last executing test programs:

1.105533376s ago: executing program 1 (id=974):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x3c, r1, 0x507, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x3c}}, 0x0)

1.050924929s ago: executing program 1 (id=975):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'gre0\x00', 0x400})
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x66)

269.047507ms ago: executing program 1 (id=985):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001009e49de6d0100040000002400048005000300020000000500030000000000050003000100000005000300020000000800020002000000256c70d0722d636ecf0f908ff461969172827a340af0ad1c9e8927eb2ca0709ac71205a4d632bc0bf8200160651de2cb06eff6abec53203977e20e5c7be544127486d2aaecdeff410e17c8"], 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b8, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x440, 0x2e8, 0x2e8, 0x440, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2d8, 0x318, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef)
setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000540)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4)
syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[], 0x0)
r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r9, 0x1)
connect$bt_rfcomm(r9, &(0x7f0000000200)={0x1f, @any, 0x15}, 0xa)
close(r9)

178.015473ms ago: executing program 2 (id=988):
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x20, 0x4, 0x800002, 0x0, 0x201, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50)

177.903041ms ago: executing program 0 (id=989):
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r0}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x58, &(0x7f0000000380)}, 0x10)

177.725567ms ago: executing program 0 (id=990):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5e}}}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41100}, 0x94)

176.402744ms ago: executing program 1 (id=993):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000014c0)=@filter={'filter\x00', 0x42, 0x4, 0x2f8, 0xffffffff, 0x0, 0x98, 0x198, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xb7, 0x4, 0x3}}}, {{@ip={@remote, @broadcast, 0x0, 0xffffffff, 'ip6gretap0\x00', 'team_slave_1\x00'}, 0x287, 0xd8, 0x100, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@limit={{0x48}, {0x0, 0x0, 0x0, 0x0, 0x80f2}}]}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'dummy0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e22, 0x4e24], [0x4e20, 0x4e24], 0x22, 0x1, 0x20, 0x2}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358)

172.304549ms ago: executing program 2 (id=991):
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}}}, 0x0)

105.153216ms ago: executing program 2 (id=992):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x1b, 0xda2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40)

104.872128ms ago: executing program 0 (id=994):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x4020010)

104.429101ms ago: executing program 1 (id=995):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x58, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x58}}, 0x0)

104.172714ms ago: executing program 0 (id=996):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

48.291366ms ago: executing program 2 (id=997):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

47.970106ms ago: executing program 1 (id=998):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

47.783002ms ago: executing program 0 (id=999):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000060000000000000008000b00000000002c001300e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0)

498.216µs ago: executing program 2 (id=1000):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061105e000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x23)

218.7µs ago: executing program 0 (id=1001):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x4f7a, &(0x7f0000000180)=""/226, 0x0, 0x8}, 0x78)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

