last executing test programs:

540.396551ms ago: executing program 0 (id=355):
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'dummy0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0)

392.196452ms ago: executing program 2 (id=360):
syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3b000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000780000c6091ee60e459b91ce74e42db323105ce6619e78ac0df0f77ff65e894c61d644d8e8eba02aef0276e0ccc5f0404f00749374d76a7d4bc2b2676d023892a097e1069afecb0af339b9c1910e4d86d9ae8565c1a99fbc6609f49c466d301b9ab0a94f1164e7002316c5e966c184"], 0x0)

339.277452ms ago: executing program 1 (id=361):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"})

338.780767ms ago: executing program 0 (id=362):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x439, 0x4, 0xfffffffe, {0x0, 0x0, 0x0, r2, 0x12141, 0x44d03}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0xff}}]}]}]}, 0x3c}}, 0x40c0)
setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0)
setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000abaff9), 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x36, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800a00010072616e67650000001c00028004000380010002400000000004000480080001400000000d0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0x84}}, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0xb)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r8}, 0x10)
socket$kcm(0x21, 0x2, 0x2)

272.170872ms ago: executing program 2 (id=363):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@dellink={0x34, 0x11, 0x1, 0x40000000, 0x3, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

272.020312ms ago: executing program 1 (id=364):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="1c005e80080007006f0000e8070005005b"], 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x0)

251.136299ms ago: executing program 2 (id=365):
r0 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0xff, 0x4)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r2, r2, 0xc, 0x0, 0x0, 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x0, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

245.572105ms ago: executing program 0 (id=366):
syz_emit_ethernet(0x66, &(0x7f0000000140)={@link_local, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0xff}}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x4}}}}}}}}, 0x0)

149.801885ms ago: executing program 0 (id=367):
syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000400", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x525, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0a339c9ee3be27df3e34046d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f616400000002fffd0000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x22, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

148.170791ms ago: executing program 2 (id=368):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005b80)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r2}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}}, 0x4000000)

147.749443ms ago: executing program 1 (id=369):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6, 0x1, 0xff, 0x6}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b32, &(0x7f0000000040))

88.585903ms ago: executing program 0 (id=370):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_proto_private(r0, 0x891d, &(0x7f00000001c0)="943a")

88.293758ms ago: executing program 1 (id=371):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_simple={0x74, 0x1, 0x0, 0x0, {{0xb}, {0xfffffd92, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}, @TCA_DEF_DATA={0x9, 0x3, 'vlan\x00'}, @TCA_DEF_PARMS={0x18}]}, {0xa, 0x6, "cddc3445408c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}}, 0x0)

86.853883ms ago: executing program 2 (id=372):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800300000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r2, r1, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20)
recvmmsg(r0, &(0x7f0000003680)=[{{0x0, 0x0, 0x0}}], 0x1, 0xf2ff, 0x0)

30.251785ms ago: executing program 1 (id=373):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

20.564075ms ago: executing program 2 (id=374):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2}, [@offload={0xc, 0x1c, {0x0, 0x6}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0)

20.341196ms ago: executing program 1 (id=375):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

