last executing test programs:

270.563636ms ago: executing program 1 (id=429):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8)

270.186758ms ago: executing program 0 (id=430):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000869}, 0x0)

269.924238ms ago: executing program 2 (id=431):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003780)=""/4097, 0x1001}, {&(0x7f00000002c0)=""/177, 0xb1}], 0x2}, 0x4}], 0x1, 0x40010000, 0x0)

269.682569ms ago: executing program 0 (id=432):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18)
sendto$inet6(r0, 0x0, 0xfff5, 0x4000000, &(0x7f0000000040)={0xa, 0x4e20, 0xa51, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfff7d}, 0x1c)

202.623985ms ago: executing program 2 (id=433):
syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x2000000000000199, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0)

202.38931ms ago: executing program 0 (id=434):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

202.280181ms ago: executing program 1 (id=435):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x70, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x70}}, 0x4008000)

202.177451ms ago: executing program 2 (id=436):
syz_emit_ethernet(0x3a, &(0x7f0000000240)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@end]}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}, 0x0)

138.214959ms ago: executing program 2 (id=437):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001c40)={&(0x7f0000000c00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@cswp={0x58, 0x114, 0x7, {{0x81, 0x37}, 0x0, 0x0, 0x497, 0x9c4, 0x9, 0x5, 0xc, 0x48}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0xc}}], 0x88, 0x810}, 0x0)

138.024398ms ago: executing program 1 (id=438):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

136.986792ms ago: executing program 0 (id=439):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000020000000900010073797a32000000000900030073797a30000000000900030073797a320000000009004dc87d4f649e177600000900010073797a32000000000900030073797a3200000000050004"], 0x70}}, 0xc800)

136.782717ms ago: executing program 1 (id=440):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000002b000701feffffff000000e3027c00000c00018008000600ffffffff100002800c0001"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)

131.89907ms ago: executing program 0 (id=441):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000004880)=@udp=r0}, 0x20)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x14f)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$cgroup_type(r2, &(0x7f0000000040), 0x9)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c)

57.610932ms ago: executing program 2 (id=442):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014f90000b7030004000000008500000000bc09f475150f0fce5bb857f211df0000000000010000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4)
recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)

57.312042ms ago: executing program 1 (id=443):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)})

56.899802ms ago: executing program 2 (id=444):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

147.246µs ago: executing program 0 (id=445):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
writev(r0, &(0x7f00000002c0), 0x2)

