.0.1962': attribute type 10 has an invalid length.
[  144.622534][T10403] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1962'.
[  144.675282][ T5866] IPVS: stop unused estimator thread 0...
[  144.830072][T10426] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1972'.
[  144.900243][T10436] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  144.915324][T10437] ieee802154 phy1 wpan1: encryption failed: -22
[  145.013944][T10442] lo speed is unknown, defaulting to 1000
[  145.092784][T10448] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  145.095289][T10448] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  145.098242][T10448] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  145.100944][T10448] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  145.102354][T10442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.161045][T10441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.315104][T10462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1985'.
[  145.425757][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1988'.
[  145.686206][T10442] syz.1.1979 (10442) used greatest stack depth: 18520 bytes left
[  145.774475][T10482] netlink: 'syz.1.1993': attribute type 1 has an invalid length.
[  145.780664][T10482] netlink: 'syz.1.1993': attribute type 2 has an invalid length.
[  145.843669][T10486] xt_hashlimit: size too large, truncated to 1048576
[  146.011895][T10499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1998'.
[  146.106849][T10513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.881640][T10527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2008'.
[  147.069503][T10533] batadv_slave_0: entered promiscuous mode
[  147.072540][T10532] batadv_slave_0: left promiscuous mode
[  147.207326][T10549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2017'.
[  147.231984][T10549] bond8: (slave bridge1): Enslaving as an active interface with an up link
[  147.241504][T10549] macvlan2: entered promiscuous mode
[  147.243161][T10549] macvlan2: entered allmulticast mode
[  147.246158][T10549] bond8: entered promiscuous mode
[  147.248141][T10549] bridge1: entered promiscuous mode
[  147.252014][T10549] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  147.255209][T10549] bond8: left promiscuous mode
[  147.256807][T10549] bridge1: left promiscuous mode
[  147.421413][T10558] netlink: 'syz.0.2019': attribute type 1 has an invalid length.
[  147.607457][T10570] syzkaller0: entered promiscuous mode
[  147.609453][T10570] syzkaller0: entered allmulticast mode
[  148.447392][T10596] syzkaller0: entered promiscuous mode
[  148.456408][T10596] syzkaller0: entered allmulticast mode
[  148.462417][T10596] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.474345][T10595] tipc: Resetting bearer <eth:syzkaller0>
[  148.485732][T10595] tipc: Disabling bearer <eth:syzkaller0>
[  148.497355][T10598] __nla_validate_parse: 1 callbacks suppressed
[  148.497365][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2038'.
[  148.542448][T10601] smc: net device bond0 erased user defined pnetid SYZ
[  148.721420][T10601] bond0 (unregistering): Released all slaves
[  148.778275][T10615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2043'.
[  148.942515][T10632] netlink: 212280 bytes leftover after parsing attributes in process `syz.2.2051'.
[  149.060001][T10637] netlink: 'syz.1.2052': attribute type 64 has an invalid length.
[  149.093158][T10644] netlink: 'syz.2.2056': attribute type 2 has an invalid length.
[  149.232903][T10660] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2063'.
[  149.259573][T10662] netlink: 'syz.0.2064': attribute type 9 has an invalid length.
[  149.262174][T10662] netlink: 'syz.0.2064': attribute type 6 has an invalid length.
[  149.362800][T10662] tipc: Resetting bearer <eth:team0>
[  149.389865][T10662] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  149.392661][T10662] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  149.395130][T10662] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  149.397953][T10662] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  149.407508][  T789] lo speed is unknown, defaulting to 1000
[  149.409818][  T789] syz2: Port: 1 Link DOWN
[  149.735622][T10693] netlink: 'syz.1.2079': attribute type 39 has an invalid length.
[  149.757034][T10699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2081'.
[  149.762303][T10699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2081'.
[  149.818743][T10704] netlink: 'syz.2.2083': attribute type 1 has an invalid length.
[  149.821580][T10704] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.932876][T10712] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  149.938667][T10712] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  149.985530][T10716] vxcan0: tx address claim with dlc 0
[  150.255594][T10738] tipc: Enabling of bearer <et:g> rejected, media not registered
[  151.393740][T10785] xt_hashlimit: size too large, truncated to 1048576
[  151.559397][T10793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2124'.
[  151.572508][T10793] pim6reg: entered allmulticast mode
[  151.589207][T10793] pim6reg: left allmulticast mode
[  151.739441][T10797] netlink: 'syz.1.2127': attribute type 2 has an invalid length.
[  151.790789][T10805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2130'.
[  151.892227][T10816] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.894769][T10816] syzkaller0: entered promiscuous mode
[  151.896476][T10816] syzkaller0: entered allmulticast mode
[  151.911987][T10816] tipc: Resetting bearer <eth:syzkaller0>
[  151.916277][T10814] tipc: Resetting bearer <eth:syzkaller0>
[  151.933079][T10814] tipc: Disabling bearer <eth:syzkaller0>
[  151.955798][T10823] syzkaller1: entered promiscuous mode
[  151.962388][T10823] syzkaller1: entered allmulticast mode
[  151.992960][T10827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2142'.