0s ago: executing program 2 (id=1002):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockname(r1, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000100010012000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000044000000090a01"], 0x8c}}, 0x0)
listen(r0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x8}, 0x1c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
bind$packet(r9, &(0x7f0000000080)={0x11, 0x4, r10, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14)
sendmsg$nl_route_sched(r11, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc0, r8, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x101}, @ETHTOOL_A_CHANNELS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0xc090)
shutdown(r0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:28192' (ED25519) to the list of known hosts.
syzkaller login: [   49.415227][ T5801] cgroup: Unknown subsys name 'net'
[   49.547189][ T5801] cgroup: Unknown subsys name 'cpuset'
[   49.557405][ T5801] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.244607][ T5801] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.069129][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.069749][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.073554][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.076849][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.077411][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.079439][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.082389][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.084870][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.086293][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.088811][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.137078][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.139824][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.143096][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.145925][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.148413][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.369092][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   56.408064][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   56.440890][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   56.513755][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.516135][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.518588][ T5832] bridge_slave_0: entered allmulticast mode
[   56.521388][ T5832] bridge_slave_0: entered promiscuous mode
[   56.545091][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.547640][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.550152][ T5832] bridge_slave_1: entered allmulticast mode
[   56.553727][ T5832] bridge_slave_1: entered promiscuous mode
[   56.561315][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.564546][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.566999][ T5836] bridge_slave_0: entered allmulticast mode
[   56.569730][ T5836] bridge_slave_0: entered promiscuous mode
[   56.588502][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.591601][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.595767][ T5836] bridge_slave_1: entered allmulticast mode
[   56.599610][ T5836] bridge_slave_1: entered promiscuous mode
[   56.643421][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.660539][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.663975][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.667238][ T5841] bridge_slave_0: entered allmulticast mode
[   56.671009][ T5841] bridge_slave_0: entered promiscuous mode
[   56.694836][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.701555][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.707353][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.710388][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.713974][ T5841] bridge_slave_1: entered allmulticast mode
[   56.717835][ T5841] bridge_slave_1: entered promiscuous mode
[   56.724956][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.788758][ T5832] team0: Port device team_slave_0 added
[   56.804546][ T5836] team0: Port device team_slave_0 added
[   56.808832][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.814163][ T5832] team0: Port device team_slave_1 added
[   56.817745][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.821709][ T5836] team0: Port device team_slave_1 added
[   56.860958][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.864234][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.877393][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.884376][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.887174][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.898126][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.914357][ T5841] team0: Port device team_slave_0 added
[   56.933679][ T5841] team0: Port device team_slave_1 added
[   56.936043][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.938510][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.948006][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.977935][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.980393][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.990717][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.996704][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.999566][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.009358][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.014081][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.016841][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.029389][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.074671][ T5832] hsr_slave_0: entered promiscuous mode
[   57.077953][ T5832] hsr_slave_1: entered promiscuous mode
[   57.137031][ T5841] hsr_slave_0: entered promiscuous mode
[   57.139329][ T5841] hsr_slave_1: entered promiscuous mode
[   57.141463][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.144108][ T5841] Cannot create hsr debugfs directory
[   57.207207][ T5836] hsr_slave_0: entered promiscuous mode
[   57.209639][ T5836] hsr_slave_1: entered promiscuous mode