0s ago: executing program 1 (id=446):
socket(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:33050' (ED25519) to the list of known hosts.
syzkaller login: [   48.495301][ T5752] cgroup: Unknown subsys name 'net'
[   48.602373][ T5752] cgroup: Unknown subsys name 'cpuset'
[   48.607057][ T5752] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.914104][ T5752] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.997702][ T5839] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.302721][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   62.198605][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.203459][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.209413][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.217917][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.221874][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.281148][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.284867][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.288655][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.292346][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.295724][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.319783][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.323568][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.344215][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.350807][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.354434][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.531876][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   62.695223][ T5862] chnl_net:caif_netlink_parms(): no params data found
[   62.727485][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.731647][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.735021][ T5858] bridge_slave_0: entered allmulticast mode
[   62.740699][ T5858] bridge_slave_0: entered promiscuous mode
[   62.761097][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.764059][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.767062][ T5858] bridge_slave_1: entered allmulticast mode
[   62.771257][ T5858] bridge_slave_1: entered promiscuous mode
[   62.787047][ T5861] chnl_net:caif_netlink_parms(): no params data found
[   62.854833][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.884358][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.918584][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.921159][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.923460][ T5862] bridge_slave_0: entered allmulticast mode
[   62.926154][ T5862] bridge_slave_0: entered promiscuous mode
[   62.948620][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.952139][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.955106][ T5862] bridge_slave_1: entered allmulticast mode
[   62.958938][ T5862] bridge_slave_1: entered promiscuous mode
[   62.965368][ T5858] team0: Port device team_slave_0 added
[   63.001843][ T5858] team0: Port device team_slave_1 added
[   63.033864][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.036801][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.041190][ T5861] bridge_slave_0: entered allmulticast mode
[   63.044144][ T5861] bridge_slave_0: entered promiscuous mode
[   63.050637][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.055409][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.061248][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.063709][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.074745][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.082082][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.084907][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.095222][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.100194][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.102918][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.105637][ T5861] bridge_slave_1: entered allmulticast mode
[   63.109012][ T5861] bridge_slave_1: entered promiscuous mode
[   63.175902][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.182815][ T5862] team0: Port device team_slave_0 added
[   63.186795][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.193160][ T5862] team0: Port device team_slave_1 added
[   63.218131][ T5858] hsr_slave_0: entered promiscuous mode
[   63.221313][ T5858] hsr_slave_1: entered promiscuous mode
[   63.273592][ T5861] team0: Port device team_slave_0 added
[   63.291039][ T5861] team0: Port device team_slave_1 added
[   63.293286][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.295457][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.304935][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.343450][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.345842][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.355042][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.372004][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.374850][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.385358][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.404118][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.406943][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.417796][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.466656][ T5862] hsr_slave_0: entered promiscuous mode