0s ago: executing program 0 (id=376):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:6789' (ED25519) to the list of known hosts.
syzkaller login: [   48.577929][ T5761] cgroup: Unknown subsys name 'net'
[   48.690958][ T5761] cgroup: Unknown subsys name 'cpuset'
[   48.697256][ T5761] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.069980][ T5761] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.358214][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.427589][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.430309][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.457202][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.459796][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.917360][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.922327][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.927488][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.937501][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.951145][ T5889] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.955192][ T5887] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.958543][ T5887] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.959974][ T5883] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.961342][ T5887] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.966014][ T5883] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.967139][ T5883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.970571][ T5887] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.970830][ T5887] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.978435][ T5883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.987486][ T5887] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.269572][ T5888] chnl_net:caif_netlink_parms(): no params data found
[   61.385434][ T5881] chnl_net:caif_netlink_parms(): no params data found
[   61.441637][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.445414][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.447811][ T5888] bridge_slave_0: entered allmulticast mode
[   61.450725][ T5888] bridge_slave_0: entered promiscuous mode
[   61.457878][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.460670][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.463924][ T5888] bridge_slave_1: entered allmulticast mode
[   61.467408][ T5888] bridge_slave_1: entered promiscuous mode
[   61.483653][ T5884] chnl_net:caif_netlink_parms(): no params data found
[   61.519885][ T5888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.543436][ T5888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.546425][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.548750][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.551189][ T5881] bridge_slave_0: entered allmulticast mode
[   61.556021][ T5881] bridge_slave_0: entered promiscuous mode
[   61.560898][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.564566][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.566851][ T5881] bridge_slave_1: entered allmulticast mode
[   61.569519][ T5881] bridge_slave_1: entered promiscuous mode
[   61.622709][ T5888] team0: Port device team_slave_0 added
[   61.627857][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.656609][ T5888] team0: Port device team_slave_1 added
[   61.661723][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.694296][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.696573][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.698951][ T5884] bridge_slave_0: entered allmulticast mode
[   61.701605][ T5884] bridge_slave_0: entered promiscuous mode
[   61.720174][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.722737][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.732111][ T5888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.738412][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.740599][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.749645][ T5888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.755030][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.757530][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.759981][ T5884] bridge_slave_1: entered allmulticast mode
[   61.762719][ T5884] bridge_slave_1: entered promiscuous mode
[   61.768457][ T5881] team0: Port device team_slave_0 added
[   61.815147][ T5881] team0: Port device team_slave_1 added
