last executing test programs:

321.107921ms ago: executing program 2 (id=49):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@bridge_dellink={0x20, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x20}}, 0x0)

320.965801ms ago: executing program 2 (id=50):
unshare(0x26020480)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x749}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

270.968007ms ago: executing program 1 (id=52):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x7d, &(0x7f0000000080)="1af3050000f2bd5b", 0x8)

223.325555ms ago: executing program 1 (id=54):
r0 = socket(0x40000000015, 0x805, 0x0)
getsockname$packet(r0, 0x0, &(0x7f0000000080))

223.074759ms ago: executing program 2 (id=55):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)

173.83756ms ago: executing program 0 (id=56):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0xffffffff}}}, 0x10)

173.723855ms ago: executing program 1 (id=57):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
recvmmsg(r0, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x4a932a9659d613d6, 0x0)

173.220413ms ago: executing program 2 (id=58):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000), 0x8)
listen(r0, 0x0)
connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8)

112.085777ms ago: executing program 0 (id=59):
pipe(&(0x7f0000019480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000780)="92", 0x1}], 0x1}}], 0x1, 0x4008440)
close(r0)

111.756507ms ago: executing program 0 (id=60):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@dellinkprop={0x28, 0x6d, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x40480}, [@IFLA_MAP={0x0, 0xe, {0x0, 0xf, 0xe, 0x1000, 0x0, 0xd}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x4040000)

111.53132ms ago: executing program 1 (id=61):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

111.350103ms ago: executing program 2 (id=62):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x3, 0x80000000, 0x0, @empty, @remote, 0x8000, 0x60, 0x44f3e823, 0x7}})

53.407881ms ago: executing program 0 (id=63):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180))

53.11846ms ago: executing program 2 (id=64):
r0 = epoll_create1(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x3})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(r0, 0x0, 0x0, 0x2d516fb6, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400001400010a00000000000000000a00000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x804)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, r5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r6, 0x2000000, 0x1d, 0x0, &(0x7f0000000040)="13435c46632b5f1ef020bc6a5c73e4e71c9b050000000500080001d67be98c8b38e34bd008", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000200)=[{r7, 0x1}], 0x1, 0x0, 0x0, 0x3)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8}, 0x10)
bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)
mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff)
pipe(&(0x7f0000001540)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r10, 0x0)
splice(r10, 0x0, r9, 0x0, 0x406f413, 0x0)
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400)

52.852257ms ago: executing program 1 (id=65):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x3}, 0x6)
ioctl$sock_bt_hci(r0, 0x800448d5, 0x0)

379.027µs ago: executing program 0 (id=66):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1)
sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c890}, 0x20000000)

228.769µs ago: executing program 1 (id=67):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0)

