last executing test programs:

1.533370944s ago: executing program 0 (id=138):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x7d}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x7}, 0x40)

1.444683617s ago: executing program 0 (id=142):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4040005, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25)

511.830967ms ago: executing program 2 (id=162):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001780)={0x28, 0xd, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x28}}, 0x0)

511.635187ms ago: executing program 0 (id=163):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="3103000000000000000008"], 0x1c}}, 0x0)

511.392109ms ago: executing program 1 (id=164):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
sendmmsg$alg(r3, 0x0, 0x0, 0x40800)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0)

507.670207ms ago: executing program 2 (id=165):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x3}]}}}]}, 0x44}}, 0x0)

412.097384ms ago: executing program 0 (id=166):
r0 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041)

343.173944ms ago: executing program 0 (id=167):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
unshare(0x62040200)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

342.937774ms ago: executing program 1 (id=168):
r0 = socket$isdn(0x22, 0x2, 0x22)
close(r0)

341.301033ms ago: executing program 2 (id=169):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@gettaction={0x24, 0x32, 0x6dd711a25f4cb68b, 0x70bd2d, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040094}, 0x40800)

262.654329ms ago: executing program 2 (id=170):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'vlan0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_VERSION={0x5, 0x6, 0x10}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4)

262.248506ms ago: executing program 1 (id=171):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000206010000000000000000000100000214000780080012400000000505001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0)

262.05548ms ago: executing program 2 (id=172):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f0000003500)=[{&(0x7f00000035c0)='42', 0xffe}, {&(0x7f0000000080)='C&', 0x2}], 0x2)

215.287834ms ago: executing program 1 (id=173):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

161.70312ms ago: executing program 2 (id=174):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10)
close(r0)

101.435058ms ago: executing program 1 (id=175):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c00)={0x11, 0xf, &(0x7f0000002cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb5}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f0000001b40)={0x0, 0x1}, 0x8}, 0x94)

101.126155ms ago: executing program 1 (id=176):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockname(r1, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000100010012000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000044000000090a01"], 0x8c}}, 0x0)
listen(r0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x8}, 0x1c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
bind$packet(r9, &(0x7f0000000080)={0x11, 0x4, r10, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14)
sendmsg$nl_route_sched(r11, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc0, r8, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x101}, @ETHTOOL_A_CHANNELS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0xc090)
shutdown(r0, 0x0)