[   61.856505][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.860718][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.863696][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.872114][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.877013][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.879780][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.890440][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.899610][ T5888] hsr_slave_0: entered promiscuous mode
[   61.902702][ T5888] hsr_slave_1: entered promiscuous mode
[   61.910281][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.980587][ T5884] team0: Port device team_slave_0 added
[   62.007504][ T5884] team0: Port device team_slave_1 added
[   62.015561][ T5881] hsr_slave_0: entered promiscuous mode
[   62.018675][ T5881] hsr_slave_1: entered promiscuous mode
[   62.021504][ T5881] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.026672][ T5881] Cannot create hsr debugfs directory
[   62.069421][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.071613][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.081095][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.086155][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.088360][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.098932][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.188956][ T5884] hsr_slave_0: entered promiscuous mode
[   62.191244][ T5884] hsr_slave_1: entered promiscuous mode
[   62.194504][ T5884] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.196879][ T5884] Cannot create hsr debugfs directory
[   62.327553][ T5888] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.342290][ T5888] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.370675][ T5888] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.388449][ T5888] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.424819][ T5881] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.452062][ T5881] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.460281][ T5881] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.465086][ T5881] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.497318][ T5884] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.507651][ T5884] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.515924][ T5884] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.525328][ T5884] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.596818][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.620214][ T5881] 8021q: adding VLAN 0 to HW filter on device team0
[   62.636393][ T5888] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.640802][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.643971][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.656253][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.659237][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.690577][ T5888] 8021q: adding VLAN 0 to HW filter on device team0
[   62.699110][ T5881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.715542][  T542] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.718359][  T542] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.721842][  T542] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.724616][  T542] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.741722][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.782475][ T5884] 8021q: adding VLAN 0 to HW filter on device team0
[   62.806848][  T542] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.809856][  T542] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.832571][  T542] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.835969][  T542] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.899248][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.975403][ T5881] veth0_vlan: entered promiscuous mode
[   62.988320][ T5881] veth1_vlan: entered promiscuous mode
[   62.997268][ T5888] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.004386][ T5885] Bluetooth: hci2: command tx timeout
[   63.015548][ T5885] Bluetooth: hci1: command tx timeout
[   63.015605][ T5887] Bluetooth: hci0: command tx timeout
[   63.057984][ T5881] veth0_macvtap: entered promiscuous mode
[   63.072256][ T5881] veth1_macvtap: entered promiscuous mode
[   63.095732][ T5888] veth0_vlan: entered promiscuous mode
[   63.107842][ T5888] veth1_vlan: entered promiscuous mode