0s ago: executing program 0 (id=68):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)='%', 0x1}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000000000008400000007"], 0x18}, 0x51)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:27983' (ED25519) to the list of known hosts.
syzkaller login: [   40.688758][ T5754] cgroup: Unknown subsys name 'net'
[   40.790031][ T5754] cgroup: Unknown subsys name 'cpuset'
[   40.794031][ T5754] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.075157][ T5754] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   51.593207][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   51.596366][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   51.609748][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   51.612978][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   51.615951][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   51.654021][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   51.658865][ T5219] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   51.661526][ T5219] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   51.664036][ T5219] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   51.666645][ T5219] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   51.669883][ T5219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   51.691141][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   51.697838][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   51.701114][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   51.703745][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   51.817373][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   51.944136][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.946585][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.949757][ T5857] bridge_slave_0: entered allmulticast mode
[   51.952591][ T5857] bridge_slave_0: entered promiscuous mode
[   51.961958][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.964243][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.966656][ T5857] bridge_slave_1: entered allmulticast mode
[   51.972671][ T5857] bridge_slave_1: entered promiscuous mode
[   52.005024][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.009710][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.038757][ T5857] team0: Port device team_slave_0 added
[   52.055772][ T5857] team0: Port device team_slave_1 added
[   52.105155][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.107301][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.118059][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.125344][ T5862] chnl_net:caif_netlink_parms(): no params data found
[   52.131735][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.133898][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.142198][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.149104][ T5860] chnl_net:caif_netlink_parms(): no params data found
[   52.213807][ T5857] hsr_slave_0: entered promiscuous mode
[   52.216003][ T5857] hsr_slave_1: entered promiscuous mode
[   52.276138][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.278742][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.281003][ T5860] bridge_slave_0: entered allmulticast mode
[   52.283710][ T5860] bridge_slave_0: entered promiscuous mode
[   52.286759][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.290402][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.292628][ T5860] bridge_slave_1: entered allmulticast mode
[   52.295205][ T5860] bridge_slave_1: entered promiscuous mode
[   52.297961][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.300548][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.302874][ T5862] bridge_slave_0: entered allmulticast mode
[   52.305731][ T5862] bridge_slave_0: entered promiscuous mode
[   52.309779][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.311957][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.314394][ T5862] bridge_slave_1: entered allmulticast mode
[   52.317158][ T5862] bridge_slave_1: entered promiscuous mode
[   52.373936][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.379145][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.386754][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.392326][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.439617][ T5860] team0: Port device team_slave_0 added
[   52.449815][ T5862] team0: Port device team_slave_0 added
[   52.455960][ T5862] team0: Port device team_slave_1 added
[   52.459438][ T5860] team0: Port device team_slave_1 added
[   52.508882][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.511034][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.519415][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.523078][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.525192][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.534185][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.541650][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.543737][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.551714][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.555527][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.558604][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.566171][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.602013][ T5860] hsr_slave_0: entered promiscuous mode
[   52.604837][ T5860] hsr_slave_1: entered promiscuous mode
[   52.607050][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.610653][ T5860] Cannot create hsr debugfs directory
[   52.654427][ T5862] hsr_slave_0: entered promiscuous mode
[   52.656707][ T5862] hsr_slave_1: entered promiscuous mode
[   52.659764][ T5862] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.662048][ T5862] Cannot create hsr debugfs directory
[   52.739859][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   52.758520][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   52.771719][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   52.777482][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   52.859383][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   52.869735][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   52.879964][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   52.898267][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   52.916848][ T5862] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   52.922514][ T5862] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   52.926648][ T5862] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   52.931678][ T5862] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   52.995664][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.023190][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   53.033828][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.038584][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.044303][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.046593][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.055732][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.058228][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.071905][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   53.077414][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[   53.086194][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.088518][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.102255][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.104502][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.114783][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.117070][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.122135][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.124304][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.268351][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.312166][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.316253][ T5862] veth0_vlan: entered promiscuous mode
[   53.330009][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.333927][ T5862] veth1_vlan: entered promiscuous mode
[   53.373091][ T5857] veth0_vlan: entered promiscuous mode
[   53.385584][ T5857] veth1_vlan: entered promiscuous mode
[   53.399763][ T5862] veth0_macvtap: entered promiscuous mode
[   53.405149][ T5862] veth1_macvtap: entered promiscuous mode
[   53.417004][ T5860] veth0_vlan: entered promiscuous mode
[   53.430741][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.435339][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.443053][ T5860] veth1_vlan: entered promiscuous mode
[   53.445700][ T5862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.449417][ T5862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.452271][ T5862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.454978][ T5862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.491264][ T5857] veth0_macvtap: entered promiscuous mode
[   53.499321][ T5857] veth1_macvtap: entered promiscuous mode
[   53.526616][ T5860] veth0_macvtap: entered promiscuous mode
[   53.530863][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.536430][  T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.536551][ T5860] veth1_macvtap: entered promiscuous mode