[  152.050855][T10831] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2145'.
[  152.395838][T10866] netlink: 'syz.0.2160': attribute type 4 has an invalid length.
[  152.984217][T10924] netem: change failed
[  153.110322][T10933] hsr_slave_1 (unregistering): left promiscuous mode
[  153.154905][T10935] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.188472][T10935] syzkaller0: entered promiscuous mode
[  153.190604][T10935] syzkaller0: entered allmulticast mode
[  153.211236][T10935] tipc: Resetting bearer <eth:syzkaller0>
[  153.218686][T10934] tipc: Resetting bearer <eth:syzkaller0>
[  153.235904][T10937] IPVS: persistence engine module ip_vs_pe_ not found
[  154.007152][T10958] __nla_validate_parse: 5 callbacks suppressed
[  154.007164][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2200'.
[  154.183807][T10934] tipc: Disabling bearer <eth:syzkaller0>
[  154.292795][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2203'.
[  154.427006][T10982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.489238][T10982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.532826][T10995] netlink: 'syz.2.2214': attribute type 1 has an invalid length.
[  154.535591][T10995] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2214'.
[  154.543893][T10982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.770914][T11003] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.776835][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2218'.
[  155.248804][T11017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2224'.
[  155.252504][T11017] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2224'.
[  156.067837][T11089] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  156.099360][ T5221] Bluetooth: hci2: link tx timeout
[  156.101215][ T5221] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  156.104464][ T5221] Bluetooth: hci2: link tx timeout
[  156.106046][ T5221] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  156.149565][ T5221] Bluetooth: hci2: link tx timeout
[  156.151208][ T5221] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  156.153523][ T5221] Bluetooth: hci2: link tx timeout
[  156.155170][ T5221] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  156.268975][T11109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2264'.
[  156.550089][T11135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2276'.
[  156.763327][T11155] lo speed is unknown, defaulting to 1000
[  157.070210][T11183] netlink: 'syz.1.2296': attribute type 4 has an invalid length.
[  157.072823][T11183] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2296'.
[  157.216140][T11193] netlink: 'syz.1.2301': attribute type 13 has an invalid length.
[  157.219103][T11193] netlink: 'syz.1.2301': attribute type 17 has an invalid length.
[  157.230385][T11193] gretap0: refused to change device tx_queue_len
[  157.232857][T11193] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  157.271475][T11198] veth0: entered promiscuous mode
[  157.277765][T11196] veth0: left promiscuous mode
[  157.887232][T11257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2332'.
[  157.890283][T11257] netlink: 'syz.0.2332': attribute type 15 has an invalid length.
[  157.893041][T11257] netlink: 'syz.0.2332': attribute type 15 has an invalid length.
[  158.159869][ T5221] Bluetooth: hci2: command 0x0405 tx timeout
[  158.479592][T11314] netlink: 'syz.2.2359': attribute type 2 has an invalid length.
[  158.490135][T11314] : entered promiscuous mode
[  159.069457][T11360] tipc: Failed to remove unknown binding: 66,1,1/4:2911058593/2911058595
[  159.072826][T11360] tipc: Failed to remove unknown binding: 66,1,1/4:2911058593/2911058595
[  159.353593][T11372] lo speed is unknown, defaulting to 1000
[  159.431168][T11372] tipc: Resetting bearer <eth:team0>
[  159.984460][T11416] __nla_validate_parse: 5 callbacks suppressed
[  159.984472][T11416] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2405'.
[  160.046754][T11420] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2407'.
[  160.091659][T11426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2410'.
[  160.100508][T11426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2410'.
[  160.238566][ T5221] Bluetooth: hci2: command 0x0405 tx timeout
[  160.264084][T11446] netlink: 'syz.2.2420': attribute type 21 has an invalid length.
[  160.266664][T11446] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2420'.
[  160.280157][T11446] netlink: 'syz.2.2420': attribute type 4 has an invalid length.
[  160.282741][T11446] netlink: 'syz.2.2420': attribute type 3 has an invalid length.
[  160.286095][T11446] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2420'.
[  160.419666][T11466] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  160.442511][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2432'.
[  160.515582][T11483] x_tables: duplicate underflow at hook 4
[  161.278125][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2462'.
[  161.389753][T11540] lo speed is unknown, defaulting to 1000
[  161.431919][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2468'.
[  161.438246][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2468'.
[  162.168913][T11625] TCP: TCP_TX_DELAY enabled
[  162.188947][T11624] lo speed is unknown, defaulting to 1000
[  162.721655][T11660] netlink: 'syz.0.2513': attribute type 2 has an invalid length.