0s ago: executing program 0 (id=177):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x58, 0x800, 0xb, 0x9, 0x8000, 0x11})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:12228' (ED25519) to the list of known hosts.
syzkaller login: [   49.022501][ T5765] cgroup: Unknown subsys name 'net'
[   49.215558][ T5765] cgroup: Unknown subsys name 'cpuset'
[   49.222758][ T5765] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.122389][ T5765] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.016419][ T5222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.020759][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.031612][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.052739][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.056401][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.065083][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.071439][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.076489][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.081986][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.086533][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.093591][ T5222] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.100311][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.104265][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.108131][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.111845][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.396940][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   55.464473][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   55.535695][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   55.548766][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.552705][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.555690][ T5827] bridge_slave_0: entered allmulticast mode
[   55.558479][ T5827] bridge_slave_0: entered promiscuous mode
[   55.592494][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.595563][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.598548][ T5827] bridge_slave_1: entered allmulticast mode
[   55.602932][ T5827] bridge_slave_1: entered promiscuous mode
[   55.615447][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.618075][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.620591][ T5835] bridge_slave_0: entered allmulticast mode
[   55.625141][ T5835] bridge_slave_0: entered promiscuous mode
[   55.658957][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.662632][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.665559][ T5835] bridge_slave_1: entered allmulticast mode
[   55.669594][ T5835] bridge_slave_1: entered promiscuous mode
[   55.676880][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.722701][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.726713][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.729977][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.733049][ T5831] bridge_slave_0: entered allmulticast mode
[   55.736749][ T5831] bridge_slave_0: entered promiscuous mode
[   55.742745][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.745809][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.748908][ T5831] bridge_slave_1: entered allmulticast mode
[   55.752994][ T5831] bridge_slave_1: entered promiscuous mode
[   55.828609][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.835620][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.855820][ T5827] team0: Port device team_slave_0 added
[   55.860798][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.878936][ T5827] team0: Port device team_slave_1 added
[   55.896744][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.904234][ T5835] team0: Port device team_slave_0 added
[   55.948403][ T5835] team0: Port device team_slave_1 added
[   55.952027][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.955042][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.965813][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.975151][ T5831] team0: Port device team_slave_0 added
[   55.989382][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.992927][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.003802][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.010149][ T5831] team0: Port device team_slave_1 added
[   56.049831][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.054657][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.064551][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.068614][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.071167][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.080923][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.095696][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.098028][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.107091][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.115241][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.117821][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.128923][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.144916][ T5827] hsr_slave_0: entered promiscuous mode
[   56.148026][ T5827] hsr_slave_1: entered promiscuous mode