[   53.542332][  T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.548248][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.559247][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.572145][ T5857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.574796][ T5857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.577489][ T5857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.581306][ T5857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.585658][  T179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.587164][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.590780][  T179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.601896][ T5860] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.604601][ T5860] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.607261][ T5860] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.612897][ T5860] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.634768][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   53.678744][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.683076][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.698593][ T5863] Bluetooth: hci0: command tx timeout
[   53.712973][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.715413][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.732802][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.735944][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.765632][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.769260][ T5863] Bluetooth: hci2: command tx timeout
[   53.771827][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.777743][ T5863] Bluetooth: hci1: command tx timeout
[   54.632154][ T6002] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.856280][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'.
[   54.990525][ T6041] netlink: 'syz.1.67': attribute type 10 has an invalid length.
[   55.011398][ T6041] team0: Port device netdevsim0 added
[   55.016154][   T32] 
[   55.017020][   T32] ======================================================
[   55.019194][   T32] WARNING: possible circular locking dependency detected
[   55.021357][   T32] 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 Not tainted
[   55.024509][   T32] ------------------------------------------------------
[   55.026655][   T32] kworker/u9:1/32 is trying to acquire lock:
[   55.028556][   T32] ffff888033b1ce00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_device_event+0x544/0xa20
[   55.031726][   T32] 
[   55.031726][   T32] but task is already holding lock:
[   55.034061][   T32] ffff888036b54d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __linkwatch_run_queue+0x4a0/0x7e0
[   55.037302][   T32] 
[   55.037302][   T32] which lock already depends on the new lock.
[   55.037302][   T32] 
[   55.040550][   T32] 
[   55.040550][   T32] the existing dependency chain (in reverse order) is:
[   55.043280][   T32] 
[   55.043280][   T32] -> #1 (&dev_instance_lock_key#20){+.+.}-{4:4}:
[   55.045903][   T32]        lock_acquire+0x120/0x360
[   55.047559][   T32]        __mutex_lock+0x182/0xe80
[   55.049203][   T32]        dev_set_mtu+0x10e/0x260
[   55.050821][   T32]        team_add_slave+0x8b8/0x2840
[   55.052550][   T32]        do_set_master+0x533/0x6d0
[   55.054214][   T32]        do_setlink+0xcf0/0x41c0
[   55.055836][   T32]        rtnl_newlink+0x160b/0x1c70
[   55.057563][   T32]        rtnetlink_rcv_msg+0x7cf/0xb70
[   55.059335][   T32]        netlink_rcv_skb+0x208/0x470
[   55.061064][   T32]        netlink_unicast+0x75c/0x8e0
[   55.062820][   T32]        netlink_sendmsg+0x805/0xb30
[   55.064537][   T32]        __sock_sendmsg+0x21c/0x270
[   55.066234][   T32]        ____sys_sendmsg+0x505/0x830
[   55.067980][   T32]        ___sys_sendmsg+0x21f/0x2a0
[   55.069692][   T32]        __x64_sys_sendmsg+0x19b/0x260
[   55.071490][   T32]        do_syscall_64+0xfa/0x3b0
[   55.073113][   T32]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.075208][   T32] 
[   55.075208][   T32] -> #0 (team->team_lock_key#2){+.+.}-{4:4}:
[   55.077861][   T32]        validate_chain+0xb9b/0x2140
[   55.079609][   T32]        __lock_acquire+0xab9/0xd20
[   55.081311][   T32]        lock_acquire+0x120/0x360
[   55.082953][   T32]        __mutex_lock+0x182/0xe80
[   55.084564][   T32]        team_device_event+0x544/0xa20
[   55.086340][   T32]        notifier_call_chain+0x1b6/0x3e0
[   55.088159][   T32]        netif_state_change+0x284/0x3a0
[   55.089972][   T32]        linkwatch_do_dev+0x117/0x170
[   55.091738][   T32]        __linkwatch_run_queue+0x56d/0x7e0
[   55.093596][   T32]        linkwatch_event+0x4c/0x60
[   55.095176][   T32]        process_scheduled_works+0xae1/0x17b0
[   55.097072][   T32]        worker_thread+0x8a0/0xda0
[   55.098699][   T32]        kthread+0x711/0x8a0
[   55.100215][   T32]        ret_from_fork+0x3fc/0x770
[   55.101852][   T32]        ret_from_fork_asm+0x1a/0x30
[   55.103587][   T32] 
[   55.103587][   T32] other info that might help us debug this:
[   55.103587][   T32] 
[   55.106851][   T32]  Possible unsafe locking scenario:
[   55.106851][   T32] 
[   55.109242][   T32]        CPU0                    CPU1
[   55.110996][   T32]        ----                    ----
[   55.112747][   T32]   lock(&dev_instance_lock_key#20);
[   55.114484][   T32]                                lock(team->team_lock_key#2);
[   55.116894][   T32]                                lock(&dev_instance_lock_key#20);
[   55.119408][   T32]   lock(team->team_lock_key#2);
[   55.121050][   T32] 
[   55.121050][   T32]  *** DEADLOCK ***
[   55.121050][   T32] 
[   55.123664][   T32] 4 locks held by kworker/u9:1/32:
[   55.125296][   T32]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[   55.128948][   T32]  #1: ffffc9000066fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[   55.132334][   T32]  #2: ffffffff8f51bb48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[   55.135125][   T32]  #3: ffff888036b54d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __linkwatch_run_queue+0x4a0/0x7e0
[   55.138553][   T32] 
[   55.138553][   T32] stack backtrace:
[   55.140472][   T32] CPU: 0 UID: 0 PID: 32 Comm: kworker/u9:1 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[   55.140482][   T32] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   55.140488][   T32] Workqueue: events_unbound linkwatch_event
[   55.140497][   T32] Call Trace:
[   55.140500][   T32]  <TASK>
[   55.140504][   T32]  dump_stack_lvl+0x189/0x250
[   55.140515][   T32]  ? __pfx_dump_stack_lvl+0x10/0x10
[   55.140523][   T32]  ? __pfx__printk+0x10/0x10
[   55.140532][   T32]  ? print_lock_name+0xde/0x100
[   55.140542][   T32]  print_circular_bug+0x2ee/0x310
[   55.140557][   T32]  check_noncircular+0x134/0x160
[   55.140571][   T32]  validate_chain+0xb9b/0x2140
[   55.140583][   T32]  __lock_acquire+0xab9/0xd20
[   55.140591][   T32]  ? team_device_event+0x544/0xa20
[   55.140598][   T32]  lock_acquire+0x120/0x360
[   55.140604][   T32]  ? team_device_event+0x544/0xa20
[   55.140611][   T32]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   55.140624][   T32]  __mutex_lock+0x182/0xe80
[   55.140636][   T32]  ? team_device_event+0x544/0xa20
[   55.140643][   T32]  ? __try_to_del_timer_sync+0x34a/0x3a0
[   55.140658][   T32]  ? team_device_event+0x544/0xa20
[   55.140668][   T32]  ? __pfx___mutex_lock+0x10/0x10
[   55.140681][   T32]  ? fib_sync_down_dev+0x66/0x7b0
[   55.140694][   T32]  team_device_event+0x544/0xa20
[   55.140700][   T32]  notifier_call_chain+0x1b6/0x3e0
[   55.140710][   T32]  netif_state_change+0x284/0x3a0
[   55.140720][   T32]  ? __pfx_netif_state_change+0x10/0x10
[   55.140728][   T32]  ? dev_deactivate+0x129/0x1b0
[   55.140738][   T32]  ? nsim_get_iflink+0x20/0x280
[   55.140748][   T32]  ? rfc2863_policy+0x1c6/0x3e0
[   55.140759][   T32]  linkwatch_do_dev+0x117/0x170
[   55.140766][   T32]  __linkwatch_run_queue+0x56d/0x7e0
[   55.140773][   T32]  ? __pfx___linkwatch_run_queue+0x10/0x10
[   55.140779][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[   55.140789][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[   55.140800][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[   55.140812][   T32]  linkwatch_event+0x4c/0x60
[   55.140821][   T32]  process_scheduled_works+0xae1/0x17b0
[   55.140839][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[   55.140850][   T32]  worker_thread+0x8a0/0xda0
[   55.140861][   T32]  kthread+0x711/0x8a0
[   55.140871][   T32]  ? __pfx_worker_thread+0x10/0x10
[   55.140878][   T32]  ? __pfx_kthread+0x10/0x10
[   55.140888][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[   55.140898][   T32]  ? lockdep_hardirqs_on+0x9c/0x150
[   55.140905][   T32]  ? __pfx_kthread+0x10/0x10
[   55.140914][   T32]  ret_from_fork+0x3fc/0x770
[   55.140922][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[   55.140929][   T32]  ? __switch_to_asm+0x39/0x70
[   55.140938][   T32]  ? __switch_to_asm+0x33/0x70
[   55.140946][   T32]  ? __pfx_kthread+0x10/0x10
[   55.140956][   T32]  ret_from_fork_asm+0x1a/0x30
[   55.140967][   T32]  </TASK>
[   55.768096][ T5863] Bluetooth: hci0: command tx timeout
[   55.847631][ T5863] Bluetooth: hci1: command tx timeout
[   55.848260][   T54] Bluetooth: hci2: command tx timeout
[   57.847848][   T54] Bluetooth: hci0: command tx timeout
[   57.927725][ T5863] Bluetooth: hci1: command tx timeout
[   57.928238][   T54] Bluetooth: hci2: command tx timeout
[   59.927728][   T54] Bluetooth: hci0: command tx timeout
[   60.007686][   T54] Bluetooth: hci1: command tx timeout
[   60.017676][   T54] Bluetooth: hci2: command tx timeout