[   63.116156][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.127313][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.137611][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.160677][ T5881] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.165529][ T5881] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.168952][ T5881] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.172520][ T5881] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.188570][ T5888] veth0_macvtap: entered promiscuous mode
[   63.209504][ T5888] veth1_macvtap: entered promiscuous mode
[   63.286498][  T542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.287653][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.289662][  T542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.306733][ T5884] veth0_vlan: entered promiscuous mode
[   63.320751][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.330561][ T5884] veth1_vlan: entered promiscuous mode
[   63.342562][ T5888] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.346666][ T5888] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.350227][ T5888] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.354972][ T5888] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.386758][  T542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.392872][  T542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.468286][ T5884] veth0_macvtap: entered promiscuous mode
[   63.497749][ T5884] veth1_macvtap: entered promiscuous mode
[   63.513093][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.526781][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.575549][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.590412][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.596587][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.612513][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.622261][ T5884] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.627667][ T5884] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.643484][ T5884] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.647734][ T5884] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.755258][  T542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.758423][  T542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.804912][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.807800][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.922827][ T5966] netlink: 'syz.2.21': attribute type 10 has an invalid length.
[   63.932606][ T5968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22'.
[   63.951613][ T5966] veth0_vlan: left promiscuous mode
[   63.958533][ T5966] veth0_vlan: entered promiscuous mode
[   63.968448][ T5966] team0: Device veth0_vlan failed to register rx_handler
[   63.989740][ T5971] netlink: 'syz.0.23': attribute type 3 has an invalid length.
[   63.992738][ T5971] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.23'.
[   64.403675][ T5993] syz.0.34 uses obsolete (PF_INET,SOCK_PACKET)
[   64.530476][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'.
[   64.579730][ T6001] gtp0: entered promiscuous mode
[   64.582089][ T6001] gtp0: entered allmulticast mode
[   64.678273][ T6006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.40'.
[   65.084192][ T5887] Bluetooth: hci0: command tx timeout
[   65.084279][ T5885] Bluetooth: hci1: command tx timeout
[   65.086020][ T5887] Bluetooth: hci2: command tx timeout
[   65.824407][ T6034] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   65.922967][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'.
[   66.100442][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'.
[   66.242346][ T6097] Bluetooth: MGMT ver 1.23
[   66.528746][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'.
[   66.677876][ T6124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.85'.
[   66.679223][ T6120] netlink: 'syz.0.84': attribute type 4 has an invalid length.
[   67.013715][ T6147] netlink: 5 bytes leftover after parsing attributes in process `syz.1.96'.
[   67.163797][ T5887] Bluetooth: hci1: command tx timeout
[   67.166270][ T5883] Bluetooth: hci0: command 0x040f tx timeout
[   67.173431][ T5883] Bluetooth: hci2: command tx timeout
[   67.208424][ T6158] netlink: 'syz.2.100': attribute type 10 has an invalid length.
[   67.747530][ T6188] tun0: tun_chr_ioctl cmd 1074025675
[   67.756872][ T6188] tun0: persist enabled
[   67.758896][ T6188] tun0: tun_chr_ioctl cmd 1074025675
[   67.760642][ T6188] tun0: persist disabled
[   67.862043][ T6196] tipc: Started in network mode