[   57.211841][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.215141][ T5836] Cannot create hsr debugfs directory
[   57.425049][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.439649][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.445181][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.449473][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.507303][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.511887][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.519225][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.524919][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.579477][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.594205][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.599452][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.613166][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.672997][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.691520][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   57.708216][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.711217][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.731171][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.733520][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.768702][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.802020][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   57.819221][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.822154][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.845006][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.847426][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.877550][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.935267][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   57.954049][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.957087][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.997319][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.000317][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.076814][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.092023][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.143736][ T5838] Bluetooth: hci0: command tx timeout
[   58.144154][ T5225] Bluetooth: hci1: command tx timeout
[   58.158319][ T5832] veth0_vlan: entered promiscuous mode
[   58.186110][ T5832] veth1_vlan: entered promiscuous mode
[   58.194840][ T5841] veth0_vlan: entered promiscuous mode
[   58.209907][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.220633][ T5841] veth1_vlan: entered promiscuous mode
[   58.224224][ T5225] Bluetooth: hci2: command tx timeout
[   58.267449][ T5832] veth0_macvtap: entered promiscuous mode
[   58.277807][ T5832] veth1_macvtap: entered promiscuous mode
[   58.283591][ T5841] veth0_macvtap: entered promiscuous mode
[   58.308678][ T5841] veth1_macvtap: entered promiscuous mode
[   58.319055][ T5836] veth0_vlan: entered promiscuous mode
[   58.337709][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.347194][ T5836] veth1_vlan: entered promiscuous mode
[   58.353482][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.364666][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.377365][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.382281][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.386607][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.390167][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.394616][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.409277][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.413988][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.417585][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.421243][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.495185][ T5836] veth0_macvtap: entered promiscuous mode
[   58.506004][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.510434][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.517145][ T5836] veth1_macvtap: entered promiscuous mode
[   58.568092][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.571765][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.574120][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.592769][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.607245][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.618910][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.620632][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.624393][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.630406][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.634980][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.638660][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.695525][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.698691][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.775966][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.779229][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.859923][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.867349][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.876803][ T5903] syz.0.4 uses obsolete (PF_INET,SOCK_PACKET)
[   59.219212][ T5921] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11'.
[   59.307493][ T5924] tipc: Failed to remove unknown binding: 66,3,3/0:3134557148/3134557149
[   59.467142][ T5930] macsec1: entered allmulticast mode
[   59.471702][ T5932] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[   59.676337][ T5938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19'.
[   59.690995][ T5938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19'.
[   60.222726][ T5225] Bluetooth: hci0: command tx timeout
[   60.222917][ T5838] Bluetooth: hci1: command tx timeout
[   60.302953][ T5838] Bluetooth: hci2: command tx timeout
[   60.494455][ T5961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.30'.
[   60.646154][ T5977] netlink: 'syz.0.36': attribute type 1 has an invalid length.
[   60.651138][ T5977] netlink: 228 bytes leftover after parsing attributes in process `syz.0.36'.
[   60.677762][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'.
[   60.703373][ T5978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.38'.