[   63.470770][ T5862] hsr_slave_1: entered promiscuous mode
[   63.473032][ T5862] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.475587][ T5862] Cannot create hsr debugfs directory
[   63.529683][ T5861] hsr_slave_0: entered promiscuous mode
[   63.532807][ T5861] hsr_slave_1: entered promiscuous mode
[   63.535687][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.538764][ T5861] Cannot create hsr debugfs directory
[   63.718287][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.735243][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.756957][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.781192][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.857568][ T5862] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.863007][ T5862] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.881474][ T5862] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.898671][ T5862] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.954843][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.968323][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.980760][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.987491][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.048151][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.080624][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   64.101888][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.105027][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.133483][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.136403][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.144499][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.192386][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   64.211156][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.214194][ T1267] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.228607][ T1267] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.231089][ T1267] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.256359][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.266864][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.281146][ T5860] Bluetooth: hci0: command tx timeout
[   64.319903][ T5861] 8021q: adding VLAN 0 to HW filter on device team0
[   64.349273][ T5860] Bluetooth: hci1: command tx timeout
[   64.353367][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.356449][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.368556][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.371810][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.439496][ T5860] Bluetooth: hci2: command tx timeout
[   64.484063][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.565994][ T5858] veth0_vlan: entered promiscuous mode
[   64.586793][ T5858] veth1_vlan: entered promiscuous mode
[   64.616167][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.637628][ T5858] veth0_macvtap: entered promiscuous mode
[   64.648994][ T5858] veth1_macvtap: entered promiscuous mode
[   64.656979][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.698037][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.702394][ T5861] veth0_vlan: entered promiscuous mode
[   64.707452][ T5861] veth1_vlan: entered promiscuous mode
[   64.723685][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.737328][ T5858] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.740902][ T5858] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.743810][ T5858] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.746758][ T5858] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.775242][ T5862] veth0_vlan: entered promiscuous mode
[   64.815196][ T5862] veth1_vlan: entered promiscuous mode
[   64.823140][ T5861] veth0_macvtap: entered promiscuous mode
[   64.845325][ T5861] veth1_macvtap: entered promiscuous mode
[   64.868447][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.875388][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.882590][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.921885][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.926204][ T5862] veth0_macvtap: entered promiscuous mode
[   64.936680][ T5861] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.942393][ T5861] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.945799][ T5861] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.950321][ T5861] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.956886][ T5862] veth1_macvtap: entered promiscuous mode