[   67.864988][ T6196] tipc: Node identity 000000005f0000000000000000000001, cluster identity 4711
[   67.867972][ T6196] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   67.870823][ T6198] warning: `syz.2.116' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.877943][ T6198] netlink: 'syz.2.116': attribute type 1 has an invalid length.
[   67.880886][ T6198] netlink: 224 bytes leftover after parsing attributes in process `syz.2.116'.
[   67.966417][ T6201] xt_CT: No such helper "snmp"
[   68.028970][ T5855] IPVS: starting estimator thread 0...
[   68.100600][ T6211] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.135842][ T6207] IPVS: using max 79 ests per chain, 189600 per kthread
[   68.286709][ T6219] netlink: 'syz.2.126': attribute type 10 has an invalid length.
[   68.293090][ T6219] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.299229][ T6219] bridge_slave_1: left allmulticast mode
[   68.301162][ T6219] bridge_slave_1: left promiscuous mode
[   68.304564][ T6219] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.312807][ T6219] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   68.488805][ T6231] netem: change failed
[   68.577178][ T6241] netlink: 'syz.2.136': attribute type 1 has an invalid length.
[   69.255610][ T5883] Bluetooth: hci2: command tx timeout
[   69.257515][ T5883] Bluetooth: hci0: command 0x040f tx timeout
[   69.259807][ T5883] Bluetooth: hci1: command tx timeout
[   69.442252][ T6270] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   69.645337][ T6281] __nla_validate_parse: 3 callbacks suppressed
[   69.645351][ T6281] netlink: 32 bytes leftover after parsing attributes in process `syz.1.156'.
[   69.814168][ T6290] xt_CT: No such helper "syz1"
[   69.817186][ T6290] Zero length message leads to an empty skb
[   69.890101][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'.
[   70.177642][ T6328] netlink: 'syz.1.178': attribute type 1 has an invalid length.
[   70.181152][ T6328] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.386987][ T6346] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   70.521599][ T6357] ieee802154 phy1 wpan1: encryption failed: -90
[   70.776017][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'.
[   70.961174][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'.
[   71.008821][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.034321][ T6396] netlink: 'syz.1.211': attribute type 1 has an invalid length.
[   71.101141][ T6401] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   71.139636][ T6401] tipc: Resetting bearer <eth:syzkaller0>
[   71.284543][ T6399] tipc: Resetting bearer <eth:syzkaller0>
[   71.323868][ T5887] Bluetooth: hci2: command tx timeout
[   71.325750][ T5887] Bluetooth: hci0: command 0x040f tx timeout
[   71.617964][ T6428] netlink: 'syz.1.227': attribute type 1 has an invalid length.
[   71.620871][ T6428] netlink: 'syz.1.227': attribute type 10 has an invalid length.
[   71.624329][ T6428] netlink: 236 bytes leftover after parsing attributes in process `syz.1.227'.
[   72.145670][ T5855] tipc: Node number set to 1593835521
[   72.364770][ T6399] tipc: Disabling bearer <eth:syzkaller0>
[   72.401908][ T6449] bond1: entered promiscuous mode
[   72.413184][ T6449] bond1: entered allmulticast mode
[   72.418214][ T6449] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.576371][ T6460] syzkaller1: entered promiscuous mode
[   72.578783][ T6460] syzkaller1: entered allmulticast mode
[   72.727547][ T6468] xt_CT: No such helper "syz0"
[   73.357143][ T6512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.266'.
[   73.496674][ T6525] trusted_key: syz.2.273 sent an empty control message without MSG_MORE.
[   73.540476][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'.
[   74.006270][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'.
[   74.009971][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'.
[   74.014552][ T6570] netlink: 27 bytes leftover after parsing attributes in process `syz.2.296'.
[   74.043350][ T6575] netlink: 'syz.0.297': attribute type 1 has an invalid length.
[   74.046543][ T6575] netlink: 'syz.0.297': attribute type 1 has an invalid length.
[   75.546020][ T6634] __nla_validate_parse: 1 callbacks suppressed
[   75.546032][ T6634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.322'.
[   75.556158][ T6634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.322'.
[   76.908408][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'.
