last executing test programs:

351.547003ms ago: executing program 2 (id=348):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r0, &(0x7f0000000980)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f4305", 0x12}], 0x1)

264.306885ms ago: executing program 0 (id=351):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x1, 0xffffffff, 0x2, {0x0, 0x0, 0x0, r1, 0x18f40, 0x22008}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0)

211.406717ms ago: executing program 1 (id=352):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000000000600000000060015000400000014001680100008800c"], 0x38}}, 0x0)

211.231813ms ago: executing program 0 (id=353):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x3)
ppoll(&(0x7f0000003840)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0)

208.267938ms ago: executing program 2 (id=354):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffe}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x800)

207.33458ms ago: executing program 1 (id=355):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0)

141.138469ms ago: executing program 0 (id=356):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4)

140.984079ms ago: executing program 1 (id=357):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000000b06050000000000f27a0000000000000900020073797a300000000005000100070000001800078006"], 0x40}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

140.87861ms ago: executing program 2 (id=358):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000030103"], 0x14}, 0x1, 0x0, 0x0, 0x4000094}, 0x80)

140.11436ms ago: executing program 1 (id=359):
unshare(0x6020400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10)

139.985956ms ago: executing program 0 (id=360):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14)

79.217008ms ago: executing program 2 (id=361):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r0, 0x11, 0x68, &(0x7f0000000080), 0x4)

78.965031ms ago: executing program 1 (id=362):
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be040207fe056406040c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)

75.255756ms ago: executing program 0 (id=363):
r0 = socket$netlink(0x10, 0x3, 0xc)
writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1)
close(r0)

66.504279ms ago: executing program 2 (id=364):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x1c, 0x33, 0x107, 0xfffffffc, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x6, 0x1, 0x0, 0x1, [@generic="dd5f"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050)

418.643µs ago: executing program 0 (id=365):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_PROTOCOL={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

235.189µs ago: executing program 1 (id=366):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611930000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0x0, 0xfffffffffffffe20, 0x0, &(0x7f0000001700)=""/4087, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x19)

