last executing test programs:

451.518122ms ago: executing program 0 (id=321):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0xa}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8090}, 0x44000)

391.430535ms ago: executing program 0 (id=325):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000002140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='initcall_start\x00', r0}, 0x10)
r2 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f000000d740)={r2, r1, 0x0, 0x3f, &(0x7f000000d780)='cg0\x9b8\xe3\t$h>SQ\xe8\xed@roup\x00Zd\xca=\xd3a\x93\xfbin&\xa4T]\xa1\xc0n\x97\xdf\x16\x96\xa5q\xd6_h6e\x9a\xa8\xd5\x8c \xbf\x11J\xd3\xa7jd9ix'}, 0x30)

341.64699ms ago: executing program 0 (id=328):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)

231.545458ms ago: executing program 0 (id=333):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a0001000000080018"], 0x58}}, 0x0)

231.169919ms ago: executing program 2 (id=334):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf02000014002000b7030000000000e184000000d4000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000fd}, 0x94)

231.056276ms ago: executing program 1 (id=335):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000000b0601080000000000000000060000020500010000"], 0x2c}}, 0x4800)

157.192403ms ago: executing program 2 (id=336):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)={0x20, 0x4e20, 0x66f, @local, 0x2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x4000000)

156.767511ms ago: executing program 0 (id=337):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, &(0x7f0000000180)=""/220, 0x4a, 0xdc, 0x1}, 0x20)

156.676832ms ago: executing program 1 (id=338):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

156.56046ms ago: executing program 2 (id=339):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd29, 0x20000000, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x3, 0x2, 0x3, 0x0, 0xff, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29a5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x12, 0x5, 0xfffffffffffffff7, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x1}}]}, 0x154}}, 0x0)

82.107634ms ago: executing program 1 (id=340):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000bf71000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xf7, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x42}, 0x21)

81.773073ms ago: executing program 2 (id=341):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000)

81.541058ms ago: executing program 0 (id=342):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x18}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe)

81.399534ms ago: executing program 2 (id=343):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x5, 0x4)

81.307383ms ago: executing program 1 (id=344):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)

569.332µs ago: executing program 1 (id=345):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000043000000", 0xfe60)

255.749µs ago: executing program 2 (id=346):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