[   76.966469][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'.
[   76.985642][ T6700] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   76.999956][ T6700] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   77.088703][ T6710] netlink: 16 bytes leftover after parsing attributes in process `syz.2.356'.
[   77.092722][ T6710] netlink: 16 bytes leftover after parsing attributes in process `syz.2.356'.
[   77.156401][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'.
[   77.169665][ T6714] netlink: 16 bytes leftover after parsing attributes in process `syz.2.358'.
[   77.195964][ T6716] netlink: 44 bytes leftover after parsing attributes in process `syz.1.359'.
[   77.275277][ T6722] wg2: entered promiscuous mode
[   77.285176][ T6722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.362'.
[   77.376575][ T6728] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   77.386506][ T6729] netlink: 'syz.1.364': attribute type 5 has an invalid length.
[   77.606564][ T6751] netlink: 'syz.1.375': attribute type 10 has an invalid length.
[   77.631825][ T6751] team0: Port device dummy0 added
[   77.639375][ T6751] netlink: 'syz.1.375': attribute type 10 has an invalid length.
[   77.643710][ T6751] 
[   77.644790][ T6751] ======================================================
[   77.647773][ T6751] WARNING: possible circular locking dependency detected
[   77.650751][ T6751] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   77.655171][ T6751] ------------------------------------------------------
[   77.657982][ T6751] syz.1.375/6751 is trying to acquire lock:
[   77.660412][ T6751] ffff8880279b4e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_device_event+0x182/0xa20
[   77.664561][ T6751] 
[   77.664561][ T6751] but task is already holding lock:
[   77.667618][ T6751] ffff888035d4ad30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   77.671607][ T6751] 
[   77.671607][ T6751] which lock already depends on the new lock.
[   77.671607][ T6751] 
[   77.676001][ T6751] 
[   77.676001][ T6751] the existing dependency chain (in reverse order) is:
[   77.679975][ T6751] 
[   77.679975][ T6751] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[   77.683625][ T6751]        lock_acquire+0x120/0x360
[   77.685753][ T6751]        __mutex_lock+0x182/0xe80
[   77.687809][ T6751]        dev_set_mtu+0x10e/0x260
[   77.689847][ T6751]        team_add_slave+0x8b8/0x2840
[   77.691989][ T6751]        do_set_master+0x533/0x6d0
[   77.694051][ T6751]        do_setlink+0xcf0/0x41c0
[   77.696180][ T6751]        rtnl_newlink+0x160b/0x1c70
[   77.698401][ T6751]        rtnetlink_rcv_msg+0x7cf/0xb70
[   77.700831][ T6751]        netlink_rcv_skb+0x208/0x470
[   77.703207][ T6751]        netlink_unicast+0x75b/0x8d0
[   77.705599][ T6751]        netlink_sendmsg+0x805/0xb30
[   77.707952][ T6751]        __sock_sendmsg+0x21c/0x270
[   77.710166][ T6751]        ____sys_sendmsg+0x505/0x830
[   77.712425][ T6751]        ___sys_sendmsg+0x21f/0x2a0
[   77.714610][ T6751]        __x64_sys_sendmsg+0x19b/0x260
[   77.716819][ T6751]        do_syscall_64+0xfa/0x3b0
[   77.718940][ T6751]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.721697][ T6751] 
[   77.721697][ T6751] -> #0 (team->team_lock_key#3){+.+.}-{4:4}:
[   77.725344][ T6751]        validate_chain+0xb9b/0x2140
[   77.727639][ T6751]        __lock_acquire+0xab9/0xd20
[   77.729889][ T6751]        lock_acquire+0x120/0x360
[   77.732025][ T6751]        __mutex_lock+0x182/0xe80
[   77.734173][ T6751]        team_device_event+0x182/0xa20
[   77.736499][ T6751]        notifier_call_chain+0x1b6/0x3e0
[   77.738868][ T6751]        __dev_notify_flags+0x18d/0x2e0
[   77.741165][ T6751]        netif_change_flags+0xe8/0x1a0
[   77.743491][ T6751]        do_setlink+0xc55/0x41c0
[   77.745598][ T6751]        rtnl_newlink+0x160b/0x1c70
[   77.747739][ T6751]        rtnetlink_rcv_msg+0x7cf/0xb70
[   77.750205][ T6751]        netlink_rcv_skb+0x208/0x470
[   77.752547][ T6751]        netlink_unicast+0x75b/0x8d0
[   77.754807][ T6751]        netlink_sendmsg+0x805/0xb30
[   77.757075][ T6751]        __sock_sendmsg+0x21c/0x270
[   77.759295][ T6751]        ____sys_sendmsg+0x505/0x830
[   77.761538][ T6751]        ___sys_sendmsg+0x21f/0x2a0
[   77.763736][ T6751]        __x64_sys_sendmsg+0x19b/0x260
[   77.766037][ T6751]        do_syscall_64+0xfa/0x3b0
[   77.768233][ T6751]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.770907][ T6751] 