[  163.971795][T11721] gre0: entered allmulticast mode
[  163.974894][T11721] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  164.059834][T11733] netlink: 'syz.0.2547': attribute type 1 has an invalid length.
[  164.295097][T11764] netlink: 'syz.2.2563': attribute type 5 has an invalid length.
[  164.343454][T11769] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.346760][T11769] syzkaller0: entered promiscuous mode
[  164.348818][T11769] syzkaller0: entered allmulticast mode
[  164.365965][T11769] tipc: Resetting bearer <eth:syzkaller0>
[  164.373564][T11768] tipc: Resetting bearer <eth:syzkaller0>
[  164.390839][T11768] tipc: Disabling bearer <eth:syzkaller0>
[  164.460085][T11775] lo speed is unknown, defaulting to 1000
[  164.527543][T11783] lo speed is unknown, defaulting to 1000
[  164.770796][T11812] netlink: 'syz.1.2583': attribute type 35 has an invalid length.
[  164.875798][T11818] lo speed is unknown, defaulting to 1000
[  165.293785][T11844] syzkaller0: entered promiscuous mode
[  165.295565][T11844] syzkaller0: entered allmulticast mode
[  165.471401][T11846] netlink: 'syz.0.2598': attribute type 8 has an invalid length.
[  166.443146][T11872] __nla_validate_parse: 7 callbacks suppressed
[  166.443160][T11872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2608'.
[  166.450658][T11872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2608'.
[  166.513316][T11880] netlink: 'syz.1.2611': attribute type 1 has an invalid length.
[  166.515938][T11880] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2611'.
[  166.678838][T11895] netlink: 'syz.1.2617': attribute type 1 has an invalid length.
[  166.722595][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2620'.
[  166.764245][T11901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2620'.
[  166.812308][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2624'.
[  166.815263][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2624'.
[  166.818401][T11910] netlink: 'syz.1.2624': attribute type 13 has an invalid length.
[  166.849261][T11913] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2626'.
[  167.090585][T11946] xt_TCPMSS: Only works on TCP SYN packets
[  167.693796][T12019] netlink: 'syz.0.2672': attribute type 1 has an invalid length.
[  167.697156][T12019] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2672'.
[  167.724468][T12019] xt_CT: No such helper "snmp"
[  167.797325][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2677'.
[  168.279174][T12071] sock: sock_timestamping_bind_phc: sock not bind to device
[  169.302105][T12093] xt_bpf: check failed: parse error
[  169.369235][T12102] netlink: 'syz.1.2710': attribute type 11 has an invalid length.
[  169.907401][T12154] vxcan2: entered allmulticast mode
[  170.052707][T12161] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  170.304533][T12185] pim6reg1: entered promiscuous mode
[  170.306326][T12185] pim6reg1: entered allmulticast mode
[  170.699824][T12211] netlink: 'syz.1.2753': attribute type 6 has an invalid length.
[  171.370974][T12275] ieee802154 phy1 wpan1: encryption failed: -22
[  171.375652][T12266] lo speed is unknown, defaulting to 1000
[  171.940622][T12299] __nla_validate_parse: 3 callbacks suppressed
[  171.940635][T12299] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2789'.
[  171.964756][T12299] batadv3: entered promiscuous mode
[  171.977072][T12299] batadv3: entered allmulticast mode
[  172.116602][T12299] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2789'.
[  172.495843][T12323] netlink: 'syz.1.2795': attribute type 21 has an invalid length.
[  172.500566][T12323] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2795'.
[  172.503775][T12323] netlink: 'syz.1.2795': attribute type 4 has an invalid length.
[  172.510080][T12323] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2795'.
[  172.674669][T12326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2796'.
[  172.868933][T12360] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  172.912314][T12362] can: request_module (can-proto-0) failed.
[  173.223885][T12375] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.2816'.
[  173.929125][T12406] netlink: 'syz.2.2830': attribute type 4 has an invalid length.
[  174.105198][T12417] netlink: 'syz.2.2834': attribute type 20 has an invalid length.
[  174.209726][T12425] netlink: 'syz.2.2838': attribute type 8 has an invalid length.
[  174.241431][T12427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2839'.
[  175.026418][T12491] netlink: 'syz.2.2866': attribute type 9 has an invalid length.
[  175.034030][T12491] netlink: 'syz.2.2866': attribute type 6 has an invalid length.
[  175.634718][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2876'.
[  175.639780][T12521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2876'.
[  175.870733][T12536] netlink: 'syz.0.2883': attribute type 29 has an invalid length.
[  175.873924][T12536] netlink: 'syz.0.2883': attribute type 29 has an invalid length.
[  175.876811][T12536] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2883'.
[  175.884891][T12536] unsupported nla_type 58
[  176.883584][T12617] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  177.005791][T12633] __nla_validate_parse: 7 callbacks suppressed
[  177.005804][T12633] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2927'.
[  177.026258][T12635] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2928'.