0s ago: executing program 1 (id=347):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_MASTER={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:20413' (ED25519) to the list of known hosts.
syzkaller login: [   47.752464][ T5817] cgroup: Unknown subsys name 'net'
[   47.864455][ T5817] cgroup: Unknown subsys name 'cpuset'
[   47.868649][ T5817] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.545488][ T5817] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.673544][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.676783][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.679636][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.683476][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.686168][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.740300][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.744170][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.748584][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.751900][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.756583][ T5224] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.759214][ T5224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.762816][ T5224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.765449][ T5224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.768307][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.775564][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.918871][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   54.046122][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.049090][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.051906][ T5828] bridge_slave_0: entered allmulticast mode
[   54.054775][ T5828] bridge_slave_0: entered promiscuous mode
[   54.080568][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.083571][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.085863][ T5828] bridge_slave_1: entered allmulticast mode
[   54.088580][ T5828] bridge_slave_1: entered promiscuous mode
[   54.119413][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.123046][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   54.129172][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.134111][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   54.172235][ T5828] team0: Port device team_slave_0 added
[   54.192535][ T5828] team0: Port device team_slave_1 added
[   54.234271][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.236438][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.244506][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.270079][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.272409][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.280040][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.292835][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.295129][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.297282][ T5834] bridge_slave_0: entered allmulticast mode
[   54.299947][ T5834] bridge_slave_0: entered promiscuous mode
[   54.318543][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.321238][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.323501][ T5834] bridge_slave_1: entered allmulticast mode
[   54.326230][ T5834] bridge_slave_1: entered promiscuous mode
[   54.337394][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.339520][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.342030][ T5833] bridge_slave_0: entered allmulticast mode
[   54.344729][ T5833] bridge_slave_0: entered promiscuous mode
[   54.363903][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.366251][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.368526][ T5833] bridge_slave_1: entered allmulticast mode
[   54.371671][ T5833] bridge_slave_1: entered promiscuous mode
[   54.393805][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.400283][ T5828] hsr_slave_0: entered promiscuous mode
[   54.403231][ T5828] hsr_slave_1: entered promiscuous mode
[   54.415928][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.420436][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.444061][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.479325][ T5834] team0: Port device team_slave_0 added
[   54.483107][ T5833] team0: Port device team_slave_0 added
[   54.486193][ T5834] team0: Port device team_slave_1 added
[   54.489238][ T5833] team0: Port device team_slave_1 added
[   54.528315][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.530521][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.538995][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.544067][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.546251][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.554406][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.567748][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.569859][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.577553][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.589773][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.592447][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.600081][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.653792][ T5834] hsr_slave_0: entered promiscuous mode