[   77.770907][ T6751] other info that might help us debug this:
[   77.770907][ T6751] 
[   77.775267][ T6751]  Possible unsafe locking scenario:
[   77.775267][ T6751] 
[   77.778411][ T6751]        CPU0                    CPU1
[   77.780639][ T6751]        ----                    ----
[   77.782899][ T6751]   lock(&dev_instance_lock_key#3);
[   77.785165][ T6751]                                lock(team->team_lock_key#3);
[   77.788245][ T6751]                                lock(&dev_instance_lock_key#3);
[   77.791441][ T6751]   lock(team->team_lock_key#3);
[   77.793419][ T6751] 
[   77.793419][ T6751]  *** DEADLOCK ***
[   77.793419][ T6751] 
[   77.796999][ T6751] 2 locks held by syz.1.375/6751:
[   77.799411][ T6751]  #0: ffffffff8f51c948 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[   77.803321][ T6751]  #1: ffff888035d4ad30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   77.807393][ T6751] 
[   77.807393][ T6751] stack backtrace:
[   77.809819][ T6751] CPU: 0 UID: 0 PID: 6751 Comm: syz.1.375 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   77.809834][ T6751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   77.809844][ T6751] Call Trace:
[   77.809852][ T6751]  <TASK>
[   77.809858][ T6751]  dump_stack_lvl+0x189/0x250
[   77.809878][ T6751]  ? __pfx_dump_stack_lvl+0x10/0x10
[   77.809891][ T6751]  ? __pfx__printk+0x10/0x10
[   77.809909][ T6751]  ? print_lock_name+0xde/0x100
[   77.809925][ T6751]  print_circular_bug+0x2ee/0x310
[   77.809942][ T6751]  check_noncircular+0x134/0x160
[   77.809959][ T6751]  validate_chain+0xb9b/0x2140
[   77.809976][ T6751]  ? __lock_acquire+0xab9/0xd20
[   77.809991][ T6751]  __lock_acquire+0xab9/0xd20
[   77.810003][ T6751]  ? team_device_event+0x182/0xa20
[   77.810019][ T6751]  lock_acquire+0x120/0x360
[   77.810029][ T6751]  ? team_device_event+0x182/0xa20
[   77.810046][ T6751]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   77.810063][ T6751]  __mutex_lock+0x182/0xe80
[   77.810075][ T6751]  ? team_device_event+0x182/0xa20
[   77.810091][ T6751]  ? __try_to_del_timer_sync+0x34a/0x3a0
[   77.810110][ T6751]  ? team_device_event+0x182/0xa20
[   77.810125][ T6751]  ? __pfx___mutex_lock+0x10/0x10
[   77.810160][ T6751]  ? __timer_delete_sync+0x218/0x2d0
[   77.810182][ T6751]  team_device_event+0x182/0xa20
[   77.810198][ T6751]  notifier_call_chain+0x1b6/0x3e0
[   77.810217][ T6751]  __dev_notify_flags+0x18d/0x2e0
[   77.810234][ T6751]  ? __pfx___dev_notify_flags+0x10/0x10
[   77.810248][ T6751]  ? __dev_change_flags+0x4cc/0x6d0
[   77.810262][ T6751]  ? __pfx___dev_change_flags+0x10/0x10
[   77.810277][ T6751]  ? __pfx_console_unlock+0x10/0x10
[   77.810291][ T6751]  ? irq_work_queue+0xc3/0x140
[   77.810303][ T6751]  netif_change_flags+0xe8/0x1a0
[   77.810324][ T6751]  do_setlink+0xc55/0x41c0
[   77.810342][ T6751]  ? __pfx_do_setlink+0x10/0x10
[   77.810356][ T6751]  ? _printk+0xcf/0x120
[   77.810369][ T6751]  ? __pfx____ratelimit+0x10/0x10
[   77.810389][ T6751]  ? __lock_acquire+0xab9/0xd20
[   77.810401][ T6751]  ? __mutex_trylock_common+0x153/0x260
[   77.810419][ T6751]  ? __pfx___mutex_trylock_common+0x10/0x10
[   77.810432][ T6751]  ? rcu_is_watching+0x15/0xb0
[   77.810446][ T6751]  ? trace_contention_end+0x39/0x120
[   77.810459][ T6751]  ? __mutex_lock+0x330/0xe80
[   77.810471][ T6751]  ? __pfx_aa_get_newest_label+0x10/0x10
[   77.810488][ T6751]  ? rtnl_newlink+0x8db/0x1c70
[   77.810499][ T6751]  ? rcu_is_watching+0x15/0xb0
[   77.810512][ T6751]  ? __pfx___mutex_lock+0x10/0x10
[   77.810524][ T6751]  ? ns_capable+0x8a/0xf0
[   77.810539][ T6751]  ? rtnl_link_get_net_capable+0x16a/0x350
[   77.810551][ T6751]  rtnl_newlink+0x160b/0x1c70
[   77.810562][ T6751]  ? netlink_sendmsg+0x805/0xb30
[   77.810576][ T6751]  ? __pfx_rtnl_newlink+0x10/0x10
[   77.810591][ T6751]  ? kasan_quarantine_put+0xdd/0x220
[   77.810603][ T6751]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.810615][ T6751]  ? nlmon_xmit+0xb0/0x100
[   77.810628][ T6751]  ? kmem_cache_free+0x18f/0x400
[   77.810644][ T6751]  ? __local_bh_enable_ip+0x12d/0x1c0
[   77.810658][ T6751]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.810668][ T6751]  ? __local_bh_enable_ip+0x12d/0x1c0
[   77.810680][ T6751]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   77.810694][ T6751]  ? __dev_queue_xmit+0x27e/0x3a70
[   77.810713][ T6751]  ? __lock_acquire+0xab9/0xd20
[   77.810727][ T6751]  ? __pfx_rtnl_newlink+0x10/0x10