[  177.132333][T12647] vlan0: entered promiscuous mode
[  177.133911][T12647] bridge0: entered promiscuous mode
[  177.135574][T12647] vlan0: entered allmulticast mode
[  177.137092][T12647] bridge0: entered allmulticast mode
[  177.313437][T12673] tun0: tun_chr_ioctl cmd 1074025681
[  177.412922][T12679] syzkaller0: entered promiscuous mode
[  177.414723][T12679] syzkaller0: entered allmulticast mode
[  178.477373][T12691] lo speed is unknown, defaulting to 1000
[  178.563329][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2956'.
[  178.566285][T12707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2956'.
[  178.606426][T12707] gtp1: entered promiscuous mode
[  178.612374][T12707] gtp1: entered allmulticast mode
[  178.847523][T12727] sock: sock_timestamping_bind_phc: sock not bind to device
[  178.953805][T12740] tipc: New replicast peer: 255.255.255.255
[  178.956206][T12740] tipc: Enabled bearer <udp:syz2>, priority 10
[  178.960795][T12740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2973'.
[  178.963699][T12740] tipc: Disabling bearer <udp:syz2>
[  179.006347][T12747] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2976'.
[  179.017243][T12748] syz_tun: entered promiscuous mode
[  179.020557][T12748] batadv_slave_0: entered promiscuous mode
[  179.023101][T12748] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network
[  179.027677][T12748] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  179.031381][T12748] hsr1: entered allmulticast mode
[  179.032888][T12748] syz_tun: entered allmulticast mode
[  179.034618][T12748] batadv_slave_0: entered allmulticast mode
[  179.159064][T12766] syzkaller1: entered promiscuous mode
[  179.160866][T12766] syzkaller1: entered allmulticast mode
[  179.279000][T12774] vlan0: entered promiscuous mode
[  179.280755][T12774] bond0: entered promiscuous mode
[  179.282338][T12774] vxlan0: entered promiscuous mode
[  179.366906][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2993'.
[  179.461599][T12792] lo speed is unknown, defaulting to 1000
[  179.520440][ T5221] Bluetooth: hci2: command 0x0405 tx timeout
[  179.554718][T12803] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3002'.
[  180.065439][T12857] netlink: 'syz.1.3025': attribute type 4 has an invalid length.
[  180.276593][T12877] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3034'.
[  180.323929][T12880] netlink: 'syz.1.3036': attribute type 10 has an invalid length.
[  180.326331][T12880] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3036'.
[  180.342333][T12880] batman_adv: batadv0: Adding interface: virt_wifi0
[  180.344365][T12880] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  180.352339][T12880] batman_adv: batadv0: Interface activated: virt_wifi0
[  180.432028][T12894] netlink: 'syz.1.3041': attribute type 1 has an invalid length.
[  180.585717][T12908] pim6reg1: entered promiscuous mode
[  180.588007][T12908] pim6reg1: entered allmulticast mode
[  180.740946][T12921] netlink: 'syz.2.3054': attribute type 30 has an invalid length.
[  180.743662][T12921] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  180.746579][T12921] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  180.876021][T12935] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  180.912774][T12939] netlink: 'syz.1.3062': attribute type 14 has an invalid length.
[  181.006853][T12950] netlink: 'syz.0.3068': attribute type 21 has an invalid length.
[  181.011694][T12950] netlink: 'syz.0.3068': attribute type 6 has an invalid length.
[  181.334566][T12990] netlink: 'syz.2.3087': attribute type 4 has an invalid length.
[  181.514946][T13003] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  182.168550][T13008] __nla_validate_parse: 5 callbacks suppressed
[  182.168563][T13008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3094'.
[  182.287732][T13016] netlink: 'syz.0.3098': attribute type 1 has an invalid length.
[  182.341598][T13021] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3100'.
[  182.610948][T13047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3111'.
[  182.695651][T13054] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  182.748957][T13063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3118'.
[  182.973166][T13084] netlink: 'syz.0.3125': attribute type 12 has an invalid length.
[  183.411665][T13093] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  183.484198][T13097] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3131'.
[  183.491149][T13097] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3131'.
[  183.675633][T13108] netlink: 'syz.1.3135': attribute type 9 has an invalid length.
[  183.678572][T13108] netlink: 212260 bytes leftover after parsing attributes in process `syz.1.3135'.
[  183.931315][T13129] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20001
[  184.119572][T13145] netlink: 'syz.1.3151': attribute type 1 has an invalid length.
[  184.121982][T13145] netlink: 'syz.1.3151': attribute type 4 has an invalid length.
[  184.124348][T13145] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3151'.
[  184.139445][T13145] netlink: 'syz.1.3151': attribute type 1 has an invalid length.
[  184.141805][T13145] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3151'.