[   64.960990][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.964602][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.988127][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.015752][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.041066][ T5862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.044089][ T5862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.046939][ T5862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.063099][ T5862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.101999][ T5922] netlink: 26 bytes leftover after parsing attributes in process `syz.1.18'.
[   65.119977][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.135262][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.204420][ T5927] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21'.
[   65.209311][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.215883][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.246585][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.257179][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.303221][  T303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.306286][  T303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.468848][ T5941] netlink: 'syz.0.26': attribute type 4 has an invalid length.
[   65.478453][ T5941] netlink: 'syz.0.26': attribute type 4 has an invalid length.
[   65.578249][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'.
[   65.824213][ T5965] Driver unsupported XDP return value 0 on prog  (id 3) dev N/A, expect packet loss!
[   65.889138][ T5967] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[   66.337463][ T6000] nbd: couldn't find device at index 536870912
[   66.352981][ T5860] Bluetooth: hci0: command tx timeout
[   66.431492][ T5860] Bluetooth: hci1: command tx timeout
[   66.509884][ T5860] Bluetooth: hci2: command tx timeout
[   66.604157][ T6019] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.013718][ T6088] af_packet: tpacket_rcv: packet too big, clamped from 1480 to 4294967272. macoff=96
[   68.073018][ T6090] bridge_slave_0: left allmulticast mode
[   68.075615][ T6090] bridge_slave_0: left promiscuous mode
[   68.079287][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.088034][ T6090] bridge_slave_1: left allmulticast mode
[   68.094762][ T6090] bridge_slave_1: left promiscuous mode
[   68.097447][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.106398][ T6090] bond0: (slave bond_slave_0): Releasing backup interface
[   68.117063][ T6090] bond0: (slave bond_slave_1): Releasing backup interface
[   68.137211][ T6090] team0: Port device team_slave_0 removed
[   68.148327][ T6090] team0: Port device team_slave_1 removed
[   68.152882][ T6090] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.156024][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.162222][ T6090] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.165385][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.421579][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'.
[   68.431151][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'.
[   68.439735][ T5860] Bluetooth: hci0: command tx timeout
[   68.519751][ T5860] Bluetooth: hci1: command tx timeout
[   68.589809][ T5860] Bluetooth: hci2: command tx timeout
[   69.160298][ T6148] Bluetooth: MGMT ver 1.23
[   69.708364][ T6184] netlink: 168 bytes leftover after parsing attributes in process `syz.1.130'.
[   70.308679][ T6221] raw_sendmsg: syz.2.144 forgot to set AF_INET. Fix it!
[   70.520884][ T5860] Bluetooth: hci0: command tx timeout
[   70.594252][ T5860] Bluetooth: hci1: command tx timeout
[   70.679273][ T5860] Bluetooth: hci2: command tx timeout
[   71.100089][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.103018][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.704765][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'.
[   71.935566][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'.
[   71.944931][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'.
[   71.984134][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'.
[   72.199411][ T6302] netlink: 'syz.0.178': attribute type 1 has an invalid length.
[   72.237252][ T6304] netlink: 'syz.0.179': attribute type 10 has an invalid length.
[   72.247486][ T6304] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.253665][ T6304] bridge_slave_1: left allmulticast mode
[   72.256066][ T6304] bridge_slave_1: left promiscuous mode
[   72.258524][ T6304] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.271309][ T6304] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   72.384799][ T6312] netlink: 'syz.0.183': attribute type 11 has an invalid length.
[   72.587062][ T6325] ieee802154 phy0 wpan0: encryption failed: -90
[   72.702558][ T6336] netlink: 44 bytes leftover after parsing attributes in process `syz.1.194'.
[   72.706174][ T6336] netlink: 43 bytes leftover after parsing attributes in process `syz.1.194'.
[   72.709008][ T6336] netlink: 'syz.1.194': attribute type 6 has an invalid length.
[   72.713971][ T6336] netlink: 'syz.1.194': attribute type 5 has an invalid length.
[   72.716435][ T6336] netlink: 43 bytes leftover after parsing attributes in process `syz.1.194'.