[   56.195811][ T5831] hsr_slave_0: entered promiscuous mode
[   56.198971][ T5831] hsr_slave_1: entered promiscuous mode
[   56.203294][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.206434][ T5831] Cannot create hsr debugfs directory
[   56.260462][ T5835] hsr_slave_0: entered promiscuous mode
[   56.262976][ T5835] hsr_slave_1: entered promiscuous mode
[   56.265160][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.267676][ T5835] Cannot create hsr debugfs directory
[   56.447967][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.457009][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.474094][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.484805][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.516015][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.520545][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.538285][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.549937][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.589134][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.605288][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.617271][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.630072][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.691141][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.723521][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   56.739452][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.744629][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.747412][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.754004][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.756531][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.768728][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.804242][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   56.816693][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.819822][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.832572][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.835217][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.845533][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   56.864764][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.867413][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.878514][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.880903][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.944752][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.038608][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.098020][ T5827] veth0_vlan: entered promiscuous mode
[   57.110619][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.129720][ T5827] veth1_vlan: entered promiscuous mode
[   57.133334][   T55] Bluetooth: hci2: command tx timeout
[   57.133367][ T5832] Bluetooth: hci0: command tx timeout
[   57.133627][ T5832] Bluetooth: hci1: command tx timeout
[   57.170654][ T5831] veth0_vlan: entered promiscuous mode
[   57.177191][ T5831] veth1_vlan: entered promiscuous mode
[   57.184957][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.198686][ T5827] veth0_macvtap: entered promiscuous mode
[   57.206219][ T5827] veth1_macvtap: entered promiscuous mode
[   57.229377][ T5831] veth0_macvtap: entered promiscuous mode
[   57.240520][ T5831] veth1_macvtap: entered promiscuous mode
[   57.248609][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.268149][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.277527][ T5835] veth0_vlan: entered promiscuous mode
[   57.282369][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.285989][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.289435][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.293779][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.305651][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.324278][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.339465][ T5835] veth1_vlan: entered promiscuous mode
[   57.345494][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.348219][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.350986][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.371437][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.476846][ T5835] veth0_macvtap: entered promiscuous mode
[   57.495001][ T5835] veth1_macvtap: entered promiscuous mode
[   57.517932][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.529676][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.539787][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.548290][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.571133][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.574975][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.577905][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.582494][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.588319][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.592817][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.620610][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.625037][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.642448][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.645194][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.693132][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.695768][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.723004][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.733652][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.741303][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.960669][ T5902] geneve2: entered promiscuous mode