[  184.226372][T13149] 8021q: adding VLAN 0 to HW filter on device bond4
[  184.272851][T13158] xt_CONNSECMARK: invalid mode: 254
[  184.382519][T13172] !: renamed from dummy0
[  184.531491][T13186] lo speed is unknown, defaulting to 1000
[  184.638466][T13197] xt_CT: No such helper "netbios-ns"
[  185.009261][T13233] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3181'.
[  185.241606][T13249] lo speed is unknown, defaulting to 1000
[  185.837910][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  186.635888][T13353] tipc: MTU too low for tipc bearer
[  186.700582][T13357] tap1: tun_chr_ioctl cmd 1074025677
[  186.702514][T13357] tap1: linktype set to 823
[  187.020274][T13376] validate_nla: 5 callbacks suppressed
[  187.020286][T13376] netlink: 'syz.2.3229': attribute type 10 has an invalid length.
[  187.278836][T13394] No such timeout policy "syz1"
[  187.489148][T13406] __nla_validate_parse: 9 callbacks suppressed
[  187.489164][T13406] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3244'.
[  187.714838][T13431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3256'.
[  187.799925][T13441] !: entered allmulticast mode
[  187.803383][T13441] !: left allmulticast mode
[  188.442422][T13473] : entered promiscuous mode
[  188.606395][T13479] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3278'.
[  188.874050][T13508] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3291'.
[  188.979232][T13508] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3291'.
[  189.166707][T13544] netlink: 'syz.0.3309': attribute type 62 has an invalid length.
[  189.167142][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3308'.
[  189.249292][T13550] xt_CT: No such helper "snmp"
[  189.256277][T13553] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  189.286753][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3314'.
[  189.293024][T13555] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.346521][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.350088][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.524516][T13576] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3324'.
[  189.544101][T13577] syz_tun (unregistering): left allmulticast mode
[  189.694822][T13587] lo speed is unknown, defaulting to 1000
[  189.992712][T13613] siw: device registration error -23
[  190.889704][T13636] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  191.035700][T13653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3359'.
[  191.042674][T13653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3359'.
[  191.063621][T13657] netlink: 'syz.0.3361': attribute type 4 has an invalid length.
[  191.204126][T13665] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  191.237911][T13665] tipc: Resetting bearer <eth:syzkaller0>
[  191.253306][T13663] tipc: Resetting bearer <eth:syzkaller0>
[  191.573297][T13681] netlink: 'syz.2.3372': attribute type 1 has an invalid length.
[  191.576267][T13681] netlink: 'syz.2.3372': attribute type 3 has an invalid length.
[  192.896866][T13663] tipc: Disabling bearer <eth:syzkaller0>
[  192.917503][T13703] netlink: 'syz.2.3382': attribute type 1 has an invalid length.
[  193.002123][T13705] __nla_validate_parse: 5 callbacks suppressed
[  193.002134][T13705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3383'.
[  193.019488][T13709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3385'.
[  193.115870][   T33] audit: type=1800 audit(1753207829.852:2): pid=13716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3388" name="memory.events" dev="tmpfs" ino=5263 res=0 errno=0
[  193.119012][ T5221] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  193.152251][   T33] audit: type=1804 audit(1753207829.852:3): pid=13716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3388" name="/newroot/1039/memory.events" dev="tmpfs" ino=5263 res=1 errno=0
[  193.215772][T13722] bridge: RTM_NEWNEIGH with invalid state 0x1
[  193.600143][T13754] tipc: Disabling bearer <eth:team0>
[  193.608794][T13754] team0 (unregistering): Port device batadv2 removed
[  193.738787][T13760] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  193.830857][T13772] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3416'.
[  194.000359][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.074292][T13790] lo speed is unknown, defaulting to 1000
[  194.185645][T13797] tipc: New replicast peer: 255.255.255.255
[  194.198362][T13797] tipc: Enabled bearer <udp:syz2>, priority 10
[  194.204226][T13797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3423'.
[  195.676170][T13843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3444'.
[  196.140807][T13872] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  196.179932][T13872] bond6: (slave vcan1): Releasing backup interface
[  196.182656][T13872] vcan1: left promiscuous mode
[  196.191922][T13872] bond0: (slave vxlan0): Releasing backup interface
[  196.199010][T13872] vxlan0: left promiscuous mode
[  196.203895][T13872] bond8: (slave bridge1): Releasing backup interface
[  196.261701][T13872] netlink: 'syz.0.3459': attribute type 10 has an invalid length.
[  196.264934][T13872] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  196.270378][T13872] bond0: (slave wlan1): refused to change device type
[  197.934669][T13937] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  197.938286][T13937] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  197.941812][T13937] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  197.945903][T13937] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  197.955216][T13939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3480'.
[  198.046470][T13945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3483'.
[  198.050220][T13945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3483'.
[  198.202552][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3489'.
[  198.303198][T13970] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3496'.
[  198.338295][T13975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3498'.
[  198.342714][T13974] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3497'.
[  198.431703][T13984] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3502'.