[   60.865336][ T5993] Zero length message leads to an empty skb
[   61.067018][ T6004] netlink: 52 bytes leftover after parsing attributes in process `syz.0.50'.
[   61.142192][ T6006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'.
[   61.386526][ T6026] tun0: tun_chr_ioctl cmd 1074025675
[   61.389792][ T6026] tun0: persist enabled
[   61.391901][ T6026] tun0: tun_chr_ioctl cmd 1074025675
[   61.398629][ T6026] tun0: persist enabled
[   61.474700][ T6035] netlink: 16 bytes leftover after parsing attributes in process `syz.0.65'.
[   62.303037][ T5838] Bluetooth: hci1: command tx timeout
[   62.303081][ T5225] Bluetooth: hci0: command tx timeout
[   62.383559][ T5225] Bluetooth: hci2: command tx timeout
[   63.305758][ T6123] netlink: 'syz.0.105': attribute type 9 has an invalid length.
[   64.382736][ T5225] Bluetooth: hci0: command tx timeout
[   64.382816][ T5838] Bluetooth: hci1: command tx timeout
[   64.463027][ T5838] Bluetooth: hci2: command tx timeout
[   65.388126][ T6193] xt_hashlimit: max too large, truncated to 1048576
[   65.517381][ T6203] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.417072][ T6266] vxcan1: tx address claim with different name
[   66.517159][ T6270] __nla_validate_parse: 2 callbacks suppressed
[   66.517176][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'.
[   67.272549][ T6315] syzkaller1: tun_chr_ioctl cmd 1074025672
[   67.275112][ T6315] syzkaller1: ignored: set checksum enabled
[   67.344029][ T6323] trusted_key: syz.0.194 sent an empty control message without MSG_MORE.
[   67.423735][ T6334] netlink: 'syz.1.199': attribute type 1 has an invalid length.
[   67.426947][ T6334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.199'.
[   67.431289][ T6332] Driver unsupported XDP return value 0 on prog  (id 42) dev N/A, expect packet loss!
[   67.467874][ T6338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'.
[   67.527626][ T6343] netlink: 104 bytes leftover after parsing attributes in process `syz.0.203'.
[   67.534414][ T6344] bridge_slave_0: left allmulticast mode
[   67.536673][ T6344] bridge_slave_0: left promiscuous mode
[   67.539919][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.546397][ T6346] netlink: 68 bytes leftover after parsing attributes in process `syz.1.204'.
[   67.550274][ T6346] netlink: 'syz.1.204': attribute type 1 has an invalid length.
[   67.556377][ T6344] bridge_slave_1: left allmulticast mode
[   67.559355][ T6344] bridge_slave_1: left promiscuous mode
[   67.561688][ T6344] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.571797][ T6344] bond0: (slave bond_slave_0): Releasing backup interface
[   67.582089][ T6344] bond0: (slave bond_slave_1): Releasing backup interface
[   67.593088][ T6339] netlink: 24 bytes leftover after parsing attributes in process `syz.2.195'.
[   67.606446][ T6349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.607225][ T6344] team0: Port device team_slave_0 removed
[   67.619567][ T6344] team0: Port device team_slave_1 removed
[   67.626938][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.630012][ T6344] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.635119][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.638310][ T6344] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.648367][ T6351] netlink: 2 bytes leftover after parsing attributes in process `syz.1.206'.
[   67.669640][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'.
[   67.921505][ T6369] netlink: 76 bytes leftover after parsing attributes in process `syz.0.214'.
[   68.096013][ T6385] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.167071][ T6389] xt_hashlimit: size too large, truncated to 1048576
[   68.170252][ T6389] xt_hashlimit: overflow, try lower: 3/0
[   68.294538][ T6394] xt_ipcomp: unknown flags F7
[   68.307239][ T6396] delete_channel: no stack
[   68.380252][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.231'.
[   68.417929][ T6406] tipc: Started in network mode
[   68.419602][ T6406] tipc: Node identity 0691bdc4b3fa, cluster identity 4711
[   68.421954][ T6406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.425048][ T6406] syzkaller0: entered promiscuous mode
[   68.426897][ T6406] syzkaller0: entered allmulticast mode
[   68.441973][ T6406] tipc: Resetting bearer <eth:syzkaller0>
[   68.448025][ T6405] tipc: Resetting bearer <eth:syzkaller0>
[   68.454718][ T6405] tipc: Disabling bearer <eth:syzkaller0>
[   68.630309][ T6423] caif0: Master is either lo or non-ether device
[   69.386671][ T6492] syzkaller1: entered promiscuous mode
[   69.389277][ T6492] syzkaller1: entered allmulticast mode
[   69.566219][ T6511] Bluetooth: MGMT ver 1.23
[   69.691099][ T6529] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   69.773073][ T6535] netlink: 'syz.0.274': attribute type 3 has an invalid length.
[   69.854985][ T6543] IPv6: NLM_F_REPLACE set, but no existing node found!
[   69.932562][ T6551] netlink: 'syz.1.283': attribute type 32 has an invalid length.
[   70.712036][ T6626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   70.969240][ T6640] xt_policy: neither incoming nor outgoing policy selected
[   71.105594][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.108336][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.326579][ T6664] warning: `syz.1.336' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.730099][ T6696] __nla_validate_parse: 15 callbacks suppressed
[   71.730116][ T6696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.351'.
[   72.057247][ T5301] IPVS: starting estimator thread 0...
[   72.154112][ T6719] IPVS: using max 80 ests per chain, 192000 per kthread
[   72.290485][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'.
[   72.294970][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'.
[   72.403014][ T6750] netlink: 48 bytes leftover after parsing attributes in process `syz.2.375'.
[   72.440884][ T6755] netlink: 'syz.2.377': attribute type 1 has an invalid length.
[   72.772460][ T6790] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[   72.826865][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'.