[   57.964589][ T5902] geneve2: entered allmulticast mode
[   57.999260][ T5908] Cannot find add_set index 2 as target
[   58.057362][ T5910] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   58.209727][ T5918] syz.1.12 uses obsolete (PF_INET,SOCK_PACKET)
[   58.854055][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24'.
[   58.977530][ T5949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.27'.
[   59.157958][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'.
[   59.164010][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.168035][ T5959] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.177346][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.181695][ T5959] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.213863][ T5222] Bluetooth: hci0: command tx timeout
[   59.213908][   T55] Bluetooth: hci1: command tx timeout
[   59.216351][ T5832] Bluetooth: hci2: command tx timeout
[   59.435806][ T5969] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[   59.618598][ T5981] netlink: 'syz.2.41': attribute type 4 has an invalid length.
[   59.630238][ T5981] netlink: 'syz.2.41': attribute type 4 has an invalid length.
[   60.066471][ T6003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.52'.
[   60.075837][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52'.
[   60.079044][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.102359][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.733204][ T6015] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   61.197709][ T6032] netlink: 64 bytes leftover after parsing attributes in process `syz.0.63'.
[   61.291821][ T5832] Bluetooth: hci1: command tx timeout
[   61.292567][   T55] Bluetooth: hci2: command tx timeout
[   61.294259][ T5222] Bluetooth: hci0: command tx timeout
[   61.716142][ T6052] netlink: 'syz.1.73': attribute type 1 has an invalid length.
[   61.735465][ T6052] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.763574][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.977114][ T6072] netlink: 'syz.0.83': attribute type 9 has an invalid length.
[   61.980400][ T6072] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.83'.
[   62.009879][ T6073] netlink: 96 bytes leftover after parsing attributes in process `syz.2.82'.
[   62.104333][ T6083] warning: `syz.1.88' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.160778][ T6087] netlink: 20 bytes leftover after parsing attributes in process `syz.0.90'.
[   62.490392][ T6113] netlink: 'syz.0.105': attribute type 17 has an invalid length.
[   62.495300][ T6113] netlink: 2 bytes leftover after parsing attributes in process `syz.0.105'.
[   62.499199][ T6113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   62.741165][ T6135] bridge1: entered allmulticast mode
[   62.838317][ T6143] tipc: Started in network mode
[   62.840041][ T6143] tipc: Node identity 3a000000000040120000006e70000001, cluster identity 4711
[   62.844576][ T6143] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   62.932925][ T6151] delete_channel: no stack
[   62.940605][ T6152] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.100979][ T6158] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.118333][ T6158] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   63.181177][ T6165] Driver unsupported XDP return value 0 on prog  (id 27) dev N/A, expect packet loss!
[   63.372953][ T5832] Bluetooth: hci2: command tx timeout
[   63.381841][ T5832] Bluetooth: hci1: command tx timeout
[   63.383584][ T5222] Bluetooth: hci0: command tx timeout
[   63.909461][ T6185] gtp0: entered promiscuous mode
[   63.913709][ T6185] gtp0: entered allmulticast mode
[   64.098990][ T6195] Bluetooth: MGMT ver 1.23
[   64.165575][ T6204] Zero length message leads to an empty skb
[   64.207483][ T6204] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.238700][ T6195] __nla_validate_parse: 2 callbacks suppressed
[   64.238714][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.140'.
[   64.300613][ T6204] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.376672][ T6204] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.436270][ T6204] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.523490][ T6204] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.536154][ T6204] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.551751][ T6204] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.560595][ T6204] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.855315][ T6236] netlink: 'syz.1.158': attribute type 3 has an invalid length.
[   64.866687][ T6236] netlink: 'syz.1.158': attribute type 3 has an invalid length.
[   65.204603][ T6261] delete_channel: no stack
[   65.356041][ T6271] netlink: 'syz.1.173': attribute type 11 has an invalid length.
[   65.359347][ T6271] netlink: 224 bytes leftover after parsing attributes in process `syz.1.173'.