[   77.810737][ T6751]  rtnetlink_rcv_msg+0x7cf/0xb70
[   77.810752][ T6751]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   77.810763][ T6751]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   77.810773][ T6751]  ? ref_tracker_free+0x63a/0x7d0
[   77.810783][ T6751]  ? __copy_skb_header+0xa7/0x550
[   77.810799][ T6751]  ? __pfx_ref_tracker_free+0x10/0x10
[   77.810809][ T6751]  ? __skb_clone+0x63/0x7a0
[   77.810825][ T6751]  netlink_rcv_skb+0x208/0x470
[   77.810840][ T6751]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   77.810852][ T6751]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   77.810869][ T6751]  ? netlink_deliver_tap+0x2e/0x1b0
[   77.810882][ T6751]  ? netlink_deliver_tap+0x2e/0x1b0
[   77.810894][ T6751]  netlink_unicast+0x75b/0x8d0
[   77.810908][ T6751]  netlink_sendmsg+0x805/0xb30
[   77.810924][ T6751]  ? __pfx_netlink_sendmsg+0x10/0x10
[   77.810939][ T6751]  ? aa_sock_msg_perm+0x94/0x160
[   77.810957][ T6751]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   77.810969][ T6751]  ? __pfx_netlink_sendmsg+0x10/0x10
[   77.810983][ T6751]  __sock_sendmsg+0x21c/0x270
[   77.810995][ T6751]  ____sys_sendmsg+0x505/0x830
[   77.811013][ T6751]  ? __pfx_____sys_sendmsg+0x10/0x10
[   77.811030][ T6751]  ? import_iovec+0x74/0xa0
[   77.811045][ T6751]  ___sys_sendmsg+0x21f/0x2a0
[   77.811060][ T6751]  ? __pfx____sys_sendmsg+0x10/0x10
[   77.811082][ T6751]  ? __fget_files+0x2a/0x420
[   77.811098][ T6751]  ? __fget_files+0x3a0/0x420
[   77.811116][ T6751]  __x64_sys_sendmsg+0x19b/0x260
[   77.811132][ T6751]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   77.811183][ T6751]  ? rcu_is_watching+0x15/0xb0
[   77.811199][ T6751]  ? do_syscall_64+0xbe/0x3b0
[   77.811213][ T6751]  do_syscall_64+0xfa/0x3b0
[   77.811224][ T6751]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.811234][ T6751]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.811245][ T6751]  ? exc_page_fault+0x9f/0xf0
[   77.811263][ T6751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.811276][ T6751] RIP: 0033:0x7f1f26b8e929
[   77.811291][ T6751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.811302][ T6751] RSP: 002b:00007f1f279d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   77.811325][ T6751] RAX: ffffffffffffffda RBX: 00007f1f26db5fa0 RCX: 00007f1f26b8e929
[   77.811333][ T6751] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[   77.811340][ T6751] RBP: 00007f1f26c10b39 R08: 0000000000000000 R09: 0000000000000000
[   77.811346][ T6751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   77.811354][ T6751] R13: 0000000000000000 R14: 00007f1f26db5fa0 R15: 00007ffe07de6a48
[   77.811366][ T6751]  </TASK>
[   78.067727][ T6751] team0: Port device dummy0 removed
[   78.072224][ T6751] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   81.255501][    T9] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
22:24:03  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000002d18 RDI=0000000000002d19 RBP=00000000000003f8 RSP=ffffc90002eddf10
R8 =ffff888106868237 R9 =1ffff11020d0d046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78e3 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1f279d16c0 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c356e68 CR3=00000000281b2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f1f26d85478 00007f1f26d85450 XMM03=00007f1f26d85488 00007f1f26d85480
XMM04=00007f1f278ed100 00007f1f26d85440 XMM05=00007f1f26d85458 00007f1f26d854a0
XMM06=00007f1f26d85498 00007f1f26d85490 XMM07=00007f1f26d85488 00007f1f26d85480
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f1f26c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4e920 RBX=ffff88813663b1c0 RCX=ffff88802133b980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90002adf4c0 RSP=ffffc90002adf360
R8 =ffffffff8fa1def7 R9 =1ffffffff1f43bde R10=dffffc0000000000 R11=fffffbfff1f43bdf
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4e909 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3381bff8 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81ed35c9 ffffffff8186ca2a
XMM02=ffffffff81ed5749 ffffffff81ed35c9 XMM03=ffffffff8186ca2a ffffffff8186c9b6
XMM04=00007ff8c82ed100 00007ff8c7785440 XMM05=00007ff8c7785458 00007ff8c77854a0
XMM06=00007ff8c7785498 00007ff8c7785490 XMM07=00007ff8c7785488 00007ff8c7785480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007ff8c7611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