0s ago: executing program 2 (id=367):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:26907' (ED25519) to the list of known hosts.
syzkaller login: [   48.521645][ T5787] cgroup: Unknown subsys name 'net'
[   48.653665][ T5787] cgroup: Unknown subsys name 'cpuset'
[   48.659136][ T5787] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.259864][ T5787] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.962756][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.966269][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.970762][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.973278][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.980207][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.983430][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.986187][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.989082][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.992653][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.995882][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.998207][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.018132][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.023549][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.023652][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.030172][ T5204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.232253][ T5813] chnl_net:caif_netlink_parms(): no params data found
[   55.291645][ T5821] chnl_net:caif_netlink_parms(): no params data found
[   55.306314][ T5812] chnl_net:caif_netlink_parms(): no params data found
[   55.351159][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.353958][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.356293][ T5813] bridge_slave_0: entered allmulticast mode
[   55.359065][ T5813] bridge_slave_0: entered promiscuous mode
[   55.362884][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.365093][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.367471][ T5813] bridge_slave_1: entered allmulticast mode
[   55.370865][ T5813] bridge_slave_1: entered promiscuous mode
[   55.470728][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.474794][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.477390][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.480307][ T5821] bridge_slave_0: entered allmulticast mode
[   55.483153][ T5821] bridge_slave_0: entered promiscuous mode
[   55.486595][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.489358][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.491733][ T5821] bridge_slave_1: entered allmulticast mode
[   55.494563][ T5821] bridge_slave_1: entered promiscuous mode
[   55.508584][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.528582][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.531388][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.533849][ T5812] bridge_slave_0: entered allmulticast mode
[   55.536438][ T5812] bridge_slave_0: entered promiscuous mode
[   55.540198][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.542852][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.545219][ T5812] bridge_slave_1: entered allmulticast mode
[   55.548322][ T5812] bridge_slave_1: entered promiscuous mode
[   55.582331][ T5813] team0: Port device team_slave_0 added
[   55.599881][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.605914][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.611534][ T5813] team0: Port device team_slave_1 added
[   55.616155][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.623888][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.707790][ T5812] team0: Port device team_slave_0 added
[   55.713569][ T5821] team0: Port device team_slave_0 added
[   55.718617][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.722388][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.733037][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.741596][ T5812] team0: Port device team_slave_1 added
[   55.745972][ T5821] team0: Port device team_slave_1 added
[   55.762289][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.765096][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.775873][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.817324][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.822162][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.834227][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.839963][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.842270][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.850628][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.855236][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.858077][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.870604][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.875729][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.877892][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.888479][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.943265][ T5813] hsr_slave_0: entered promiscuous mode
[   55.946526][ T5813] hsr_slave_1: entered promiscuous mode
[   55.995750][ T5812] hsr_slave_0: entered promiscuous mode
[   55.998060][ T5812] hsr_slave_1: entered promiscuous mode