[   54.656094][ T5834] hsr_slave_1: entered promiscuous mode
[   54.658182][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.660536][ T5834] Cannot create hsr debugfs directory
[   54.713361][ T5833] hsr_slave_0: entered promiscuous mode
[   54.715948][ T5833] hsr_slave_1: entered promiscuous mode
[   54.718008][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.720223][ T5833] Cannot create hsr debugfs directory
[   54.823844][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.847119][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.868171][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.886221][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.960019][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.965680][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.971782][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.986415][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.035681][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.040451][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.055018][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.065131][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.133379][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.148359][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.175809][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   55.183627][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   55.193479][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.196035][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.204301][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.206538][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.220578][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.223486][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.233453][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.236285][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.250886][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.308785][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   55.333851][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.336077][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.355011][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.357304][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.364473][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.453637][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.502344][ T5834] veth0_vlan: entered promiscuous mode
[   55.526389][ T5834] veth1_vlan: entered promiscuous mode
[   55.545821][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.557864][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.565331][ T5834] veth0_macvtap: entered promiscuous mode
[   55.575363][ T5834] veth1_macvtap: entered promiscuous mode
[   55.596902][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.612553][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.623654][ T5833] veth0_vlan: entered promiscuous mode
[   55.634141][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.636909][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.639549][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.643124][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.647790][ T5828] veth0_vlan: entered promiscuous mode
[   55.654352][ T5833] veth1_vlan: entered promiscuous mode
[   55.660034][ T5828] veth1_vlan: entered promiscuous mode
[   55.704076][ T5833] veth0_macvtap: entered promiscuous mode
[   55.711773][ T5837] Bluetooth: hci0: command tx timeout
[   55.720726][ T5833] veth1_macvtap: entered promiscuous mode
[   55.735810][ T5828] veth0_macvtap: entered promiscuous mode
[   55.748540][ T5828] veth1_macvtap: entered promiscuous mode
[   55.748773][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.754398][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.768734][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.783762][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.791301][ T5837] Bluetooth: hci2: command tx timeout
[   55.797930][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.802543][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.805225][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.807856][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.810376][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.813578][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.814037][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.833095][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.842526][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.845132][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.847732][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.850312][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.876724][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.881501][ T5837] Bluetooth: hci1: command tx timeout