[   72.986099][ T6807] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.188221][ T6843] bond0 (unregistering): Released all slaves
[   74.317125][ T6858] ieee802154 phy0 wpan0: encryption failed: -22
[   74.447575][ T6874] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072284733443)
[   74.451999][ T6874] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[   74.579725][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'.
[   74.662483][ T6896] netlink: 84 bytes leftover after parsing attributes in process `syz.1.438'.
[   74.713977][ T6902] netlink: 20 bytes leftover after parsing attributes in process `syz.2.441'.
[   74.856841][ T6917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.448'.
[   74.928329][ T6926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.452'.
[   74.966658][ T6929] ip6gretap0: entered promiscuous mode
[   74.970254][ T6929] ip6gretap0: left promiscuous mode
[   75.127401][ T6944] netlink: 'syz.2.461': attribute type 28 has an invalid length.
[   76.585369][ T7025] netlink: 'syz.2.500': attribute type 16 has an invalid length.
[   76.699751][ T7035] xt_hashlimit: size too large, truncated to 1048576
[   76.967594][ T7063] __nla_validate_parse: 5 callbacks suppressed
[   76.967614][ T7063] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.517'.
[   77.258271][ T7086] netlink: 'syz.2.529': attribute type 1 has an invalid length.
[   77.260971][ T7086] netlink: 168 bytes leftover after parsing attributes in process `syz.2.529'.
[   77.264328][ T7086] NCSI netlink: No device for ifindex 0
[   77.322980][ T7092] batadv_slave_0: entered promiscuous mode
[   77.495819][ T7110] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.693352][ T7138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.553'.
[   77.705971][ T7141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.555'.
[   77.715865][ T7138] macvlan2: entered promiscuous mode
[   77.717701][ T7138] macvlan2: entered allmulticast mode
[   77.720422][ T7138] bond1: entered promiscuous mode
[   77.723250][ T7138] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   77.734509][ T7138] bond1: left promiscuous mode
[   77.821770][ T7149] netlink: 566 bytes leftover after parsing attributes in process `syz.0.559'.
[   77.989206][ T7163] ip6gre1: entered allmulticast mode
[   78.058763][ T7172] netlink: 60 bytes leftover after parsing attributes in process `syz.1.569'.
[   78.116674][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'.
[   78.156277][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'.
[   78.174282][ T7181] bridge0: entered promiscuous mode
[   78.176299][ T7181] macvtap1: entered promiscuous mode
[   78.178208][ T7181] macvtap1: entered allmulticast mode
[   78.179979][ T7181] bridge0: entered allmulticast mode
[   78.186904][ T7181] bridge0: left allmulticast mode
[   78.188860][ T7181] bridge0: left promiscuous mode
[   78.455170][ T7218] netlink: 'syz.1.590': attribute type 16 has an invalid length.
[   78.457671][ T7218] netlink: 'syz.1.590': attribute type 3 has an invalid length.
[   78.460204][ T7218] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.590'.
[   79.119923][ T7255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.606'.
[   79.167270][ T7257] xt_SECMARK: invalid mode: 0
[   79.251912][ T7261] tipc: Started in network mode
[   79.254811][ T7261] tipc: Node identity a2f0df2cc23e, cluster identity 4711
[   79.257270][ T7261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.287380][ T7261] syzkaller0: entered promiscuous mode
[   79.289807][ T7261] syzkaller0: entered allmulticast mode
[   79.292881][ T7261] tipc: Resetting bearer <eth:syzkaller0>
[   79.298443][ T7260] tipc: Resetting bearer <eth:syzkaller0>
[   79.986913][ T7260] tipc: Disabling bearer <eth:syzkaller0>
[   80.105340][ T7273] bridge1: port 1(veth3) entered blocking state
[   80.109352][ T7273] bridge1: port 1(veth3) entered disabled state
[   80.111966][ T7273] veth3: entered allmulticast mode
[   80.114706][ T7273] veth3: entered promiscuous mode
[   80.121415][ T7273] bridge1: port 2(veth0_to_bond) entered blocking state
[   80.125602][ T7273] bridge1: port 2(veth0_to_bond) entered disabled state
[   80.127955][ T7273] veth0_to_bond: entered allmulticast mode
[   80.130713][ T7273] veth0_to_bond: entered promiscuous mode
[   80.144484][ T7273] vlan2: entered allmulticast mode
[   80.146862][ T7273] veth1: entered allmulticast mode
[   80.149348][ T7273] bridge1: port 3(vlan2) entered blocking state
[   80.162638][ T7273] bridge1: port 3(vlan2) entered disabled state
[   80.166996][ T7273] vlan2: entered promiscuous mode
[   80.170802][ T7273] veth1: entered promiscuous mode
[   80.620141][ T7319] syzkaller0: entered promiscuous mode
[   80.622082][ T7319] syzkaller0: entered allmulticast mode
[   81.003798][ T7347] netlink: 'syz.1.647': attribute type 13 has an invalid length.
[   81.007838][ T7347] netlink: 'syz.1.647': attribute type 17 has an invalid length.
[   81.014251][ T7346] netlink: 'syz.2.646': attribute type 5 has an invalid length.
[   81.242816][ T7347] gretap0: refused to change device tx_queue_len
[   81.245062][ T7347] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   81.356891][   T51] cfg80211: failed to load regulatory.db
[   81.755078][ T7399] mac80211_hwsim hwsim2 ": renamed from wlan0 (while UP)
[   81.935827][ T7413] batadv1: entered promiscuous mode
[   82.123985][ T7429] __nla_validate_parse: 8 callbacks suppressed
[   82.123999][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.686'.
[   82.658186][   T24] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   82.714447][ T7444] netlink: 224 bytes leftover after parsing attributes in process `syz.2.691'.
[   82.837201][ T7452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.695'.
[   82.841184][ T7452] netlink: 'syz.2.695': attribute type 7 has an invalid length.
[   82.846313][ T7452] netlink: 'syz.2.695': attribute type 8 has an invalid length.
[   82.849953][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'.