[   56.001325][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.004241][ T5812] Cannot create hsr debugfs directory
[   56.010818][ T5821] hsr_slave_0: entered promiscuous mode
[   56.013952][ T5821] hsr_slave_1: entered promiscuous mode
[   56.016890][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.021099][ T5821] Cannot create hsr debugfs directory
[   56.315139][ T5812] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.326861][ T5812] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.333776][ T5812] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.340652][ T5812] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.403608][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.411795][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.421199][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.437039][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.488479][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.497453][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.507573][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.516869][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.545960][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.576018][ T5812] 8021q: adding VLAN 0 to HW filter on device team0
[   56.581797][ T2173] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.584193][ T2173] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.612231][ T2173] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.614634][ T2173] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.660919][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.703918][ T5813] 8021q: adding VLAN 0 to HW filter on device team0
[   56.728191][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.731437][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.746599][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.749647][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.767897][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.814140][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   56.821772][ T5813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.825146][ T5813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.836206][ T2173] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.839038][ T2173] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.861047][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.863575][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.907340][ T5821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.912916][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.922332][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.968063][ T5812] veth0_vlan: entered promiscuous mode
[   56.991145][ T5812] veth1_vlan: entered promiscuous mode
[   57.015180][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.034761][ T5820] Bluetooth: hci0: command tx timeout
[   57.041630][ T5812] veth0_macvtap: entered promiscuous mode
[   57.052886][ T5812] veth1_macvtap: entered promiscuous mode
[   57.075395][ T5813] veth0_vlan: entered promiscuous mode
[   57.085092][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.092694][ T5813] veth1_vlan: entered promiscuous mode
[   57.098844][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.109314][ T5820] Bluetooth: hci2: command tx timeout
[   57.109875][ T5204] Bluetooth: hci1: command tx timeout
[   57.123348][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.136706][ T5812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.142120][ T5812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.145624][ T5812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.149604][ T5812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.168564][ T5813] veth0_macvtap: entered promiscuous mode
[   57.180261][ T5813] veth1_macvtap: entered promiscuous mode
[   57.200356][ T5821] veth0_vlan: entered promiscuous mode
[   57.216230][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.235800][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.242339][ T5821] veth1_vlan: entered promiscuous mode
[   57.252365][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.255461][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.258208][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.262824][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.286738][ T2173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.292931][ T2173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.331227][ T5821] veth0_macvtap: entered promiscuous mode
[   57.350712][ T5821] veth1_macvtap: entered promiscuous mode
[   57.362589][ T2173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.366106][ T2173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.404555][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.407262][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.410911][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.413689][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.420201][ T5821] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.423207][ T5821] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.426473][ T5821] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.431383][ T5821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.472304][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.473448][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.474818][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.583279][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.586151][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.666855][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.667012][ T5884] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[   57.679101][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.721250][ T5884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4'.