[   55.994853][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.997234][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.029740][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.037693][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.058304][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.062380][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.079370][ T5899] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5'.
[   56.083947][ T5899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5'.
[   56.087187][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.089509][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.402943][ T5915] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.555198][ T5924] netlink: 596 bytes leftover after parsing attributes in process `syz.0.13'.
[   56.718664][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'.
[   57.676143][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'.
[   57.791515][ T5837] Bluetooth: hci0: command tx timeout
[   57.871771][ T5837] Bluetooth: hci2: command tx timeout
[   57.875357][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.37'.
[   57.893689][ T5990] netlink: 'syz.1.37': attribute type 2 has an invalid length.
[   57.906529][ T5990] netlink: 'syz.1.37': attribute type 1 has an invalid length.
[   57.915791][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'.
[   57.951719][ T5837] Bluetooth: hci1: command tx timeout
[   58.259746][ T5999] netlink: 'syz.1.41': attribute type 10 has an invalid length.
[   58.262396][ T5999] netlink: 40 bytes leftover after parsing attributes in process `syz.1.41'.
[   58.711078][ T6017] netlink: 'syz.1.49': attribute type 2 has an invalid length.
[   58.963819][ T6037] warning: `syz.0.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.058333][ T6041] netlink: 36 bytes leftover after parsing attributes in process `syz.0.59'.
[   59.067230][ T6041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.59'.
[   59.314732][ T6058] syz.0.65 uses obsolete (PF_INET,SOCK_PACKET)
[   59.450501][ T6073] netlink: 'syz.2.66': attribute type 13 has an invalid length.
[   59.605471][ T6068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.621929][ T6068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.626426][ T6068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.871047][ T5837] Bluetooth: hci0: command tx timeout
[   59.951039][ T5837] Bluetooth: hci2: command tx timeout
[   60.031675][ T5837] Bluetooth: hci1: command tx timeout
[   60.590709][ T6120] netlink: 'syz.0.88': attribute type 13 has an invalid length.
[   60.735902][ T6124] Zero length message leads to an empty skb
[   60.755278][ T6120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.763873][ T6120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.808913][ T6115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.079762][ T6136] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.173516][ T6141] __nla_validate_parse: 17 callbacks suppressed
[   61.173526][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'.
[   61.179394][ T6141] bridge_slave_1: left allmulticast mode
[   61.190870][ T6141] bridge_slave_1: left promiscuous mode
[   61.193830][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.199629][ T6141] bridge_slave_0: left allmulticast mode
[   61.204676][ T6141] bridge_slave_0: left promiscuous mode
[   61.207058][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.394639][ T6155] netlink: 'syz.0.103': attribute type 2 has an invalid length.
[   61.473890][ T6159] netlink: 36 bytes leftover after parsing attributes in process `syz.2.102'.
[   61.476693][ T6159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.102'.
[   61.479354][ T6159] netlink: 36 bytes leftover after parsing attributes in process `syz.2.102'.
[   61.484392][ T6159] netlink: 36 bytes leftover after parsing attributes in process `syz.2.102'.
[   61.870085][ T6187] openvswitch: netlink: Flow key attribute not present in set flow.
[   61.961002][ T5837] Bluetooth: hci0: command tx timeout
[   62.033040][ T5837] Bluetooth: hci2: command tx timeout
[   62.111448][ T5837] Bluetooth: hci1: command tx timeout
[   63.155893][ T6233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.137'.
[   63.158758][ T6233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.137'.
[   63.365439][ T6258] netlink: 'syz.0.148': attribute type 1 has an invalid length.
[   63.367758][ T6258] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.148'.
[   63.391851][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'.
[   63.420104][ T6261] netlink: 92 bytes leftover after parsing attributes in process `syz.1.149'.
[   63.430491][ T6261] netlink: 'syz.1.149': attribute type 1 has an invalid length.
[   63.903377][ T6300] dummy0: entered promiscuous mode
[   63.908445][ T6300] macvtap1: entered promiscuous mode
[   63.911286][ T6300] macvtap1: entered allmulticast mode
[   63.913000][ T6300] dummy0: entered allmulticast mode
[   64.075171][ T6319] netlink: 'syz.1.178': attribute type 1 has an invalid length.