[   82.998700][ T7459] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[   83.067660][ T7466] macvlan0: entered allmulticast mode
[   83.069698][ T7466] veth1_vlan: entered allmulticast mode
[   83.075960][ T7466] veth1_vlan: left allmulticast mode
[   83.098664][ T7466] macvlan0 (unregistering): left allmulticast mode
[   83.236786][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.706'.
[   83.368311][ T7493] syz_tun: entered promiscuous mode
[   83.370525][ T7493] macsec1: entered allmulticast mode
[   83.374195][ T7493] syz_tun: entered allmulticast mode
[   83.377815][ T7493] syz_tun: left allmulticast mode
[   83.379550][ T7493] syz_tun: left promiscuous mode
[   83.485181][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'.
[   83.743500][ T5838] Bluetooth: hci2: command tx timeout
[   84.649159][ T7558] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   84.836235][ T7580] netlink: 48 bytes leftover after parsing attributes in process `syz.1.750'.
[   84.856148][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.749'.
[   85.139288][ T7604] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.216129][ T7604] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.250109][ T7618] netlink: 60 bytes leftover after parsing attributes in process `syz.2.763'.
[   85.257376][ T7612] netlink: 60 bytes leftover after parsing attributes in process `syz.2.763'.
[   85.284127][ T7604] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.321260][ T7626] netlink: 'syz.0.769': attribute type 15 has an invalid length.
[   85.321801][ T7604] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.323944][ T7626] netlink: 'syz.0.769': attribute type 7 has an invalid length.
[   85.391979][ T7604] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.402932][ T7604] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.410842][ T7604] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.419416][ T7604] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.429413][ T7632] openvswitch: netlink: IPv6 tunnel dst address is zero
[   85.986173][ T7671] sctp: [Deprecated]: syz.0.788 (pid 7671) Use of struct sctp_assoc_value in delayed_ack socket option.
[   85.986173][ T7671] Use struct sctp_sack_info instead
[   86.576535][ T7703] xt_addrtype: ipv6 BLACKHOLE matching not supported
[   86.831197][ T7723] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (3)
[   87.474814][ T7782] netlink: 'syz.0.839': attribute type 1 has an invalid length.
[   87.477963][ T7782] __nla_validate_parse: 7 callbacks suppressed
[   87.477972][ T7782] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.839'.
[   87.743767][ T5225] Bluetooth: hci2: command 0x0405 tx timeout
[   87.859107][ T7828] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.866749][ T7828] syzkaller0: entered promiscuous mode
[   87.868945][ T7828] syzkaller0: entered allmulticast mode
[   87.891252][ T7828] tipc: Resetting bearer <eth:syzkaller0>
[   87.895206][ T7827] tipc: Resetting bearer <eth:syzkaller0>
[   87.902146][ T7827] tipc: Disabling bearer <eth:syzkaller0>
[   87.967066][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'.
[   88.008682][   T51] IPVS: starting estimator thread 0...
[   88.011307][ T7843] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[   88.056815][ T7850] netlink: 'syz.2.870': attribute type 58 has an invalid length.
[   88.059698][ T7850] netlink: 20 bytes leftover after parsing attributes in process `syz.2.870'.
[   88.071611][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.873'.
[   88.102600][ T7844] IPVS: using max 78 ests per chain, 187200 per kthread
[   88.259590][ T7866] wireguard0: entered promiscuous mode
[   88.261365][ T7866] wireguard0: entered allmulticast mode
[   88.367671][ T7877] netlink: 132 bytes leftover after parsing attributes in process `syz.1.882'.
[   88.519832][ T7889] netlink: 'syz.1.888': attribute type 29 has an invalid length.
[   88.688581][ T7894] veth1_to_bond: entered allmulticast mode
[   88.692187][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.890'.
[   88.708894][ T7894] bond0: (slave bond_slave_1): Releasing backup interface
[   88.720229][ T7894] veth1_to_bond (unregistering): left allmulticast mode
[   89.377046][ T7914] netlink: 'syz.2.899': attribute type 15 has an invalid length.
[   89.380230][ T7914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.899'.
[   89.614059][ T7922] netlink: 'syz.2.902': attribute type 1 has an invalid length.
[   89.616835][ T7922] netlink: 208 bytes leftover after parsing attributes in process `syz.2.902'.
[   91.113581][ T7934] ieee802154 phy1 wpan1: encryption failed: -22
[   91.158938][ T7939] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072284733443)
[   91.163762][ T7939] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[   91.248115][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.912'.
[   91.321421][ T7950] netlink: 84 bytes leftover after parsing attributes in process `syz.0.915'.
[   91.983702][ T8007] xt_hashlimit: size too large, truncated to 1048576
[   92.210547][ T8023] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   92.213015][ T8023] IPv6: NLM_F_CREATE should be set when creating new route
[   92.215648][ T8023] IPv6: NLM_F_CREATE should be set when creating new route
[   92.218444][ T8023] IPv6: NLM_F_CREATE should be set when creating new route
[   92.223712][ T8023] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   92.510728][ T8050] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.517017][ T8050] batadv_slave_0: entered promiscuous mode
[   92.711864][ T8067] __nla_validate_parse: 4 callbacks suppressed
[   92.711873][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'.
[   93.145414][ T8083] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   93.249632][ T8089] xt_CT: No such helper "snmp"
[   93.698664][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.984'.
[   93.729077][ T8108] netlink: 52 bytes leftover after parsing attributes in process `syz.1.985'.
[   93.938263][ T8135] ip6tnl1: entered promiscuous mode
[   93.939950][ T8137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.999'.