[   57.751335][ T5886] macsec0: entered promiscuous mode
[   57.753313][ T5886] macsec1: entered allmulticast mode
[   57.755085][ T5886] macsec0: entered allmulticast mode
[   57.757053][ T5886] veth1_macvtap: entered allmulticast mode
[   57.901269][ T5892] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.906894][ T5897] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.7'.
[   57.914940][ T5896] Zero length message leads to an empty skb
[   57.952406][ T5897] 8021q: adding VLAN 0 to HW filter on device batadv1
[   57.957816][ T5897] team0: Port device batadv1 added
[   58.017171][ T5892] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.115780][ T5892] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.423348][ T5914] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15'.
[   58.431660][ T5914] netlink: 'syz.0.15': attribute type 12 has an invalid length.
[   58.894020][ T5930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21'.
[   59.014748][ T5940] netlink: 16 bytes leftover after parsing attributes in process `syz.2.26'.
[   59.054022][ T5942] netlink: 'syz.0.27': attribute type 1 has an invalid length.
[   59.057281][ T5942] netlink: 'syz.0.27': attribute type 3 has an invalid length.
[   59.065624][ T5942] netlink: 224 bytes leftover after parsing attributes in process `syz.0.27'.
[   59.109720][ T5204] Bluetooth: hci0: command tx timeout
[   59.171778][ T5892] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.172206][ T5949] trusted_key: syz.0.30 sent an empty control message without MSG_MORE.
[   59.189452][ T5204] Bluetooth: hci2: command tx timeout
[   59.189825][ T5820] Bluetooth: hci1: command tx timeout
[   59.237835][ T5954] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.336851][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'.
[   59.810662][ T5989] infiniband syz!: set active
[   59.813272][ T5989] infiniband syz!: added team_slave_0
[   59.843017][ T5989] RDS/IB: syz!: added
[   59.846731][ T5989] smc: adding ib device syz! with port count 1
[   59.848742][ T5989] smc:    ib device syz! port 1 has pnetid 
[   59.871386][ T6003] netlink: 32 bytes leftover after parsing attributes in process `syz.2.56'.
[   60.644724][ T5892] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.658333][ T5892] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.683576][ T5892] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.693117][ T5892] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.761919][ T6023] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.803714][ T6027] lo speed is unknown, defaulting to 1000
[   60.807097][ T6027] lo speed is unknown, defaulting to 1000
[   60.810036][ T6027] lo speed is unknown, defaulting to 1000
[   60.929389][ T6029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   61.016496][ T6027] infiniband syz0: set active
[   61.020950][   T47] lo speed is unknown, defaulting to 1000
[   61.030362][ T6027] infiniband syz0: added lo
[   61.112789][ T6027] RDS/IB: syz0: added
[   61.114785][ T6027] smc: adding ib device syz0 with port count 1
[   61.128759][ T6027] smc:    ib device syz0 port 1 has pnetid 
[   61.135876][ T5882] lo speed is unknown, defaulting to 1000
[   61.142816][ T6027] lo speed is unknown, defaulting to 1000
[   61.189345][ T5820] Bluetooth: hci0: command tx timeout
[   61.261053][ T6051] netlink: 'syz.0.76': attribute type 1 has an invalid length.
[   61.264222][ T6051] netlink: 228 bytes leftover after parsing attributes in process `syz.0.76'.
[   61.283058][ T5820] Bluetooth: hci1: command tx timeout
[   61.283084][ T5204] Bluetooth: hci2: command tx timeout
[   61.368524][ T6027] lo speed is unknown, defaulting to 1000
[   61.508350][ T6063] netlink: 'syz.2.82': attribute type 21 has an invalid length.
[   61.515702][ T6063] netlink: 132 bytes leftover after parsing attributes in process `syz.2.82'.
[   61.556574][ T6027] lo speed is unknown, defaulting to 1000
[   61.685980][ T6072] netlink: 'syz.2.86': attribute type 4 has an invalid length.
[   62.229506][ T6117] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.328756][ T6128] netlink: 'syz.0.112': attribute type 64 has an invalid length.
[   62.377640][ T6132] syz.2.114 uses obsolete (PF_INET,SOCK_PACKET)
[   63.269183][ T5204] Bluetooth: hci0: command tx timeout
[   63.349135][ T5204] Bluetooth: hci1: command tx timeout
[   63.359905][ T5204] Bluetooth: hci2: command tx timeout
[   63.802257][ T6163] ipt_REJECT: ECHOREPLY no longer supported.
[   64.081170][ T6177] netlink: 'syz.1.132': attribute type 2 has an invalid length.