[   64.445615][ T6356] netlink: 'syz.1.194': attribute type 1 has an invalid length.
[   64.451183][ T6356] netlink: 'syz.1.194': attribute type 2 has an invalid length.
[   64.456939][ T6356] netlink: 'syz.1.194': attribute type 1 has an invalid length.
[   64.459393][ T6356] netlink: 'syz.1.194': attribute type 2 has an invalid length.
[   64.492349][ T6360] Cannot find del_set index 0 as target
[   64.670341][ T6378] netlink: 'syz.1.206': attribute type 20 has an invalid length.
[   64.680456][ T6378] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   64.683360][ T6378] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   64.685900][ T6378] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   64.688580][ T6378] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   64.693838][ T6378] netlink: 'syz.1.206': attribute type 20 has an invalid length.
[   65.091792][ T6415] vlan3: entered promiscuous mode
[   65.093364][ T6415] vlan2: entered promiscuous mode
[   65.094959][ T6415] gretap0: entered promiscuous mode
[   65.434345][ T6439] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   65.964654][ T6471] netlink: 'syz.2.248': attribute type 10 has an invalid length.
[   66.401495][ T6511] sctp: [Deprecated]: syz.1.267 (pid 6511) Use of int in maxseg socket option.
[   66.401495][ T6511] Use struct sctp_assoc_value instead
[   66.810886][ T6540] __nla_validate_parse: 11 callbacks suppressed
[   66.810900][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'.
[   66.815825][ T6540] netlink: 15 bytes leftover after parsing attributes in process `syz.0.278'.
[   66.860307][ T6542] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[   66.866538][ T6542] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[   66.923836][ T6544] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   67.022515][ T6544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.280'.
[   67.224924][ T6549] infiniband syz2: set down
[   67.229009][ T6549] infiniband syz2: added syzkaller0
[   67.253524][ T6549] RDS/IB: syz2: added
[   67.255066][ T6549] smc: adding ib device syz2 with port count 1
[   67.256989][ T6549] smc:    ib device syz2 port 1 has pnetid 
[   67.875568][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'.
[   67.891179][ T3804] smc: removing ib device syz2
[   68.440434][   T33] audit: type=1804 audit(1752663563.026:2): pid=6632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.320" name="memory.events" dev="tmpfs" ino=512 res=1 errno=0
[   68.446895][   T33] audit: type=1800 audit(1752663563.026:3): pid=6632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.320" name="memory.events" dev="tmpfs" ino=512 res=0 errno=0
[   68.518389][ T6640] xt_hashlimit: max too large, truncated to 1048576
[   68.563992][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'.
[   68.570205][ T6646] vlan3: entered allmulticast mode
[   68.622697][ T6650] Driver unsupported XDP return value 0 on prog  (id 48) dev N/A, expect packet loss!
[   68.649953][ T6654] netlink: 'syz.2.330': attribute type 11 has an invalid length.
[   68.735558][ T6660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.333'.
[   68.752348][ T6664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.335'.
[   68.837622][ T6674] netlink: 'syz.2.341': attribute type 1 has an invalid length.
[   68.840031][ T6674] netlink: 'syz.2.341': attribute type 2 has an invalid length.
[   68.842991][ T6674] netlink: 'syz.2.341': attribute type 8 has an invalid length.
[   68.845385][ T6674] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.341'.
[   68.974811][ T6688] netlink: 'syz.2.346': attribute type 10 has an invalid length.
[   68.988583][ T6688] team0: Port device dummy0 added
[   68.992028][ T6688] netlink: 'syz.2.346': attribute type 10 has an invalid length.
[   68.994784][ T6688] 
[   68.995614][ T6688] ======================================================
[   68.998615][ T6688] WARNING: possible circular locking dependency detected
[   69.000731][ T6688] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[   69.003998][ T6688] ------------------------------------------------------
[   69.006235][ T6688] syz.2.346/6688 is trying to acquire lock:
[   69.008138][ T6688] ffff888020ed4e00 (team->team_lock_key){+.+.}-{4:4}, at: team_device_event+0x182/0xa20
[   69.011201][ T6688] 
[   69.011201][ T6688] but task is already holding lock:
[   69.013460][ T6688] ffff88802b0f4d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   69.016503][ T6688] 
[   69.016503][ T6688] which lock already depends on the new lock.
[   69.016503][ T6688] 
[   69.019524][ T6688] 
[   69.019524][ T6688] the existing dependency chain (in reverse order) is:
[   69.022375][ T6688] 
[   69.022375][ T6688] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[   69.024956][ T6688]        lock_acquire+0x120/0x360
[   69.026590][ T6688]        __mutex_lock+0x182/0xe80
[   69.028176][ T6688]        dev_set_mtu+0x10e/0x260
[   69.029819][ T6688]        team_add_slave+0x8b8/0x2840
[   69.031487][ T6688]        do_set_master+0x533/0x6d0