[   93.940111][ T8135] ip6tnl1: entered allmulticast mode
[   93.957733][ T8135] team0: Device ip6tnl1 is of different type
[   93.995056][ T8144] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1002'.
[   93.999221][ T8144] netlink: 'syz.2.1002': attribute type 10 has an invalid length.
[   94.014108][ T8144] team0: Port device dummy0 added
[   94.023901][ T8144] netlink: 'syz.2.1002': attribute type 10 has an invalid length.
[   94.027185][ T8144] 
[   94.028022][ T8144] ======================================================
[   94.030341][ T8144] WARNING: possible circular locking dependency detected
[   94.032840][ T8144] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   94.036146][ T8144] ------------------------------------------------------
[   94.038403][ T8144] syz.2.1002/8144 is trying to acquire lock:
[   94.040399][ T8144] ffff888108a50e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_device_event+0x182/0xa20
[   94.043892][ T8144] 
[   94.043892][ T8144] but task is already holding lock:
[   94.046871][ T8144] ffff88810f84ed30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   94.049993][ T8144] 
[   94.049993][ T8144] which lock already depends on the new lock.
[   94.049993][ T8144] 
[   94.053404][ T8144] 
[   94.053404][ T8144] the existing dependency chain (in reverse order) is:
[   94.056252][ T8144] 
[   94.056252][ T8144] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[   94.058871][ T8144]        lock_acquire+0x120/0x360
[   94.060477][ T8144]        __mutex_lock+0x182/0xe80
[   94.062079][ T8144]        dev_set_mtu+0x10e/0x260
[   94.063809][ T8144]        team_add_slave+0x8b8/0x2840
[   94.065503][ T8144]        do_set_master+0x533/0x6d0
[   94.067155][ T8144]        do_setlink+0xcf0/0x41c0
[   94.068800][ T8144]        rtnl_newlink+0x160b/0x1c70
[   94.070483][ T8144]        rtnetlink_rcv_msg+0x7cf/0xb70
[   94.072288][ T8144]        netlink_rcv_skb+0x208/0x470
[   94.074147][ T8144]        netlink_unicast+0x75b/0x8d0
[   94.075852][ T8144]        netlink_sendmsg+0x805/0xb30
[   94.077574][ T8144]        __sock_sendmsg+0x21c/0x270
[   94.079227][ T8144]        ____sys_sendmsg+0x505/0x830
[   94.080921][ T8144]        ___sys_sendmsg+0x21f/0x2a0
[   94.082792][ T8144]        __x64_sys_sendmsg+0x19b/0x260
[   94.084675][ T8144]        do_syscall_64+0xfa/0x3b0
[   94.086285][ T8144]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.088305][ T8144] 
[   94.088305][ T8144] -> #0 (team->team_lock_key#2){+.+.}-{4:4}:
[   94.090906][ T8144]        validate_chain+0xb9b/0x2140
[   94.092641][ T8144]        __lock_acquire+0xab9/0xd20
[   94.094718][ T8144]        lock_acquire+0x120/0x360
[   94.096334][ T8144]        __mutex_lock+0x182/0xe80
[   94.097943][ T8144]        team_device_event+0x182/0xa20
[   94.099669][ T8144]        notifier_call_chain+0x1b6/0x3e0
[   94.101450][ T8144]        __dev_notify_flags+0x18d/0x2e0
[   94.103471][ T8144]        netif_change_flags+0xe8/0x1a0
[   94.105598][ T8144]        do_setlink+0xc55/0x41c0
[   94.107396][ T8144]        rtnl_newlink+0x160b/0x1c70
[   94.109065][ T8144]        rtnetlink_rcv_msg+0x7cf/0xb70
[   94.110818][ T8144]        netlink_rcv_skb+0x208/0x470
[   94.112563][ T8144]        netlink_unicast+0x75b/0x8d0
[   94.114384][ T8144]        netlink_sendmsg+0x805/0xb30
[   94.116115][ T8144]        __sock_sendmsg+0x21c/0x270
[   94.117803][ T8144]        ____sys_sendmsg+0x505/0x830
[   94.119501][ T8144]        ___sys_sendmsg+0x21f/0x2a0
[   94.121157][ T8144]        __x64_sys_sendmsg+0x19b/0x260
[   94.123004][ T8144]        do_syscall_64+0xfa/0x3b0
[   94.124627][ T8144]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.126785][ T8144] 
[   94.126785][ T8144] other info that might help us debug this:
[   94.126785][ T8144] 
[   94.130033][ T8144]  Possible unsafe locking scenario:
[   94.130033][ T8144] 
[   94.132417][ T8144]        CPU0                    CPU1
[   94.134295][ T8144]        ----                    ----
[   94.136175][ T8144]   lock(&dev_instance_lock_key#3);
[   94.137877][ T8144]                                lock(team->team_lock_key#2);
[   94.140336][ T8144]                                lock(&dev_instance_lock_key#3);
[   94.142992][ T8144]   lock(team->team_lock_key#2);
[   94.144630][ T8144] 
[   94.144630][ T8144]  *** DEADLOCK ***
[   94.144630][ T8144] 
[   94.147356][ T8144] 2 locks held by syz.2.1002/8144:
[   94.149098][ T8144]  #0: ffffffff8f51c948 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[   94.152168][ T8144]  #1: ffff88810f84ed30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   94.155704][ T8144] 
[   94.155704][ T8144] stack backtrace:
[   94.157717][ T8144] CPU: 0 UID: 0 PID: 8144 Comm: syz.2.1002 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   94.157727][ T8144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   94.157732][ T8144] Call Trace:
[   94.157737][ T8144]  <TASK>
[   94.157741][ T8144]  dump_stack_lvl+0x189/0x250
[   94.157753][ T8144]  ? __pfx_dump_stack_lvl+0x10/0x10
[   94.157762][ T8144]  ? __pfx__printk+0x10/0x10
[   94.157773][ T8144]  ? print_lock_name+0xde/0x100
[   94.157782][ T8144]  print_circular_bug+0x2ee/0x310
[   94.157793][ T8144]  check_noncircular+0x134/0x160
[   94.157804][ T8144]  validate_chain+0xb9b/0x2140
[   94.157814][ T8144]  ? __lock_acquire+0xab9/0xd20
[   94.157823][ T8144]  __lock_acquire+0xab9/0xd20
[   94.157830][ T8144]  ? team_device_event+0x182/0xa20
[   94.157840][ T8144]  lock_acquire+0x120/0x360
[   94.157847][ T8144]  ? team_device_event+0x182/0xa20
[   94.157857][ T8144]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   94.157870][ T8144]  __mutex_lock+0x182/0xe80
[   94.157878][ T8144]  ? team_device_event+0x182/0xa20
[   94.157890][ T8144]  ? __try_to_del_timer_sync+0x34a/0x3a0
[   94.157901][ T8144]  ? team_device_event+0x182/0xa20
[   94.157910][ T8144]  ? __pfx___mutex_lock+0x10/0x10
[   94.157916][ T8144]  ? __timer_delete_sync+0x218/0x2d0
[   94.157929][ T8144]  team_device_event+0x182/0xa20
[   94.157941][ T8144]  notifier_call_chain+0x1b6/0x3e0
[   94.157951][ T8144]  __dev_notify_flags+0x18d/0x2e0