[   64.235579][ T6193] netlink: 'syz.2.139': attribute type 1 has an invalid length.
[   64.331416][ T6203] __nla_validate_parse: 4 callbacks suppressed
[   64.331446][ T6203] netlink: 176 bytes leftover after parsing attributes in process `syz.2.143'.
[   64.426575][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'.
[   64.758786][ T6240] sctp: [Deprecated]: syz.2.153 (pid 6240) Use of struct sctp_assoc_value in delayed_ack socket option.
[   64.758786][ T6240] Use struct sctp_sack_info instead
[   65.059627][ T6253] netlink: 144 bytes leftover after parsing attributes in process `syz.2.159'.
[   65.222338][ T6138] Set syz1 is full, maxelem 65536 reached
[   65.275185][ T6264] warning: `syz.0.163' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.606222][ T6273] unsupported nla_type 52263
[   65.797170][ T6269] lo speed is unknown, defaulting to 1000
[   66.335528][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'.
[   66.581121][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'.
[   66.744008][ T6344] netlink: 132 bytes leftover after parsing attributes in process `syz.0.186'.
[   67.186741][ T6366] Bluetooth: MGMT ver 1.23
[   67.591098][ T6380] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   68.297957][ T6403] netlink: 60 bytes leftover after parsing attributes in process `syz.0.208'.
[   68.302751][ T6403] netlink: 16 bytes leftover after parsing attributes in process `syz.0.208'.
[   68.306043][ T6403] netlink: 60 bytes leftover after parsing attributes in process `syz.0.208'.
[   68.366054][ T6411] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.418880][ T6411] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.498445][ T6420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.216'.
[   68.561755][ T6425] netlink: 'syz.0.218': attribute type 4 has an invalid length.
[   68.766940][ T6431] lo speed is unknown, defaulting to 1000
[   69.018858][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.021898][ T6458] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.123519][ T6474] lo speed is unknown, defaulting to 1000
[   70.746593][ T6503] __nla_validate_parse: 1 callbacks suppressed
[   70.746609][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'.
[   70.866243][ T6500] team0 (unregistering): Port device team_slave_0 removed
[   70.875682][ T6500] team0 (unregistering): Port device team_slave_1 removed
[   70.883022][ T6500] team0 (unregistering): Port device batadv1 removed
[   70.959887][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.962226][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.063572][   T34] audit: type=1800 audit(1751937695.584:2): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.248" name="cgroup.controllers" dev="tmpfs" ino=432 res=0 errno=0
[   71.108841][ T6518] netlink: 68 bytes leftover after parsing attributes in process `syz.1.257'.
[   71.457620][   T34] audit: type=1800 audit(1751937695.984:3): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.269" name="memory.events" dev="tmpfs" ino=324 res=0 errno=0
[   71.482847][   T34] audit: type=1804 audit(1751937696.014:4): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.269" name="memory.events" dev="tmpfs" ino=324 res=1 errno=0
[   71.627786][ T6559] netlink: 20 bytes leftover after parsing attributes in process `syz.1.277'.
[   71.814118][ T6573] syz.2.284 (6573) used greatest stack depth: 18552 bytes left
[   71.910724][ T6589] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.292'.
[   71.957830][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.295'.
[   72.149940][ T6619] netlink: 32 bytes leftover after parsing attributes in process `syz.2.305'.
[   72.153303][ T6619] netlink: 32 bytes leftover after parsing attributes in process `syz.2.305'.
[   72.236453][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.309'.
[   72.447457][ T6640] openvswitch: netlink: Multiple metadata blocks provided
[   72.500192][ T6627] lo speed is unknown, defaulting to 1000
[   72.820460][ T6652] netlink: 'syz.0.319': attribute type 4 has an invalid length.
[   72.833220][ T6652] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[   73.108725][ T6660] syzkaller0: entered promiscuous mode
[   73.111372][ T6660] syzkaller0: entered allmulticast mode
[   74.011176][ T6671] xt_connbytes: Forcing CT accounting to be enabled
[   74.014076][ T6671] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   74.029318][ T6671] xt_bpf: check failed: parse error
[   74.290861][ T6701] netlink: 'syz.0.343': attribute type 15 has an invalid length.
[   74.293354][ T6701] netlink: 666 bytes leftover after parsing attributes in process `syz.0.343'.
[   74.303177][ T6703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.345'.
[   74.384107][ T6710] smc: net device bond0 applied user defined pnetid SYZ2
[   74.396026][ T6710] smc: net device bond0 erased user defined pnetid SYZ2
[   74.550095][ T5820] Bluetooth: hci2: command 0x0405 tx timeout
[   74.697606][ T6745] bond0: entered promiscuous mode
[   74.703311][ T6748] netlink: 'syz.2.367': attribute type 10 has an invalid length.
[   74.705991][ T6745] bond_slave_0: entered promiscuous mode
[   74.708062][ T6745] bond_slave_1: entered promiscuous mode
[   74.715844][ T6745] bond0: left promiscuous mode