[   69.033080][ T6688]        do_setlink+0xcf0/0x41c0
[   69.034611][ T6688]        rtnl_newlink+0x160b/0x1c70
[   69.036192][ T6688]        rtnetlink_rcv_msg+0x7cf/0xb70
[   69.037998][ T6688]        netlink_rcv_skb+0x208/0x470
[   69.039669][ T6688]        netlink_unicast+0x75c/0x8e0
[   69.041293][ T6688]        netlink_sendmsg+0x805/0xb30
[   69.043085][ T6688]        __sock_sendmsg+0x21c/0x270
[   69.044714][ T6688]        ____sys_sendmsg+0x505/0x830
[   69.046353][ T6688]        ___sys_sendmsg+0x21f/0x2a0
[   69.048013][ T6688]        __x64_sys_sendmsg+0x19b/0x260
[   69.049663][ T6688]        do_syscall_64+0xfa/0x3b0
[   69.051215][ T6688]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.053219][ T6688] 
[   69.053219][ T6688] -> #0 (team->team_lock_key){+.+.}-{4:4}:
[   69.055587][ T6688]        validate_chain+0xb9b/0x2140
[   69.057133][ T6688]        __lock_acquire+0xab9/0xd20
[   69.058689][ T6688]        lock_acquire+0x120/0x360
[   69.060185][ T6688]        __mutex_lock+0x182/0xe80
[   69.061685][ T6688]        team_device_event+0x182/0xa20
[   69.063425][ T6688]        notifier_call_chain+0x1b6/0x3e0
[   69.065160][ T6688]        __dev_notify_flags+0x18d/0x2e0
[   69.066914][ T6688]        netif_change_flags+0xe8/0x1a0
[   69.068553][ T6688]        do_setlink+0xc55/0x41c0
[   69.070113][ T6688]        rtnl_newlink+0x160b/0x1c70
[   69.071780][ T6688]        rtnetlink_rcv_msg+0x7cf/0xb70
[   69.073487][ T6688]        netlink_rcv_skb+0x208/0x470
[   69.075430][ T6688]        netlink_unicast+0x75c/0x8e0
[   69.077288][ T6688]        netlink_sendmsg+0x805/0xb30
[   69.078958][ T6688]        __sock_sendmsg+0x21c/0x270
[   69.080534][ T6688]        ____sys_sendmsg+0x505/0x830
[   69.082149][ T6688]        ___sys_sendmsg+0x21f/0x2a0
[   69.083799][ T6688]        __x64_sys_sendmsg+0x19b/0x260
[   69.085503][ T6688]        do_syscall_64+0xfa/0x3b0
[   69.087004][ T6688]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.088919][ T6688] 
[   69.088919][ T6688] other info that might help us debug this:
[   69.088919][ T6688] 
[   69.091899][ T6688]  Possible unsafe locking scenario:
[   69.091899][ T6688] 
[   69.094107][ T6688]        CPU0                    CPU1
[   69.095709][ T6688]        ----                    ----
[   69.097317][ T6688]   lock(&dev_instance_lock_key#3);
[   69.098886][ T6688]                                lock(team->team_lock_key);
[   69.101104][ T6688]                                lock(&dev_instance_lock_key#3);
[   69.103432][ T6688]   lock(team->team_lock_key);
[   69.104919][ T6688] 
[   69.104919][ T6688]  *** DEADLOCK ***
[   69.104919][ T6688] 
[   69.107363][ T6688] 2 locks held by syz.2.346/6688:
[   69.108852][ T6688]  #0: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[   69.111528][ T6688]  #1: ffff88802b0f4d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   69.114577][ T6688] 
[   69.114577][ T6688] stack backtrace:
[   69.116531][ T6688] CPU: 1 UID: 0 PID: 6688 Comm: syz.2.346 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   69.116544][ T6688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   69.116551][ T6688] Call Trace:
[   69.116558][ T6688]  <TASK>
[   69.116564][ T6688]  dump_stack_lvl+0x189/0x250
[   69.116580][ T6688]  ? __pfx_dump_stack_lvl+0x10/0x10
[   69.116590][ T6688]  ? __pfx__printk+0x10/0x10
[   69.116603][ T6688]  ? print_lock_name+0xde/0x100
[   69.116615][ T6688]  print_circular_bug+0x2ee/0x310
[   69.116629][ T6688]  check_noncircular+0x134/0x160
[   69.116640][ T6688]  validate_chain+0xb9b/0x2140
[   69.116651][ T6688]  ? __lock_acquire+0xab9/0xd20
[   69.116660][ T6688]  __lock_acquire+0xab9/0xd20
[   69.116669][ T6688]  ? team_device_event+0x182/0xa20
[   69.116680][ T6688]  lock_acquire+0x120/0x360
[   69.116687][ T6688]  ? team_device_event+0x182/0xa20
[   69.116698][ T6688]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   69.116713][ T6688]  __mutex_lock+0x182/0xe80
[   69.116722][ T6688]  ? team_device_event+0x182/0xa20
[   69.116733][ T6688]  ? __try_to_del_timer_sync+0x34a/0x3a0
[   69.116747][ T6688]  ? team_device_event+0x182/0xa20
[   69.116757][ T6688]  ? __pfx___mutex_lock+0x10/0x10
[   69.116764][ T6688]  ? __timer_delete_sync+0x218/0x2d0
[   69.116779][ T6688]  team_device_event+0x182/0xa20
[   69.116791][ T6688]  notifier_call_chain+0x1b6/0x3e0
[   69.116803][ T6688]  __dev_notify_flags+0x18d/0x2e0
[   69.116814][ T6688]  ? __pfx___dev_notify_flags+0x10/0x10
[   69.116823][ T6688]  ? __dev_change_flags+0x4cc/0x6d0
[   69.116832][ T6688]  ? __pfx___dev_change_flags+0x10/0x10
[   69.116841][ T6688]  ? __pfx_console_unlock+0x10/0x10
[   69.116853][ T6688]  ? irq_work_queue+0xbc/0x140
[   69.116862][ T6688]  netif_change_flags+0xe8/0x1a0
[   69.116872][ T6688]  do_setlink+0xc55/0x41c0
[   69.116885][ T6688]  ? __pfx_do_setlink+0x10/0x10
[   69.116894][ T6688]  ? _printk+0xcf/0x120
[   69.116903][ T6688]  ? __pfx____ratelimit+0x10/0x10
[   69.116917][ T6688]  ? __lock_acquire+0xab9/0xd20
[   69.116925][ T6688]  ? __mutex_trylock_common+0x153/0x260