VM DIAGNOSIS:
08:02:39  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000072 RBX=0000000000000072 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000066ecb0
R8 =ffff888108998237 R9 =1ffff11021133046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee8ab R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6b223b7bac CR3=0000000028294000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6b22386478 00007f6b22386450 XMM03=00007f6b22386488 00007f6b22386480
XMM04=00007f6b22eed100 00007f6b22386440 XMM05=00007f6b22386458 00007f6b223864a0
XMM06=00007f6b22386498 00007f6b22386490 XMM07=00007f6b22386488 00007f6b22386480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f6b22211df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff894d4201 RBX=ffff888027bec480 RCX=ffffffff894d429d RDX=0000000000000001
RSI=0000000000000004 RDI=ffff888027bec564 RBP=0000000000000002 RSP=ffffc90003c3f6c0
R8 =ffff888027bec567 R9 =1ffff11004f7d8ac R10=dffffc0000000000 R11=ffffed1004f7d8ad
R12=ffff888027bec480 R13=1ffff92000787eec R14=ffff888027bec564 R15=dffffc0000000000
RIP=ffffffff894d42aa RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb95ba8f6c0 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000a6030 CR3=0000000107cd6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6b22386478 00007f6b22386450 XMM03=00007f6b22386488 00007f6b22386480
XMM04=00007f6b22eed100 00007f6b22386440 XMM05=00007f6b22386458 00007f6b223864a0
XMM06=00007f6b22386498 00007f6b22386490 XMM07=00007f6b22386488 00007f6b22386480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f6b22211df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