[  198.620994][T13994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3507'.
[  198.752560][T14006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3512'.
[  198.943451][T14019] netlink: 'syz.1.3518': attribute type 10 has an invalid length.
[  198.967287][T14019] team0: Port device dummy0 added
[  198.975618][T14019] netlink: 'syz.1.3518': attribute type 10 has an invalid length.
[  198.981529][T14019] 
[  198.982600][T14019] ======================================================
[  198.985469][T14019] WARNING: possible circular locking dependency detected
[  198.988229][T14019] 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 Not tainted
[  198.992328][T14019] ------------------------------------------------------
[  198.995274][T14019] syz.1.3518/14019 is trying to acquire lock:
[  198.998800][T14019] ffff888122e58e00 (team->team_lock_key){+.+.}-{4:4}, at: team_device_event+0x182/0xa20
[  199.003104][T14019] 
[  199.003104][T14019] but task is already holding lock:
[  199.005995][T14019] ffff888122f7ed30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[  199.009666][T14019] 
[  199.009666][T14019] which lock already depends on the new lock.
[  199.009666][T14019] 
[  199.013673][T14019] 
[  199.013673][T14019] the existing dependency chain (in reverse order) is:
[  199.017154][T14019] 
[  199.017154][T14019] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[  199.020446][T14019]        lock_acquire+0x120/0x360
[  199.022407][T14019]        __mutex_lock+0x182/0xe80
[  199.024411][T14019]        dev_set_mtu+0x10e/0x260
[  199.026377][T14019]        team_add_slave+0x8b8/0x2840
[  199.028462][T14019]        do_set_master+0x533/0x6d0
[  199.030468][T14019]        do_setlink+0xcf0/0x41c0
[  199.032435][T14019]        rtnl_newlink+0x160b/0x1c70
[  199.034493][T14019]        rtnetlink_rcv_msg+0x7cf/0xb70
[  199.036658][T14019]        netlink_rcv_skb+0x208/0x470
[  199.038732][T14019]        netlink_unicast+0x75c/0x8e0
[  199.040768][T14019]        netlink_sendmsg+0x805/0xb30
[  199.042853][T14019]        __sock_sendmsg+0x21c/0x270
[  199.044817][T14019]        ____sys_sendmsg+0x505/0x830
[  199.046826][T14019]        ___sys_sendmsg+0x21f/0x2a0
[  199.048852][T14019]        __x64_sys_sendmsg+0x19b/0x260
[  199.050962][T14019]        do_syscall_64+0xfa/0x3b0
[  199.052954][T14019]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.055471][T14019] 
[  199.055471][T14019] -> #0 (team->team_lock_key){+.+.}-{4:4}:
[  199.058668][T14019]        validate_chain+0xb9b/0x2140
[  199.060773][T14019]        __lock_acquire+0xab9/0xd20
[  199.062849][T14019]        lock_acquire+0x120/0x360
[  199.064854][T14019]        __mutex_lock+0x182/0xe80
[  199.066809][T14019]        team_device_event+0x182/0xa20
[  199.068942][T14019]        notifier_call_chain+0x1b6/0x3e0
[  199.071130][T14019]        __dev_notify_flags+0x18d/0x2e0
[  199.073286][T14019]        netif_change_flags+0xe8/0x1a0
[  199.075308][T14019]        do_setlink+0xc55/0x41c0
[  199.077193][T14019]        rtnl_newlink+0x160b/0x1c70
[  199.079107][T14019]        rtnetlink_rcv_msg+0x7cf/0xb70
[  199.081056][T14019]        netlink_rcv_skb+0x208/0x470
[  199.082971][T14019]        netlink_unicast+0x75c/0x8e0
[  199.084926][T14019]        netlink_sendmsg+0x805/0xb30
[  199.087046][T14019]        __sock_sendmsg+0x21c/0x270
[  199.089146][T14019]        ____sys_sendmsg+0x505/0x830
[  199.091205][T14019]        ___sys_sendmsg+0x21f/0x2a0
[  199.093218][T14019]        __x64_sys_sendmsg+0x19b/0x260
[  199.095369][T14019]        do_syscall_64+0xfa/0x3b0
[  199.097404][T14019]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.099953][T14019] 
[  199.099953][T14019] other info that might help us debug this:
[  199.099953][T14019] 
[  199.103905][T14019]  Possible unsafe locking scenario:
[  199.103905][T14019] 
[  199.106817][T14019]        CPU0                    CPU1
[  199.108947][T14019]        ----                    ----
[  199.111057][T14019]   lock(&dev_instance_lock_key#3);
[  199.113151][T14019]                                lock(team->team_lock_key);
[  199.116047][T14019]                                lock(&dev_instance_lock_key#3);