[   72.741170][ T6333] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.751186][ T6333] bond0: (slave bond1): Enslaving as an active interface with an up link
[   72.811380][ T6341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.196'.
[   72.907201][ T6350] lo: entered promiscuous mode
[   72.931445][ T6350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   73.008972][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'.
[   73.016218][ T6360] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.094697][ T6368] tls_set_device_offload_rx: netdev not found
[   73.620297][ T6397] syz.2.220 uses obsolete (PF_INET,SOCK_PACKET)
[   73.681379][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'.
[   74.242373][ T6425] syz_tun: entered promiscuous mode
[   74.454817][ T6446] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received
[   74.531691][ T6454] netlink: 'syz.1.242': attribute type 9 has an invalid length.
[   74.542290][ T6454] hsr0: entered promiscuous mode
[   74.547672][ T6454] macvlan2: entered promiscuous mode
[   74.550836][ T6454] macvlan2: entered allmulticast mode
[   74.553204][ T6454] hsr0: entered allmulticast mode
[   74.555328][ T6454] hsr_slave_0: entered allmulticast mode
[   74.557684][ T6454] hsr_slave_1: entered allmulticast mode
[   74.728871][ T6446] syz.1.242 (6446) used greatest stack depth: 20184 bytes left
[   75.184882][ T6519] veth0_to_bridge: entered promiscuous mode
[   75.188155][ T6518] veth0_to_bridge: left promiscuous mode
[   75.723835][ T6567] syzkaller0: entered promiscuous mode
[   75.726308][ T6567] syzkaller0: entered allmulticast mode
[   76.104677][ T6596] warning: `syz.1.312' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.114602][ T6596] netlink: 'syz.1.312': attribute type 1 has an invalid length.
[   76.224749][ T6598] xt_CT: No such helper "snmp"
[   77.438859][ T6622] __nla_validate_parse: 5 callbacks suppressed
[   77.438874][ T6622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.323'.
[   77.802857][ T6648] netlink: 'syz.2.336': attribute type 4 has an invalid length.
[   77.926120][ T6660] netlink: 56 bytes leftover after parsing attributes in process `syz.1.342'.
[   77.949336][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[   77.952082][ T5860] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   78.048907][ T6671] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input4
[   78.115802][ T6676] netlink: 'syz.0.349': attribute type 35 has an invalid length.
[   78.164433][ T6671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.346'.
[   78.200861][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'.
[   78.204758][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'.
[   78.217230][ T6682] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[   78.283537][ T6687] netlink: 'syz.2.354': attribute type 1 has an invalid length.
[   78.286864][ T6687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.357375][ T6693] netlink: 'syz.1.353': attribute type 13 has an invalid length.
[   78.368027][ T6693] netlink: 'syz.1.353': attribute type 17 has an invalid length.
[   78.378911][ T6693] lo: left promiscuous mode
[   78.531133][ T6693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   78.627877][ T6714] netlink: 56 bytes leftover after parsing attributes in process `syz.0.362'.
[   78.644783][ T6685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.645836][ T6716] netlink: 'syz.2.365': attribute type 1 has an invalid length.
[   78.654504][ T6716] netlink: 36 bytes leftover after parsing attributes in process `syz.2.365'.
[   78.740414][ T6685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.797930][ T6685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.211601][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'.
[   79.464088][ T6781] openvswitch: netlink: IP tunnel dst address not specified
[   80.046863][ T6807] netlink: 'syz.2.405': attribute type 1 has an invalid length.
[   80.051381][ T6807] netlink: 'syz.2.405': attribute type 2 has an invalid length.
[   80.073934][ T6807] netlink: 'syz.2.405': attribute type 1 has an invalid length.
[   80.077211][ T6807] netlink: 'syz.2.405': attribute type 2 has an invalid length.
[   80.195152][ T6809] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.406'.
[   80.204967][ T6813] ip6gretap1: entered promiscuous mode
[   80.476473][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.410'.
[   81.345114][   T24] cfg80211: failed to load regulatory.db
[   81.380554][ T6914] team0: Port device dummy0 added
[   81.383686][ T6914] 
[   81.384521][ T6914] ======================================================
[   81.386960][ T6914] WARNING: possible circular locking dependency detected
[   81.389641][ T6914] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   81.393300][ T6914] ------------------------------------------------------
[   81.396121][ T6914] syz.2.444/6914 is trying to acquire lock:
[   81.398526][ T6914] ffff8881244c4e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_device_event+0x182/0xa20
[   81.401796][ T6914] 
[   81.401796][ T6914] but task is already holding lock:
[   81.404227][ T6914] ffff888124578d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   81.407541][ T6914] 
[   81.407541][ T6914] which lock already depends on the new lock.
[   81.407541][ T6914] 
[   81.411155][ T6914] 
[   81.411155][ T6914] the existing dependency chain (in reverse order) is:
[   81.414361][ T6914] 
[   81.414361][ T6914] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[   81.417290][ T6914]        lock_acquire+0x120/0x360
[   81.419018][ T6914]        __mutex_lock+0x182/0xe80
[   81.420800][ T6914]        dev_set_mtu+0x10e/0x260
[   81.422685][ T6914]        team_add_slave+0x8b8/0x2840
[   81.424449][ T6914]        do_set_master+0x533/0x6d0
[   81.426141][ T6914]        do_setlink+0xcf0/0x41c0
[   81.427748][ T6914]        rtnl_newlink+0x160b/0x1c70
[   81.429505][ T6914]        rtnetlink_rcv_msg+0x7cf/0xb70
[   81.431538][ T6914]        netlink_rcv_skb+0x208/0x470
[   81.433667][ T6914]        netlink_unicast+0x75b/0x8d0
[   81.435520][ T6914]        netlink_sendmsg+0x805/0xb30
[   81.437357][ T6914]        __sock_sendmsg+0x21c/0x270
[   81.439145][ T6914]        ____sys_sendmsg+0x505/0x830
[   81.441058][ T6914]        ___sys_sendmsg+0x21f/0x2a0
[   81.443102][ T6914]        __x64_sys_sendmsg+0x19b/0x260
[   81.445018][ T6914]        do_syscall_64+0xfa/0x3b0
[   81.446696][ T6914]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.448950][ T6914] 
[   81.448950][ T6914] -> #0 (team->team_lock_key#2){+.+.}-{4:4}:
[   81.452060][ T6914]        validate_chain+0xb9b/0x2140
[   81.454018][ T6914]        __lock_acquire+0xab9/0xd20
[   81.455850][ T6914]        lock_acquire+0x120/0x360
[   81.457742][ T6914]        __mutex_lock+0x182/0xe80
[   81.459418][ T6914]        team_device_event+0x182/0xa20
[   81.461375][ T6914]        notifier_call_chain+0x1b6/0x3e0
[   81.463348][ T6914]        __dev_notify_flags+0x18d/0x2e0
[   81.465560][ T6914]        netif_change_flags+0xe8/0x1a0
[   81.467422][ T6914]        do_setlink+0xc55/0x41c0
[   81.469089][ T6914]        rtnl_newlink+0x160b/0x1c70
[   81.470828][ T6914]        rtnetlink_rcv_msg+0x7cf/0xb70
[   81.472630][ T6914]        netlink_rcv_skb+0x208/0x470
[   81.474417][ T6914]        netlink_unicast+0x75b/0x8d0
[   81.476191][ T6914]        netlink_sendmsg+0x805/0xb30
[   81.477992][ T6914]        __sock_sendmsg+0x21c/0x270
[   81.479755][ T6914]        ____sys_sendmsg+0x505/0x830
[   81.481494][ T6914]        ___sys_sendmsg+0x21f/0x2a0
[   81.483191][ T6914]        __x64_sys_sendmsg+0x19b/0x260
[   81.485000][ T6914]        do_syscall_64+0xfa/0x3b0
[   81.486663][ T6914]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.488809][ T6914] 
[   81.488809][ T6914] other info that might help us debug this:
[   81.488809][ T6914] 
[   81.492143][ T6914]  Possible unsafe locking scenario:
[   81.492143][ T6914] 
[   81.494607][ T6914]        CPU0                    CPU1
[   81.496372][ T6914]        ----                    ----
[   81.498190][ T6914]   lock(&dev_instance_lock_key#3);
[   81.499950][ T6914]                                lock(team->team_lock_key#2);
[   81.502400][ T6914]                                lock(&dev_instance_lock_key#3);
[   81.505181][ T6914]   lock(team->team_lock_key#2);
[   81.507059][ T6914] 
[   81.507059][ T6914]  *** DEADLOCK ***
[   81.507059][ T6914] 
[   81.509768][ T6914] 2 locks held by syz.2.444/6914:
[   81.511919][ T6914]  #0: ffffffff8f50ffc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[   81.515823][ T6914]  #1: ffff888124578d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   81.520115][ T6914] 
[   81.520115][ T6914] stack backtrace:
[   81.522643][ T6914] CPU: 0 UID: 0 PID: 6914 Comm: syz.2.444 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   81.522660][ T6914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.522670][ T6914] Call Trace:
[   81.522678][ T6914]  <TASK>
[   81.522685][ T6914]  dump_stack_lvl+0x189/0x250
[   81.522713][ T6914]  ? __pfx_dump_stack_lvl+0x10/0x10
[   81.522733][ T6914]  ? __pfx__printk+0x10/0x10
[   81.522749][ T6914]  ? print_lock_name+0xde/0x100
[   81.522768][ T6914]  print_circular_bug+0x2ee/0x310
[   81.522782][ T6914]  check_noncircular+0x134/0x160
[   81.522796][ T6914]  validate_chain+0xb9b/0x2140
[   81.522809][ T6914]  ? __lock_acquire+0xab9/0xd20
[   81.522829][ T6914]  __lock_acquire+0xab9/0xd20
[   81.522847][ T6914]  ? team_device_event+0x182/0xa20
[   81.522861][ T6914]  lock_acquire+0x120/0x360
[   81.522877][ T6914]  ? team_device_event+0x182/0xa20
[   81.522891][ T6914]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   81.522910][ T6914]  __mutex_lock+0x182/0xe80
[   81.522927][ T6914]  ? team_device_event+0x182/0xa20
[   81.522942][ T6914]  ? __try_to_del_timer_sync+0x34a/0x3a0
[   81.522955][ T6914]  ? team_device_event+0x182/0xa20