[   69.116935][ T6688]  ? __pfx___mutex_trylock_common+0x10/0x10
[   69.116945][ T6688]  ? rcu_is_watching+0x15/0xb0
[   69.116954][ T6688]  ? trace_contention_end+0x39/0x120
[   69.116963][ T6688]  ? __mutex_lock+0x330/0xe80
[   69.116970][ T6688]  ? __pfx_aa_get_newest_label+0x10/0x10
[   69.116985][ T6688]  ? rtnl_newlink+0x8db/0x1c70
[   69.116993][ T6688]  ? rcu_is_watching+0x15/0xb0
[   69.117002][ T6688]  ? __pfx___mutex_lock+0x10/0x10
[   69.117010][ T6688]  ? ns_capable+0x8a/0xf0
[   69.117019][ T6688]  ? rtnl_link_get_net_capable+0x16a/0x350
[   69.117035][ T6688]  rtnl_newlink+0x160b/0x1c70
[   69.117046][ T6688]  ? netlink_sendmsg+0x805/0xb30
[   69.117061][ T6688]  ? __pfx_rtnl_newlink+0x10/0x10
[   69.117074][ T6688]  ? kasan_quarantine_put+0xdd/0x220
[   69.117083][ T6688]  ? lockdep_hardirqs_on+0x9c/0x150
[   69.117095][ T6688]  ? nlmon_xmit+0xb0/0x100
[   69.117102][ T6688]  ? kmem_cache_free+0x18f/0x400
[   69.117115][ T6688]  ? __local_bh_enable_ip+0x12d/0x1c0
[   69.117126][ T6688]  ? lockdep_hardirqs_on+0x9c/0x150
[   69.117138][ T6688]  ? __local_bh_enable_ip+0x12d/0x1c0
[   69.117147][ T6688]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   69.117157][ T6688]  ? __dev_queue_xmit+0x27e/0x3a70
[   69.117169][ T6688]  ? __lock_acquire+0xab9/0xd20
[   69.117181][ T6688]  ? __pfx_rtnl_newlink+0x10/0x10
[   69.117188][ T6688]  rtnetlink_rcv_msg+0x7cf/0xb70
[   69.117197][ T6688]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   69.117204][ T6688]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   69.117212][ T6688]  ? ref_tracker_free+0x63a/0x7d0
[   69.117223][ T6688]  ? __copy_skb_header+0xa7/0x550
[   69.117233][ T6688]  ? __pfx_ref_tracker_free+0x10/0x10
[   69.117246][ T6688]  netlink_rcv_skb+0x208/0x470
[   69.117255][ T6688]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   69.117263][ T6688]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   69.117274][ T6688]  ? netlink_deliver_tap+0x2e/0x1b0
[   69.117283][ T6688]  ? netlink_deliver_tap+0x2e/0x1b0
[   69.117292][ T6688]  netlink_unicast+0x75c/0x8e0
[   69.117333][ T6688]  netlink_sendmsg+0x805/0xb30
[   69.117346][ T6688]  ? __pfx_netlink_sendmsg+0x10/0x10
[   69.117356][ T6688]  ? aa_sock_msg_perm+0x94/0x160
[   69.117370][ T6688]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   69.117384][ T6688]  ? __pfx_netlink_sendmsg+0x10/0x10
[   69.117395][ T6688]  __sock_sendmsg+0x21c/0x270
[   69.117403][ T6688]  ____sys_sendmsg+0x505/0x830
[   69.117414][ T6688]  ? __pfx_____sys_sendmsg+0x10/0x10
[   69.117425][ T6688]  ? import_iovec+0x74/0xa0
[   69.117434][ T6688]  ___sys_sendmsg+0x21f/0x2a0
[   69.117444][ T6688]  ? __pfx____sys_sendmsg+0x10/0x10
[   69.117459][ T6688]  ? __fget_files+0x2a/0x420
[   69.117469][ T6688]  ? __fget_files+0x3a0/0x420
[   69.117480][ T6688]  __x64_sys_sendmsg+0x19b/0x260
[   69.117490][ T6688]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   69.117501][ T6688]  ? rcu_is_watching+0x15/0xb0
[   69.117511][ T6688]  ? do_syscall_64+0xbe/0x3b0
[   69.117518][ T6688]  do_syscall_64+0xfa/0x3b0
[   69.117525][ T6688]  ? lockdep_hardirqs_on+0x9c/0x150
[   69.117536][ T6688]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.117544][ T6688]  ? exc_page_fault+0x9f/0xf0
[   69.117555][ T6688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.117563][ T6688] RIP: 0033:0x7fb09138e929
[   69.117574][ T6688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.117583][ T6688] RSP: 002b:00007fb092250038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   69.117594][ T6688] RAX: ffffffffffffffda RBX: 00007fb0915b5fa0 RCX: 00007fb09138e929
[   69.117600][ T6688] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004
[   69.117606][ T6688] RBP: 00007fb091410b39 R08: 0000000000000000 R09: 0000000000000000
[   69.117612][ T6688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   69.117617][ T6688] R13: 0000000000000000 R14: 00007fb0915b5fa0 R15: 00007fff3961ae78
[   69.117627][ T6688]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   69.326621][ T6688] team0: Port device dummy0 removed
[   69.330051][ T6688] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   69.535091][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.595138][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.675778][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.714997][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.777772][   T13] bridge_slave_1: left allmulticast mode
[   69.779509][   T13] bridge_slave_1: left promiscuous mode
[   69.781827][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.785652][   T13] bridge_slave_0: left allmulticast mode
[   69.787745][   T13] bridge_slave_0: left promiscuous mode
[   69.789454][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.907090][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.910857][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.914044][   T13] bond0 (unregistering): Released all slaves
[   70.171410][   T13] hsr_slave_0: left promiscuous mode