[   74.717475][ T6745] bond_slave_0: left promiscuous mode
[   74.719561][ T6745] bond_slave_1: left promiscuous mode
[   74.736652][ T6748] team0: Port device dummy0 added
[   74.743470][ T6748] netlink: 'syz.2.367': attribute type 10 has an invalid length.
[   74.746441][ T6748] 
[   74.747278][ T6748] ======================================================
[   74.749522][ T6748] WARNING: possible circular locking dependency detected
[   74.752284][ T6748] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   74.755660][ T6748] ------------------------------------------------------
[   74.757919][ T6748] syz.2.367/6748 is trying to acquire lock:
[   74.759945][ T6748] ffff88802f748e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_device_event+0x182/0xa20
[   74.763409][ T6748] 
[   74.763409][ T6748] but task is already holding lock:
[   74.766004][ T6748] ffff888029a8ad30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   74.769354][ T6748] 
[   74.769354][ T6748] which lock already depends on the new lock.
[   74.769354][ T6748] 
[   74.773014][ T6748] 
[   74.773014][ T6748] the existing dependency chain (in reverse order) is:
[   74.776007][ T6748] 
[   74.776007][ T6748] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[   74.779040][ T6748]        lock_acquire+0x120/0x360
[   74.781076][ T6748]        __mutex_lock+0x182/0xe80
[   74.782771][ T6748]        dev_set_mtu+0x10e/0x260
[   74.784378][ T6748]        team_add_slave+0x8b8/0x2840
[   74.786113][ T6748]        do_set_master+0x533/0x6d0
[   74.787970][ T6748]        do_setlink+0xcf0/0x41c0
[   74.789525][ T6748]        rtnl_newlink+0x160b/0x1c70
[   74.791441][ T6748]        rtnetlink_rcv_msg+0x7cf/0xb70
[   74.793275][ T6748]        netlink_rcv_skb+0x208/0x470
[   74.794936][ T6748]        netlink_unicast+0x75b/0x8d0
[   74.796665][ T6748]        netlink_sendmsg+0x805/0xb30
[   74.798576][ T6748]        __sock_sendmsg+0x21c/0x270
[   74.800433][ T6748]        ____sys_sendmsg+0x505/0x830
[   74.802359][ T6748]        ___sys_sendmsg+0x21f/0x2a0
[   74.804447][ T6748]        __x64_sys_sendmsg+0x19b/0x260
[   74.806676][ T6748]        do_syscall_64+0xfa/0x3b0
[   74.808772][ T6748]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.811443][ T6748] 
[   74.811443][ T6748] -> #0 (team->team_lock_key#2){+.+.}-{4:4}:
[   74.814775][ T6748]        validate_chain+0xb9b/0x2140
[   74.816894][ T6748]        __lock_acquire+0xab9/0xd20
[   74.818968][ T6748]        lock_acquire+0x120/0x360
[   74.820757][ T6748]        __mutex_lock+0x182/0xe80
[   74.822629][ T6748]        team_device_event+0x182/0xa20
[   74.824631][ T6748]        notifier_call_chain+0x1b6/0x3e0
[   74.826663][ T6748]        __dev_notify_flags+0x18d/0x2e0
[   74.828490][ T6748]        netif_change_flags+0xe8/0x1a0
[   74.830280][ T6748]        do_setlink+0xc55/0x41c0
[   74.832242][ T6748]        rtnl_newlink+0x160b/0x1c70
[   74.834127][ T6748]        rtnetlink_rcv_msg+0x7cf/0xb70
[   74.835979][ T6748]        netlink_rcv_skb+0x208/0x470
[   74.837919][ T6748]        netlink_unicast+0x75b/0x8d0
[   74.839675][ T6748]        netlink_sendmsg+0x805/0xb30
[   74.841398][ T6748]        __sock_sendmsg+0x21c/0x270
[   74.843285][ T6748]        ____sys_sendmsg+0x505/0x830
[   74.844944][ T6748]        ___sys_sendmsg+0x21f/0x2a0
[   74.846669][ T6748]        __x64_sys_sendmsg+0x19b/0x260
[   74.848817][ T6748]        do_syscall_64+0xfa/0x3b0
[   74.850852][ T6748]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.853484][ T6748] 
[   74.853484][ T6748] other info that might help us debug this:
[   74.853484][ T6748] 
[   74.857128][ T6748]  Possible unsafe locking scenario:
[   74.857128][ T6748] 
[   74.859709][ T6748]        CPU0                    CPU1
[   74.861528][ T6748]        ----                    ----
[   74.863322][ T6748]   lock(&dev_instance_lock_key#3);
[   74.865051][ T6748]                                lock(team->team_lock_key#2);
[   74.867484][ T6748]                                lock(&dev_instance_lock_key#3);
[   74.869948][ T6748]   lock(team->team_lock_key#2);
[   74.871546][ T6748] 
[   74.871546][ T6748]  *** DEADLOCK ***
[   74.871546][ T6748] 
[   74.874063][ T6748] 2 locks held by syz.2.367/6748:
[   74.875640][ T6748]  #0: ffffffff8f50ffc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[   74.878444][ T6748]  #1: ffff888029a8ad30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   74.881613][ T6748] 
[   74.881613][ T6748] stack backtrace:
[   74.883487][ T6748] CPU: 0 UID: 0 PID: 6748 Comm: syz.2.367 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   74.883498][ T6748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   74.883503][ T6748] Call Trace:
[   74.883508][ T6748]  <TASK>
[   74.883512][ T6748]  dump_stack_lvl+0x189/0x250
[   74.883527][ T6748]  ? __pfx_dump_stack_lvl+0x10/0x10
[   74.883539][ T6748]  ? __pfx__printk+0x10/0x10
[   74.883547][ T6748]  ? print_lock_name+0xde/0x100
[   74.883554][ T6748]  print_circular_bug+0x2ee/0x310
[   74.883563][ T6748]  check_noncircular+0x134/0x160
[   74.883571][ T6748]  validate_chain+0xb9b/0x2140
[   74.883580][ T6748]  ? __lock_acquire+0xab9/0xd20