[   65.452587][ T5222] Bluetooth: hci2: command tx timeout
[   65.491337][ T6278] netlink: 48 bytes leftover after parsing attributes in process `syz.1.176'.
[   65.498736][ T6278] netlink: 'syz.1.176': attribute type 10 has an invalid length.
[   65.516608][ T6278] team0: Port device dummy0 added
[   65.537068][ T6278] netlink: 'syz.1.176': attribute type 10 has an invalid length.
[   65.540134][ T6278] 
[   65.540998][ T6278] ======================================================
[   65.543360][ T6278] WARNING: possible circular locking dependency detected
[   65.545614][ T6278] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   65.548936][ T6278] ------------------------------------------------------
[   65.551288][ T6278] syz.1.176/6278 is trying to acquire lock:
[   65.553297][ T6278] ffff888022404e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_device_event+0x182/0xa20
[   65.556482][ T6278] 
[   65.556482][ T6278] but task is already holding lock:
[   65.558812][ T6278] ffff888020540d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   65.561992][ T6278] 
[   65.561992][ T6278] which lock already depends on the new lock.
[   65.561992][ T6278] 
[   65.565195][ T6278] 
[   65.565195][ T6278] the existing dependency chain (in reverse order) is:
[   65.567991][ T6278] 
[   65.567991][ T6278] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[   65.570722][ T6278]        lock_acquire+0x120/0x360
[   65.572382][ T6278]        __mutex_lock+0x182/0xe80
[   65.574075][ T6278]        dev_set_mtu+0x10e/0x260
[   65.575714][ T6278]        team_add_slave+0x8b8/0x2840
[   65.577459][ T6278]        do_set_master+0x533/0x6d0
[   65.579145][ T6278]        do_setlink+0xcf0/0x41c0
[   65.580779][ T6278]        rtnl_newlink+0x160b/0x1c70
[   65.582517][ T6278]        rtnetlink_rcv_msg+0x7cf/0xb70
[   65.584429][ T6278]        netlink_rcv_skb+0x208/0x470
[   65.586430][ T6278]        netlink_unicast+0x75b/0x8d0
[   65.588167][ T6278]        netlink_sendmsg+0x805/0xb30
[   65.589970][ T6278]        __sock_sendmsg+0x21c/0x270
[   65.591713][ T6278]        ____sys_sendmsg+0x505/0x830
[   65.593537][ T6278]        ___sys_sendmsg+0x21f/0x2a0
[   65.595320][ T6278]        __x64_sys_sendmsg+0x19b/0x260
[   65.597120][ T6278]        do_syscall_64+0xfa/0x3b0
[   65.598849][ T6278]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.601098][ T6278] 
[   65.601098][ T6278] -> #0 (team->team_lock_key#3){+.+.}-{4:4}:
[   65.603913][ T6278]        validate_chain+0xb9b/0x2140
[   65.605812][ T6278]        __lock_acquire+0xab9/0xd20
[   65.607587][ T6278]        lock_acquire+0x120/0x360
[   65.609688][ T6278]        __mutex_lock+0x182/0xe80
[   65.611735][ T6278]        team_device_event+0x182/0xa20
[   65.613987][ T6278]        notifier_call_chain+0x1b6/0x3e0
[   65.616352][ T6278]        __dev_notify_flags+0x18d/0x2e0
[   65.618261][ T6278]        netif_change_flags+0xe8/0x1a0
[   65.620120][ T6278]        do_setlink+0xc55/0x41c0
[   65.621809][ T6278]        rtnl_newlink+0x160b/0x1c70
[   65.623601][ T6278]        rtnetlink_rcv_msg+0x7cf/0xb70
[   65.625457][ T6278]        netlink_rcv_skb+0x208/0x470
[   65.627262][ T6278]        netlink_unicast+0x75b/0x8d0
[   65.628990][ T6278]        netlink_sendmsg+0x805/0xb30
[   65.630755][ T6278]        __sock_sendmsg+0x21c/0x270
[   65.632435][ T6278]        ____sys_sendmsg+0x505/0x830
[   65.634154][ T6278]        ___sys_sendmsg+0x21f/0x2a0
[   65.635881][ T6278]        __x64_sys_sendmsg+0x19b/0x260
[   65.637736][ T6278]        do_syscall_64+0xfa/0x3b0
[   65.639432][ T6278]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.641522][ T6278] 
[   65.641522][ T6278] other info that might help us debug this:
[   65.641522][ T6278] 
[   65.644829][ T6278]  Possible unsafe locking scenario:
[   65.644829][ T6278] 
[   65.647265][ T6278]        CPU0                    CPU1
[   65.649003][ T6278]        ----                    ----
[   65.650757][ T6278]   lock(&dev_instance_lock_key#3);
[   65.652467][ T6278]                                lock(team->team_lock_key#3);
[   65.654886][ T6278]                                lock(&dev_instance_lock_key#3);
[   65.657400][ T6278]   lock(team->team_lock_key#3);
[   65.659006][ T6278] 
[   65.659006][ T6278]  *** DEADLOCK ***
[   65.659006][ T6278] 
[   65.661655][ T6278] 2 locks held by syz.1.176/6278:
[   65.663310][ T6278]  #0: ffffffff8f51c948 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[   65.666189][ T6278]  #1: ffff888020540d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   65.669488][ T6278] 
[   65.669488][ T6278] stack backtrace:
[   65.671435][ T6278] CPU: 0 UID: 0 PID: 6278 Comm: syz.1.176 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   65.671445][ T6278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   65.671452][ T6278] Call Trace:
[   65.671457][ T6278]  <TASK>
[   65.671461][ T6278]  dump_stack_lvl+0x189/0x250
[   65.671472][ T6278]  ? __pfx_dump_stack_lvl+0x10/0x10
[   65.671481][ T6278]  ? __pfx__printk+0x10/0x10
[   65.671492][ T6278]  ? print_lock_name+0xde/0x100
[   65.671502][ T6278]  print_circular_bug+0x2ee/0x310