[  199.119054][T14019]   lock(team->team_lock_key);
[  199.120960][T14019] 
[  199.120960][T14019]  *** DEADLOCK ***
[  199.120960][T14019] 
[  199.124160][T14019] 2 locks held by syz.1.3518/14019:
[  199.126209][T14019]  #0: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  199.129787][T14019]  #1: ffff888122f7ed30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[  199.133766][T14019] 
[  199.133766][T14019] stack backtrace:
[  199.136075][T14019] CPU: 1 UID: 0 PID: 14019 Comm: syz.1.3518 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  199.136095][T14019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  199.136105][T14019] Call Trace:
[  199.136115][T14019]  <TASK>
[  199.136135][T14019]  dump_stack_lvl+0x189/0x250
[  199.136160][T14019]  ? __pfx_dump_stack_lvl+0x10/0x10
[  199.136177][T14019]  ? __pfx__printk+0x10/0x10
[  199.136198][T14019]  ? print_lock_name+0xde/0x100
[  199.136215][T14019]  print_circular_bug+0x2ee/0x310
[  199.136234][T14019]  check_noncircular+0x134/0x160
[  199.136253][T14019]  validate_chain+0xb9b/0x2140
[  199.136270][T14019]  ? __lock_acquire+0xab9/0xd20
[  199.136287][T14019]  __lock_acquire+0xab9/0xd20
[  199.136301][T14019]  ? team_device_event+0x182/0xa20
[  199.136313][T14019]  lock_acquire+0x120/0x360
[  199.136324][T14019]  ? team_device_event+0x182/0xa20
[  199.136338][T14019]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  199.136360][T14019]  __mutex_lock+0x182/0xe80
[  199.136376][T14019]  ? team_device_event+0x182/0xa20
[  199.136389][T14019]  ? __try_to_del_timer_sync+0x34a/0x3a0
[  199.136412][T14019]  ? team_device_event+0x182/0xa20
[  199.136425][T14019]  ? __pfx___mutex_lock+0x10/0x10
[  199.136439][T14019]  ? __timer_delete_sync+0x218/0x2d0
[  199.136465][T14019]  team_device_event+0x182/0xa20
[  199.136479][T14019]  notifier_call_chain+0x1b6/0x3e0
[  199.136500][T14019]  __dev_notify_flags+0x18d/0x2e0
[  199.136536][T14019]  ? __pfx___dev_notify_flags+0x10/0x10
[  199.136555][T14019]  ? __dev_change_flags+0x4cc/0x6d0
[  199.136576][T14019]  ? __pfx___dev_change_flags+0x10/0x10
[  199.136596][T14019]  ? __pfx_console_unlock+0x10/0x10
[  199.136643][T14019]  ? irq_work_queue+0xbc/0x140
[  199.136661][T14019]  netif_change_flags+0xe8/0x1a0
[  199.136685][T14019]  do_setlink+0xc55/0x41c0
[  199.136713][T14019]  ? __pfx_do_setlink+0x10/0x10
[  199.136734][T14019]  ? _printk+0xcf/0x120
[  199.136752][T14019]  ? __pfx____ratelimit+0x10/0x10
[  199.136769][T14019]  ? __lock_acquire+0xab9/0xd20
[  199.136786][T14019]  ? __mutex_trylock_common+0x153/0x260
[  199.136806][T14019]  ? __pfx___mutex_trylock_common+0x10/0x10
[  199.136825][T14019]  ? rcu_is_watching+0x15/0xb0
[  199.136841][T14019]  ? trace_contention_end+0x39/0x120
[  199.136860][T14019]  ? __mutex_lock+0x330/0xe80
[  199.136874][T14019]  ? __pfx_aa_get_newest_label+0x10/0x10
[  199.136892][T14019]  ? rtnl_newlink+0x8db/0x1c70
[  199.136909][T14019]  ? rcu_is_watching+0x15/0xb0
[  199.136925][T14019]  ? __pfx___mutex_lock+0x10/0x10
[  199.136943][T14019]  ? ns_capable+0x8a/0xf0
[  199.136960][T14019]  ? rtnl_link_get_net_capable+0x16a/0x350
[  199.136982][T14019]  rtnl_newlink+0x160b/0x1c70
[  199.136999][T14019]  ? netlink_sendmsg+0x805/0xb30
[  199.137023][T14019]  ? __pfx_rtnl_newlink+0x10/0x10
[  199.137048][T14019]  ? kasan_quarantine_put+0xdd/0x220
[  199.137068][T14019]  ? lockdep_hardirqs_on+0x9c/0x150
[  199.137086][T14019]  ? nlmon_xmit+0xb0/0x100
[  199.137104][T14019]  ? kmem_cache_free+0x18f/0x400
[  199.137130][T14019]  ? __local_bh_enable_ip+0x12d/0x1c0
[  199.137146][T14019]  ? lockdep_hardirqs_on+0x9c/0x150
[  199.137160][T14019]  ? __local_bh_enable_ip+0x12d/0x1c0
[  199.137176][T14019]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  199.137192][T14019]  ? __dev_queue_xmit+0x27e/0x3a70
[  199.137211][T14019]  ? __lock_acquire+0xab9/0xd20
[  199.137233][T14019]  ? __pfx_rtnl_newlink+0x10/0x10
[  199.137250][T14019]  rtnetlink_rcv_msg+0x7cf/0xb70
[  199.137270][T14019]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  199.137287][T14019]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  199.137303][T14019]  ? ref_tracker_free+0x63a/0x7d0