[   70.173674][   T13] hsr_slave_1: left promiscuous mode
[   70.175854][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.178163][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.180928][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.183412][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.187664][   T13] veth1_macvtap: left promiscuous mode
[   70.189453][   T13] veth0_macvtap: left promiscuous mode
[   70.193242][   T13] veth1_vlan: left promiscuous mode
[   70.195012][   T13] veth0_vlan: left promiscuous mode
[   70.295239][   T13] team0 (unregistering): Port device team_slave_1 removed
[   70.306208][   T13] team0 (unregistering): Port device team_slave_0 removed
[   70.652037][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.655467][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.703636][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.706856][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.755856][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.759433][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.816845][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.819905][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.832640][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   70.886191][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.937772][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.988416][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.033924][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.089005][   T13] bridge_slave_1: left allmulticast mode
[   71.093602][   T13] bridge_slave_1: left promiscuous mode
[   71.095425][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.101646][   T13] bridge_slave_0: left promiscuous mode
[   71.103471][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.244429][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.247892][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.251169][   T13] bond0 (unregistering): Released all slaves
[   71.255454][   T13] bond1 (unregistering): Released all slaves
[   71.280687][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.290492][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.295690][   T13] bond0 (unregistering): (slave dummy0): Releasing backup interface
[   71.298758][   T13] bond0 (unregistering): Released all slaves
[   71.615883][   T13] hsr_slave_0: left promiscuous mode
[   71.618604][   T13] hsr_slave_1: left promiscuous mode
[   71.621486][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.624290][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.627429][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.630255][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.636818][   T13] hsr_slave_0: left promiscuous mode
[   71.639353][   T13] hsr_slave_1: left promiscuous mode
[   71.645142][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.647964][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.651448][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.654241][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.661485][   T13] dummy0: left allmulticast mode
[   71.663267][   T13] veth1_macvtap: left promiscuous mode
[   71.664935][   T13] veth0_macvtap: left promiscuous mode
[   71.666678][   T13] veth1_vlan: left promiscuous mode
[   71.668316][   T13] veth0_vlan: left promiscuous mode
[   71.670300][   T13] veth1_vlan: left promiscuous mode
[   71.671974][   T13] veth0_vlan: left promiscuous mode
[   71.807748][   T13] team0 (unregistering): Port device team_slave_1 removed
[   71.820982][   T13] team0 (unregistering): Port device team_slave_0 removed
[   71.937812][   T13] team0 (unregistering): Port device team_slave_1 removed
[   71.949113][   T13] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
10:59:23  Registers:
info registers vcpu 0

CPU#0
RAX=d189d6f386112500 RBX=ffffffff81976c78 RCX=d189d6f386112500 RDX=0000000000000001
RSI=ffffffff8be29da0 RDI=ffffffff81976c78 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f3f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff63637f2d8 CR3=000000001f406000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffff0000 XMM03=ffffffffffffff00 ffffffffffff0000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fb091411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000002d38 RDI=0000000000002d39 RBP=00000000000003f8 RSP=ffffc90006e85f10
R8 =ffff888020fa8237 R9 =1ffff110041f5046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98d3 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb0922506c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2fa61a CR3=00000001096c0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fb091585478 00007fb091585450 XMM03=00007fb091585488 00007fb091585480
XMM04=00007fb0920ed100 00007fb091585440 XMM05=00007fb091585458 00007fb0915854a0
XMM06=00007fb091585498 00007fb091585490 XMM07=00007fb091585488 00007fb091585480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fb091411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