[   94.157961][ T8144]  ? __pfx___dev_notify_flags+0x10/0x10
[   94.157969][ T8144]  ? __dev_change_flags+0x4cc/0x6d0
[   94.157978][ T8144]  ? __pfx___dev_change_flags+0x10/0x10
[   94.157987][ T8144]  ? __pfx_console_unlock+0x10/0x10
[   94.157996][ T8144]  ? irq_work_queue+0xc3/0x140
[   94.158003][ T8144]  netif_change_flags+0xe8/0x1a0
[   94.158012][ T8144]  do_setlink+0xc55/0x41c0
[   94.158023][ T8144]  ? __pfx_do_setlink+0x10/0x10
[   94.158031][ T8144]  ? _printk+0xcf/0x120
[   94.158039][ T8144]  ? __pfx____ratelimit+0x10/0x10
[   94.158052][ T8144]  ? __lock_acquire+0xab9/0xd20
[   94.158060][ T8144]  ? __mutex_trylock_common+0x153/0x260
[   94.158069][ T8144]  ? __pfx___mutex_trylock_common+0x10/0x10
[   94.158079][ T8144]  ? rcu_is_watching+0x15/0xb0
[   94.158087][ T8144]  ? trace_contention_end+0x39/0x120
[   94.158095][ T8144]  ? __mutex_lock+0x330/0xe80
[   94.158102][ T8144]  ? __pfx_aa_get_newest_label+0x10/0x10
[   94.158113][ T8144]  ? rtnl_newlink+0x8db/0x1c70
[   94.158120][ T8144]  ? rcu_is_watching+0x15/0xb0
[   94.158128][ T8144]  ? __pfx___mutex_lock+0x10/0x10
[   94.158136][ T8144]  ? ns_capable+0x8a/0xf0
[   94.158144][ T8144]  ? rtnl_link_get_net_capable+0x16a/0x350
[   94.158153][ T8144]  rtnl_newlink+0x160b/0x1c70
[   94.158160][ T8144]  ? netlink_sendmsg+0x805/0xb30
[   94.158170][ T8144]  ? __pfx_rtnl_newlink+0x10/0x10
[   94.158181][ T8144]  ? kasan_quarantine_put+0xdd/0x220
[   94.158189][ T8144]  ? lockdep_hardirqs_on+0x9c/0x150
[   94.158196][ T8144]  ? nlmon_xmit+0xb0/0x100
[   94.158203][ T8144]  ? kmem_cache_free+0x18f/0x400
[   94.158213][ T8144]  ? __local_bh_enable_ip+0x12d/0x1c0
[   94.158221][ T8144]  ? lockdep_hardirqs_on+0x9c/0x150
[   94.158228][ T8144]  ? __local_bh_enable_ip+0x12d/0x1c0
[   94.158235][ T8144]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   94.158243][ T8144]  ? __dev_queue_xmit+0x27e/0x3a70
[   94.158254][ T8144]  ? __lock_acquire+0xab9/0xd20
[   94.158265][ T8144]  ? __pfx_rtnl_newlink+0x10/0x10
[   94.158272][ T8144]  rtnetlink_rcv_msg+0x7cf/0xb70
[   94.158280][ T8144]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   94.158288][ T8144]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   94.158295][ T8144]  ? ref_tracker_free+0x63a/0x7d0
[   94.158302][ T8144]  ? __copy_skb_header+0xa7/0x550
[   94.158339][ T8144]  ? __pfx_ref_tracker_free+0x10/0x10
[   94.158346][ T8144]  ? __skb_clone+0x63/0x7a0
[   94.158357][ T8144]  netlink_rcv_skb+0x208/0x470
[   94.158366][ T8144]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   94.158374][ T8144]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   94.158385][ T8144]  ? netlink_deliver_tap+0x2e/0x1b0
[   94.158394][ T8144]  ? netlink_deliver_tap+0x2e/0x1b0
[   94.158403][ T8144]  netlink_unicast+0x75b/0x8d0
[   94.158412][ T8144]  netlink_sendmsg+0x805/0xb30
[   94.158424][ T8144]  ? __pfx_netlink_sendmsg+0x10/0x10
[   94.158433][ T8144]  ? aa_sock_msg_perm+0x94/0x160
[   94.158444][ T8144]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   94.158452][ T8144]  ? __pfx_netlink_sendmsg+0x10/0x10
[   94.158468][ T8144]  __sock_sendmsg+0x21c/0x270
[   94.158476][ T8144]  ____sys_sendmsg+0x505/0x830
[   94.158487][ T8144]  ? __pfx_____sys_sendmsg+0x10/0x10
[   94.158498][ T8144]  ? import_iovec+0x74/0xa0
[   94.158509][ T8144]  ___sys_sendmsg+0x21f/0x2a0
[   94.158519][ T8144]  ? __pfx____sys_sendmsg+0x10/0x10
[   94.158535][ T8144]  ? __fget_files+0x2a/0x420
[   94.158545][ T8144]  ? __fget_files+0x3a0/0x420
[   94.158557][ T8144]  __x64_sys_sendmsg+0x19b/0x260
[   94.158567][ T8144]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   94.158578][ T8144]  ? rcu_is_watching+0x15/0xb0
[   94.158588][ T8144]  ? do_syscall_64+0xbe/0x3b0
[   94.158595][ T8144]  do_syscall_64+0xfa/0x3b0
[   94.158602][ T8144]  ? lockdep_hardirqs_on+0x9c/0x150
[   94.158608][ T8144]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.158615][ T8144]  ? exc_page_fault+0x9f/0xf0
[   94.158625][ T8144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.158632][ T8144] RIP: 0033:0x7f83aef8e929
[   94.158641][ T8144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.158647][ T8144] RSP: 002b:00007f83afe99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   94.158655][ T8144] RAX: ffffffffffffffda RBX: 00007f83af1b5fa0 RCX: 00007f83aef8e929
[   94.158660][ T8144] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000008
[   94.158665][ T8144] RBP: 00007f83af010b39 R08: 0000000000000000 R09: 0000000000000000
[   94.158669][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.158673][ T8144] R13: 0000000000000000 R14: 00007f83af1b5fa0 R15: 00007ffeb038d1c8
[   94.158680][ T8144]  </TASK>
[   94.426446][ T8144] team0: Port device dummy0 removed

VM DIAGNOSIS:
21:55:07  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000072 RBX=0000000000000072 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000002b02 RDI=0000000000002b03 RBP=00000000000003f8 RSP=ffffc9000324df10
R8 =ffff888021740237 R9 =1ffff110042e8046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78eb R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f83afe996c0 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c377dfe CR3=0000000038dac000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f83af185478 00007f83af185450 XMM03=00007f83af185488 00007f83af185480
XMM04=00007f83afced100 00007f83af185440 XMM05=00007f83af185458 00007f83af1854a0
XMM06=00007f83af185498 00007f83af185490 XMM07=00007f83af185488 00007f83af185480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f83af011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff11004267398 RBX=ffffffff8f51c930 RCX=ffffffff819db768 RDX=0000000000000000
RSI=0000000000000008 RDI=0000000000000000 RBP=1ffffffff1ea391c RSP=ffffc9000345f708
R8 =ffffffff8f51c8e7 R9 =1ffffffff1ea391c R10=dffffc0000000000 R11=fffffbfff1ea391d
R12=ffffffff8f51c8e0 R13=ffffffff8f51c930 R14=dffffc0000000000 R15=ffff8881079e8000
RIP=ffffffff819db75b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055cf3171a7e8 CR3=000000010f52e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