[  199.137319][T14019]  ? __copy_skb_header+0xa7/0x550
[  199.137341][T14019]  ? __pfx_ref_tracker_free+0x10/0x10
[  199.137359][T14019]  netlink_rcv_skb+0x208/0x470
[  199.137380][T14019]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  199.137398][T14019]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  199.137420][T14019]  ? netlink_deliver_tap+0x2e/0x1b0
[  199.137439][T14019]  ? netlink_deliver_tap+0x2e/0x1b0
[  199.137459][T14019]  netlink_unicast+0x75c/0x8e0
[  199.137479][T14019]  netlink_sendmsg+0x805/0xb30
[  199.137509][T14019]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.137532][T14019]  ? aa_sock_msg_perm+0x94/0x160
[  199.137549][T14019]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  199.137569][T14019]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.137587][T14019]  __sock_sendmsg+0x21c/0x270
[  199.137606][T14019]  ____sys_sendmsg+0x505/0x830
[  199.137660][T14019]  ? __pfx_____sys_sendmsg+0x10/0x10
[  199.137685][T14019]  ? import_iovec+0x74/0xa0
[  199.137709][T14019]  ___sys_sendmsg+0x21f/0x2a0
[  199.137732][T14019]  ? __pfx____sys_sendmsg+0x10/0x10
[  199.137763][T14019]  ? __fget_files+0x2a/0x420
[  199.137778][T14019]  ? __fget_files+0x3a0/0x420
[  199.137793][T14019]  __x64_sys_sendmsg+0x19b/0x260
[  199.137814][T14019]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  199.137839][T14019]  ? rcu_is_watching+0x15/0xb0
[  199.137855][T14019]  ? do_syscall_64+0xbe/0x3b0
[  199.137872][T14019]  do_syscall_64+0xfa/0x3b0
[  199.137895][T14019]  ? lockdep_hardirqs_on+0x9c/0x150
[  199.137911][T14019]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.137926][T14019]  ? exc_page_fault+0x9f/0xf0
[  199.137939][T14019]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.137956][T14019] RIP: 0033:0x7fd5dcb8e9a9
[  199.137973][T14019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.137989][T14019] RSP: 002b:00007fd5dda55038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  199.138005][T14019] RAX: ffffffffffffffda RBX: 00007fd5dcdb5fa0 RCX: 00007fd5dcb8e9a9
[  199.138018][T14019] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000008
[  199.138027][T14019] RBP: 00007fd5dcc10d69 R08: 0000000000000000 R09: 0000000000000000
[  199.138036][T14019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  199.138046][T14019] R13: 0000000000000000 R14: 00007fd5dcdb5fa0 R15: 00007ffe59bc1038
[  199.138062][T14019]  </TASK>
[  199.370573][T14019] team0: Port device dummy0 removed
[  199.374660][T14019] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  199.378762][ T3576] tipc: Resetting bearer <eth:team0>

VM DIAGNOSIS:
18:10:35  Registers:
info registers vcpu 0

CPU#0
RAX=5d45b67fefbd1300 RBX=ffffffff81976a48 RCX=5d45b67fefbd1300 RDX=0000000000000001
RSI=ffffffff8be28be0 RDI=ffffffff81976a48 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d6f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32d10ff8 CR3=0000000045b54000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=ffffffff81ebb739 ffffffff81eb95b9 XMM03=ffffffff8186dc69 ffffffff8186dbf1
XMM04=00007f85d1ced100 00007f85d1186440 XMM05=00007f85d1186458 00007f85d11864a0
XMM06=00007f85d1186498 00007f85d1186490 XMM07=00007f85d1186488 00007f85d1186480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f85d1011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000002e6e RDI=0000000000002e6f RBP=00000000000003f8 RSP=ffffc90002e6df10
R8 =ffff8881076d0237 R9 =1ffff11020eda046 R10=dffffc0000000000 R11=ffffffff85461d20
R12=dffffc0000000000 R13=ffffffff99af1884 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461d9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd5dda556c0 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000114416000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc2fc986478 00007fc2fc986450 XMM03=00007fc2fc986488 00007fc2fc986480
XMM04=00007fc2fd4ed100 00007fc2fc986440 XMM05=00007fc2fc986458 00007fc2fc9864a0
XMM06=00007fc2fc986498 00007fc2fc986490 XMM07=00007fc2fc986488 00007fc2fc986480
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007fc2fc811ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