[   74.883591][ T6748]  __lock_acquire+0xab9/0xd20
[   74.883602][ T6748]  ? team_device_event+0x182/0xa20
[   74.883609][ T6748]  lock_acquire+0x120/0x360
[   74.883618][ T6748]  ? team_device_event+0x182/0xa20
[   74.883626][ T6748]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   74.883636][ T6748]  __mutex_lock+0x182/0xe80
[   74.883647][ T6748]  ? team_device_event+0x182/0xa20
[   74.883655][ T6748]  ? __try_to_del_timer_sync+0x34a/0x3a0
[   74.883663][ T6748]  ? team_device_event+0x182/0xa20
[   74.883670][ T6748]  ? __pfx___mutex_lock+0x10/0x10
[   74.883685][ T6748]  ? __timer_delete_sync+0x218/0x2d0
[   74.883695][ T6748]  team_device_event+0x182/0xa20
[   74.883704][ T6748]  notifier_call_chain+0x1b6/0x3e0
[   74.883716][ T6748]  __dev_notify_flags+0x18d/0x2e0
[   74.883724][ T6748]  ? __pfx___dev_notify_flags+0x10/0x10
[   74.883732][ T6748]  ? __dev_change_flags+0x4cc/0x6d0
[   74.883740][ T6748]  ? __pfx___dev_change_flags+0x10/0x10
[   74.883749][ T6748]  ? __pfx_console_unlock+0x10/0x10
[   74.883757][ T6748]  netif_change_flags+0xe8/0x1a0
[   74.883766][ T6748]  do_setlink+0xc55/0x41c0
[   74.883776][ T6748]  ? __pfx_do_setlink+0x10/0x10
[   74.883783][ T6748]  ? _printk+0xcf/0x120
[   74.883789][ T6748]  ? __pfx____ratelimit+0x10/0x10
[   74.883801][ T6748]  ? __lock_acquire+0xab9/0xd20
[   74.883811][ T6748]  ? __mutex_trylock_common+0x153/0x260
[   74.883818][ T6748]  ? __pfx___mutex_trylock_common+0x10/0x10
[   74.883825][ T6748]  ? rcu_is_watching+0x15/0xb0
[   74.883835][ T6748]  ? trace_contention_end+0x39/0x120
[   74.883841][ T6748]  ? __mutex_lock+0x330/0xe80
[   74.883852][ T6748]  ? __pfx_aa_get_newest_label+0x10/0x10
[   74.883862][ T6748]  ? rtnl_newlink+0x8db/0x1c70
[   74.883868][ T6748]  ? rcu_is_watching+0x15/0xb0
[   74.883878][ T6748]  ? __pfx___mutex_lock+0x10/0x10
[   74.883888][ T6748]  ? ns_capable+0x8a/0xf0
[   74.883899][ T6748]  ? rtnl_link_get_net_capable+0x16a/0x350
[   74.883907][ T6748]  rtnl_newlink+0x160b/0x1c70
[   74.883914][ T6748]  ? netlink_sendmsg+0x805/0xb30
[   74.883923][ T6748]  ? __pfx_rtnl_newlink+0x10/0x10
[   74.883933][ T6748]  ? kasan_quarantine_put+0xdd/0x220
[   74.883943][ T6748]  ? lockdep_hardirqs_on+0x9c/0x150
[   74.883954][ T6748]  ? nlmon_xmit+0xb0/0x100
[   74.883963][ T6748]  ? kmem_cache_free+0x18f/0x400
[   74.883971][ T6748]  ? __local_bh_enable_ip+0x12d/0x1c0
[   74.883981][ T6748]  ? lockdep_hardirqs_on+0x9c/0x150
[   74.883991][ T6748]  ? __local_bh_enable_ip+0x12d/0x1c0
[   74.884000][ T6748]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   74.884010][ T6748]  ? __dev_queue_xmit+0x27e/0x3a70
[   74.884020][ T6748]  ? __lock_acquire+0xab9/0xd20
[   74.884032][ T6748]  ? __pfx_rtnl_newlink+0x10/0x10
[   74.884038][ T6748]  rtnetlink_rcv_msg+0x7cf/0xb70
[   74.884046][ T6748]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   74.884052][ T6748]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   74.884057][ T6748]  ? ref_tracker_free+0x63a/0x7d0
[   74.884066][ T6748]  ? __copy_skb_header+0xa7/0x550
[   74.884074][ T6748]  ? __pfx_ref_tracker_free+0x10/0x10
[   74.884082][ T6748]  ? __skb_clone+0x63/0x7a0
[   74.884091][ T6748]  netlink_rcv_skb+0x208/0x470
[   74.884098][ T6748]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   74.884105][ T6748]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   74.884113][ T6748]  ? netlink_deliver_tap+0x2e/0x1b0
[   74.884121][ T6748]  ? netlink_deliver_tap+0x2e/0x1b0
[   74.884128][ T6748]  netlink_unicast+0x75b/0x8d0
[   74.884136][ T6748]  netlink_sendmsg+0x805/0xb30
[   74.884144][ T6748]  ? __pfx_netlink_sendmsg+0x10/0x10
[   74.884152][ T6748]  ? aa_sock_msg_perm+0x94/0x160
[   74.884161][ T6748]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   74.884169][ T6748]  ? __pfx_netlink_sendmsg+0x10/0x10
[   74.884177][ T6748]  __sock_sendmsg+0x21c/0x270
[   74.884187][ T6748]  ____sys_sendmsg+0x505/0x830
[   74.884196][ T6748]  ? __pfx_____sys_sendmsg+0x10/0x10
[   74.884205][ T6748]  ? import_iovec+0x74/0xa0
[   74.884212][ T6748]  ___sys_sendmsg+0x21f/0x2a0
[   74.884220][ T6748]  ? __pfx____sys_sendmsg+0x10/0x10
[   74.884232][ T6748]  ? __fget_files+0x2a/0x420
[   74.884239][ T6748]  ? __fget_files+0x3a0/0x420
[   74.884248][ T6748]  __x64_sys_sendmsg+0x19b/0x260
[   74.884256][ T6748]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   74.884265][ T6748]  ? rcu_is_watching+0x15/0xb0
[   74.884276][ T6748]  ? do_syscall_64+0xbe/0x3b0
[   74.884282][ T6748]  do_syscall_64+0xfa/0x3b0
[   74.884288][ T6748]  ? lockdep_hardirqs_on+0x9c/0x150
[   74.884297][ T6748]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.884304][ T6748]  ? exc_page_fault+0x9f/0xf0
[   74.884313][ T6748]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.884320][ T6748] RIP: 0033:0x7fd1a3f8e929
[   74.884354][ T6748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.884362][ T6748] RSP: 002b:00007fd1a4dbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   74.884372][ T6748] RAX: ffffffffffffffda RBX: 00007fd1a41b5fa0 RCX: 00007fd1a3f8e929
[   74.884377][ T6748] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004
[   74.884382][ T6748] RBP: 00007fd1a4010b39 R08: 0000000000000000 R09: 0000000000000000