[   65.671513][ T6278]  check_noncircular+0x134/0x160
[   65.671524][ T6278]  validate_chain+0xb9b/0x2140
[   65.671535][ T6278]  ? __lock_acquire+0xab9/0xd20
[   65.671544][ T6278]  __lock_acquire+0xab9/0xd20
[   65.671552][ T6278]  ? team_device_event+0x182/0xa20
[   65.671562][ T6278]  lock_acquire+0x120/0x360
[   65.671569][ T6278]  ? team_device_event+0x182/0xa20
[   65.671579][ T6278]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   65.671591][ T6278]  __mutex_lock+0x182/0xe80
[   65.671598][ T6278]  ? team_device_event+0x182/0xa20
[   65.671611][ T6278]  ? __try_to_del_timer_sync+0x34a/0x3a0
[   65.671621][ T6278]  ? team_device_event+0x182/0xa20
[   65.671630][ T6278]  ? __pfx___mutex_lock+0x10/0x10
[   65.671636][ T6278]  ? __timer_delete_sync+0x218/0x2d0
[   65.671649][ T6278]  team_device_event+0x182/0xa20
[   65.671660][ T6278]  notifier_call_chain+0x1b6/0x3e0
[   65.671671][ T6278]  __dev_notify_flags+0x18d/0x2e0
[   65.671682][ T6278]  ? __pfx___dev_notify_flags+0x10/0x10
[   65.671690][ T6278]  ? __dev_change_flags+0x4cc/0x6d0
[   65.671699][ T6278]  ? __pfx___dev_change_flags+0x10/0x10
[   65.671707][ T6278]  ? __pfx_console_unlock+0x10/0x10
[   65.671716][ T6278]  ? irq_work_queue+0xbc/0x140
[   65.671724][ T6278]  netif_change_flags+0xe8/0x1a0
[   65.671734][ T6278]  do_setlink+0xc55/0x41c0
[   65.671745][ T6278]  ? __pfx_do_setlink+0x10/0x10
[   65.671753][ T6278]  ? _printk+0xcf/0x120
[   65.671762][ T6278]  ? __pfx____ratelimit+0x10/0x10
[   65.671774][ T6278]  ? __lock_acquire+0xab9/0xd20
[   65.671782][ T6278]  ? __mutex_trylock_common+0x153/0x260
[   65.671791][ T6278]  ? __pfx___mutex_trylock_common+0x10/0x10
[   65.671800][ T6278]  ? rcu_is_watching+0x15/0xb0
[   65.671808][ T6278]  ? trace_contention_end+0x39/0x120
[   65.671817][ T6278]  ? __mutex_lock+0x330/0xe80
[   65.671824][ T6278]  ? __pfx_aa_get_newest_label+0x10/0x10
[   65.671834][ T6278]  ? rtnl_newlink+0x8db/0x1c70
[   65.671842][ T6278]  ? rcu_is_watching+0x15/0xb0
[   65.671849][ T6278]  ? __pfx___mutex_lock+0x10/0x10
[   65.671857][ T6278]  ? ns_capable+0x8a/0xf0
[   65.671865][ T6278]  ? rtnl_link_get_net_capable+0x16a/0x350
[   65.671874][ T6278]  rtnl_newlink+0x160b/0x1c70
[   65.671881][ T6278]  ? netlink_sendmsg+0x805/0xb30
[   65.671892][ T6278]  ? __pfx_rtnl_newlink+0x10/0x10
[   65.671902][ T6278]  ? kasan_quarantine_put+0xdd/0x220
[   65.671911][ T6278]  ? lockdep_hardirqs_on+0x9c/0x150
[   65.671918][ T6278]  ? nlmon_xmit+0xb0/0x100
[   65.671931][ T6278]  ? kmem_cache_free+0x18f/0x400
[   65.671942][ T6278]  ? __local_bh_enable_ip+0x12d/0x1c0
[   65.671951][ T6278]  ? lockdep_hardirqs_on+0x9c/0x150
[   65.671959][ T6278]  ? __local_bh_enable_ip+0x12d/0x1c0
[   65.671968][ T6278]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   65.671977][ T6278]  ? __dev_queue_xmit+0x27e/0x3a70
[   65.671990][ T6278]  ? __lock_acquire+0xab9/0xd20
[   65.672000][ T6278]  ? __pfx_rtnl_newlink+0x10/0x10
[   65.672007][ T6278]  rtnetlink_rcv_msg+0x7cf/0xb70
[   65.672016][ T6278]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   65.672023][ T6278]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   65.672031][ T6278]  ? ref_tracker_free+0x63a/0x7d0
[   65.672038][ T6278]  ? __copy_skb_header+0xa7/0x550
[   65.672049][ T6278]  ? __pfx_ref_tracker_free+0x10/0x10
[   65.672056][ T6278]  ? __skb_clone+0x63/0x7a0
[   65.672067][ T6278]  netlink_rcv_skb+0x208/0x470
[   65.672077][ T6278]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   65.672084][ T6278]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   65.672094][ T6278]  ? netlink_deliver_tap+0x2e/0x1b0
[   65.672102][ T6278]  ? netlink_deliver_tap+0x2e/0x1b0
[   65.672110][ T6278]  netlink_unicast+0x75b/0x8d0
[   65.672119][ T6278]  netlink_sendmsg+0x805/0xb30
[   65.672129][ T6278]  ? __pfx_netlink_sendmsg+0x10/0x10
[   65.672138][ T6278]  ? aa_sock_msg_perm+0x94/0x160
[   65.672147][ T6278]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   65.672154][ T6278]  ? __pfx_netlink_sendmsg+0x10/0x10
[   65.672162][ T6278]  __sock_sendmsg+0x21c/0x270
[   65.672169][ T6278]  ____sys_sendmsg+0x505/0x830
[   65.672179][ T6278]  ? __pfx_____sys_sendmsg+0x10/0x10
[   65.672189][ T6278]  ? import_iovec+0x74/0xa0
[   65.672198][ T6278]  ___sys_sendmsg+0x21f/0x2a0
[   65.672207][ T6278]  ? __pfx____sys_sendmsg+0x10/0x10
[   65.672256][ T6278]  ? __fget_files+0x2a/0x420
[   65.672267][ T6278]  ? __fget_files+0x3a0/0x420
[   65.672279][ T6278]  __x64_sys_sendmsg+0x19b/0x260
[   65.672290][ T6278]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   65.672302][ T6278]  ? rcu_is_watching+0x15/0xb0
[   65.672313][ T6278]  ? do_syscall_64+0xbe/0x3b0
[   65.672321][ T6278]  do_syscall_64+0xfa/0x3b0
[   65.672328][ T6278]  ? lockdep_hardirqs_on+0x9c/0x150
[   65.672334][ T6278]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.672341][ T6278]  ? exc_page_fault+0x9f/0xf0
[   65.672353][ T6278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.672361][ T6278] RIP: 0033:0x7f1fb358e929
[   65.672369][ T6278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   65.672375][ T6278] RSP: 002b:00007f1fb4315038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   65.672383][ T6278] RAX: ffffffffffffffda RBX: 00007f1fb37b5fa0 RCX: 00007f1fb358e929
[   65.672390][ T6278] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000008
[   65.672395][ T6278] RBP: 00007f1fb3610b39 R08: 0000000000000000 R09: 0000000000000000
[   65.672399][ T6278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   65.672404][ T6278] R13: 0000000000000000 R14: 00007f1fb37b5fa0 R15: 00007ffd3d2a47c8
[   65.672413][ T6278]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   65.932954][ T6278] team0: Port device dummy0 removed
[   65.937800][ T6278] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   66.326793][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.375460][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.453579][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.494340][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.559378][   T13] bridge_slave_1: left allmulticast mode
[   66.561558][   T13] bridge_slave_1: left promiscuous mode
[   66.563684][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.566956][   T13] bridge_slave_0: left allmulticast mode
[   66.568868][   T13] bridge_slave_0: left promiscuous mode
[   66.570976][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.755352][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   66.759150][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   66.763412][   T13] bond0 (unregistering): Released all slaves
[   66.957549][   T13] hsr_slave_0: left promiscuous mode
[   66.959670][   T13] hsr_slave_1: left promiscuous mode
[   66.962307][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.964739][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.969324][   T13] veth1_macvtap: left promiscuous mode
[   66.971895][   T13] veth0_macvtap: left promiscuous mode
[   66.973815][   T13] veth1_vlan: left promiscuous mode
[   66.975627][   T13] veth0_vlan: left promiscuous mode
[   67.091530][   T13] team0 (unregistering): Port device team_slave_1 removed
[   67.100595][   T13] team0 (unregistering): Port device team_slave_0 removed
[   69.104820][   T13] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.163282][   T13] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.223066][   T13] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.274388][   T13] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.337009][   T13] bridge_slave_1: left allmulticast mode
[   69.339314][   T13] bridge_slave_1: left promiscuous mode
[   69.343112][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.346372][   T13] bridge_slave_0: left allmulticast mode
[   69.348263][   T13] bridge_slave_0: left promiscuous mode
[   69.350521][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.515123][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.520029][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.525395][   T13] bond0 (unregistering): (slave dummy0): Releasing backup interface
[   69.530359][   T13] bond0 (unregistering): Released all slaves
[   69.582520][   T13] tipc: Left network mode
[   69.694568][   T13] hsr_slave_0: left promiscuous mode
[   69.697630][   T13] hsr_slave_1: left promiscuous mode
[   69.700631][   T13] veth1_macvtap: left promiscuous mode
[   69.705077][   T13] veth0_macvtap: left promiscuous mode
[   69.707329][   T13] veth1_vlan: left promiscuous mode
[   69.709510][   T13] veth0_vlan: left promiscuous mode
[   69.813501][   T13] team0 (unregistering): Port device team_slave_1 removed
[   69.823926][   T13] team0 (unregistering): Port device team_slave_0 removed
[   71.053345][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.056096][ T1361] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
14:27:30  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bf860 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000002d6b RDI=0000000000002d6c RBP=ffffffff99dfc9f0 RSP=ffffc900070d5eb0
R8 =ffff888107a30237 R9 =1ffff11020f46046 R10=dffffc0000000000 R11=ffffffff85475540
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff854755b7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1fb43156c0 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3030fff8 CR3=00000000279e2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 0000000000000000
XMM02=000055558cfe9f5d 000055558cfe9ed0 XMM03=000055558cfdf844 000055558cfdf840
XMM04=0000000000000000 000055558cfdb4a8 XMM05=010fffffffffffff 040fffffffffffff
XMM06=040b80040fffffff ffffff0407800401 XMM07=8010000c014f8607 10000bf0030fffff
XMM08=fffe10000be00300 10000bd003001000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000002900 RCX=0000000000000780 RDX=0000000000000cfa
RSI=0000557c8ef84a80 RDI=0000557c8efa2f40 RBP=0000557c8efa0dc0 RSP=00007fff13da3ff0
R8 =0000557c8efa0dc0 R9 =0000000000000000 R10=000000000000029f R11=0000000000000000
R12=0000000000002900 R13=0000557c8ef84980 R14=0000000000000100 R15=0000557c8ef84cf0
RIP=0000557c6c82382b RFL=00010206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc0732cb800 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3040aff8 CR3=00000000279bd000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