[   74.884386][ T6748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   74.884390][ T6748] R13: 0000000000000000 R14: 00007fd1a41b5fa0 R15: 00007ffc7ad37048
[   74.884399][ T6748]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   75.100928][ T6748] team0: Port device dummy0 removed
[   75.104374][ T6748] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   75.595021][   T13] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.632289][   T13] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.681300][   T13] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.741608][   T13] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.798798][   T13] bridge_slave_1: left allmulticast mode
[   75.800877][   T13] bridge_slave_1: left promiscuous mode
[   75.802707][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.807024][   T13] bridge_slave_0: left allmulticast mode
[   75.808779][   T13] bridge_slave_0: left promiscuous mode
[   75.811704][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.912887][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.916972][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.920832][   T13] bond0 (unregistering): Released all slaves
[   76.272454][   T13] hsr_slave_0: left promiscuous mode
[   76.275081][   T13] hsr_slave_1: left promiscuous mode
[   76.280158][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.282880][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.302224][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.306018][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.312682][   T13] macsec0: left allmulticast mode
[   76.314833][   T13] veth1_macvtap: left allmulticast mode
[   76.317304][   T13] veth1_macvtap: left promiscuous mode
[   76.320940][   T13] veth0_macvtap: left promiscuous mode
[   76.323741][   T13] veth1_vlan: left promiscuous mode
[   76.325997][   T13] veth0_vlan: left promiscuous mode
[   76.536352][ T1087] smc: removing ib device syz0
[   76.539348][   T95] lo speed is unknown, defaulting to 1000
[   76.542365][   T95] syz0: Port: 1 Link DOWN
[   76.904049][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.983603][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.014339][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.063936][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.130930][   T13] bridge_slave_1: left allmulticast mode
[   77.133284][   T13] bridge_slave_1: left promiscuous mode
[   77.137885][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.141630][   T13] bridge_slave_0: left allmulticast mode
[   77.144230][   T13] bridge_slave_0: left promiscuous mode
[   77.146233][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.325100][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   77.329990][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   77.334739][   T13] bond0 (unregistering): (slave dummy0): Releasing backup interface
[   77.338874][   T13] bond0 (unregistering): Released all slaves
[   77.544107][   T13] hsr_slave_0: left promiscuous mode
[   77.546449][   T13] hsr_slave_1: left promiscuous mode
[   77.548912][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.551696][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.554470][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.556814][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.588525][   T13] veth1_macvtap: left promiscuous mode
[   77.591403][   T13] veth0_macvtap: left promiscuous mode
[   77.593877][   T13] veth1_vlan: left promiscuous mode
[   77.596187][   T13] veth0_vlan: left promiscuous mode
[   77.688437][   T13] team0 (unregistering): Port device team_slave_1 removed
[   77.704205][   T13] team0 (unregistering): Port device team_slave_0 removed
[   81.189560][  T790] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
01:21:39  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000002cb4 RDI=0000000000002cb5 RBP=00000000000003f8 RSP=ffffc90002b7df10
R8 =ffff888108af8237 R9 =1ffff1102115f046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac68ed R14=ffffffff99dcb760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd1a4dbf6c0 ffffffff 00c00000
GS =0000 ffff8880b864e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2f517ff8 CR3=0000000026ba6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81cf38bd ffffffff81744eb2
XMM02=00007f5fb7184478 ffffffff81744eb2 XMM03=00007f5fb7184488 00007f5fb7184480
XMM04=00007f5fb7ced100 00007f5fb7184440 XMM05=00007f5fb7184458 00007f5fb71844a0
XMM06=00007f5fb7184498 00007f5fb7184490 XMM07=00007f5fb7184488 00007f5fb7184480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f5fb7011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=54d90d6c9d24de00 RBX=ffffffff81974d58 RCX=54d90d6c9d24de00 RDX=0000000000000001
RSI=ffffffff8be28d20 RDI=ffffffff81974d58 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa129f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d9000
RIP=ffffffff8b66c4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c4e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2f41cff8 CR3=0000000028c82000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fb230011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