[   81.522968][ T6914]  ? __pfx___mutex_lock+0x10/0x10
[   81.522984][ T6914]  ? __timer_delete_sync+0x218/0x2d0
[   81.523003][ T6914]  team_device_event+0x182/0xa20
[   81.523017][ T6914]  notifier_call_chain+0x1b6/0x3e0
[   81.523038][ T6914]  __dev_notify_flags+0x18d/0x2e0
[   81.523054][ T6914]  ? __pfx___dev_notify_flags+0x10/0x10
[   81.523066][ T6914]  ? __dev_change_flags+0x4cc/0x6d0
[   81.523080][ T6914]  ? __pfx___dev_change_flags+0x10/0x10
[   81.523097][ T6914]  netif_change_flags+0xe8/0x1a0
[   81.523112][ T6914]  do_setlink+0xc55/0x41c0
[   81.523129][ T6914]  ? ___ratelimit+0x7c3/0xab0
[   81.523146][ T6914]  ? __pfx_do_setlink+0x10/0x10
[   81.523159][ T6914]  ? __pfx____ratelimit+0x10/0x10
[   81.523178][ T6914]  ? __lock_acquire+0xab9/0xd20
[   81.523195][ T6914]  ? __mutex_trylock_common+0x153/0x260
[   81.523210][ T6914]  ? __pfx___mutex_trylock_common+0x10/0x10
[   81.523225][ T6914]  ? rcu_is_watching+0x15/0xb0
[   81.523244][ T6914]  ? trace_contention_end+0x39/0x120
[   81.523256][ T6914]  ? __mutex_lock+0x330/0xe80
[   81.523274][ T6914]  ? __pfx_aa_get_newest_label+0x10/0x10
[   81.523291][ T6914]  ? rtnl_newlink+0x8db/0x1c70
[   81.523301][ T6914]  ? rcu_is_watching+0x15/0xb0
[   81.523319][ T6914]  ? __pfx___mutex_lock+0x10/0x10
[   81.523338][ T6914]  ? ns_capable+0x8a/0xf0
[   81.523355][ T6914]  ? rtnl_link_get_net_capable+0x16a/0x350
[   81.523369][ T6914]  rtnl_newlink+0x160b/0x1c70
[   81.523380][ T6914]  ? netlink_sendmsg+0x805/0xb30
[   81.523397][ T6914]  ? __pfx_rtnl_newlink+0x10/0x10
[   81.523415][ T6914]  ? kasan_quarantine_put+0xdd/0x220
[   81.523433][ T6914]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.523451][ T6914]  ? nlmon_xmit+0xb0/0x100
[   81.523466][ T6914]  ? kmem_cache_free+0x18f/0x400
[   81.523511][ T6914]  ? __local_bh_enable_ip+0x12d/0x1c0
[   81.523530][ T6914]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.523548][ T6914]  ? __local_bh_enable_ip+0x12d/0x1c0
[   81.523565][ T6914]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   81.523583][ T6914]  ? __dev_queue_xmit+0x27e/0x3a70
[   81.523604][ T6914]  ? __lock_acquire+0xab9/0xd20
[   81.523626][ T6914]  ? __pfx_rtnl_newlink+0x10/0x10
[   81.523637][ T6914]  rtnetlink_rcv_msg+0x7cf/0xb70
[   81.523650][ T6914]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   81.523660][ T6914]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   81.523670][ T6914]  ? ref_tracker_free+0x63a/0x7d0
[   81.523685][ T6914]  ? __copy_skb_header+0xa7/0x550
[   81.523700][ T6914]  ? __pfx_ref_tracker_free+0x10/0x10
[   81.523715][ T6914]  ? __skb_clone+0x63/0x7a0
[   81.523731][ T6914]  netlink_rcv_skb+0x208/0x470
[   81.523744][ T6914]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   81.523762][ T6914]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   81.523778][ T6914]  ? netlink_deliver_tap+0x2e/0x1b0
[   81.523790][ T6914]  ? netlink_deliver_tap+0x2e/0x1b0
[   81.523804][ T6914]  netlink_unicast+0x75b/0x8d0
[   81.523818][ T6914]  netlink_sendmsg+0x805/0xb30
[   81.523834][ T6914]  ? __pfx_netlink_sendmsg+0x10/0x10
[   81.523849][ T6914]  ? aa_sock_msg_perm+0x94/0x160
[   81.523864][ T6914]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   81.523881][ T6914]  ? __pfx_netlink_sendmsg+0x10/0x10
[   81.523894][ T6914]  __sock_sendmsg+0x21c/0x270
[   81.523913][ T6914]  ____sys_sendmsg+0x505/0x830
[   81.523928][ T6914]  ? __pfx_____sys_sendmsg+0x10/0x10
[   81.523944][ T6914]  ? import_iovec+0x74/0xa0
[   81.523956][ T6914]  ___sys_sendmsg+0x21f/0x2a0
[   81.523970][ T6914]  ? __pfx____sys_sendmsg+0x10/0x10
[   81.523994][ T6914]  ? __fget_files+0x2a/0x420
[   81.524006][ T6914]  ? __fget_files+0x3a0/0x420
[   81.524021][ T6914]  __x64_sys_sendmsg+0x19b/0x260
[   81.524035][ T6914]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   81.524052][ T6914]  ? rcu_is_watching+0x15/0xb0
[   81.524070][ T6914]  ? do_syscall_64+0xbe/0x3b0
[   81.524081][ T6914]  do_syscall_64+0xfa/0x3b0
[   81.524090][ T6914]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.524106][ T6914]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.524117][ T6914]  ? exc_page_fault+0x9f/0xf0
[   81.524133][ T6914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.524144][ T6914] RIP: 0033:0x7fbc7ef8e929
[   81.524158][ T6914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.524167][ T6914] RSP: 002b:00007fbc7fe9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   81.524181][ T6914] RAX: ffffffffffffffda RBX: 00007fbc7f1b5fa0 RCX: 00007fbc7ef8e929
[   81.524190][ T6914] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006
[   81.524198][ T6914] RBP: 00007fbc7f010b39 R08: 0000000000000000 R09: 0000000000000000
[   81.524205][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.524212][ T6914] R13: 0000000000000000 R14: 00007fbc7f1b5fa0 R15: 00007ffef7d728b8
[   81.524226][ T6914]  </TASK>
[   81.765102][ T6914] team0: Port device dummy0 removed
[   81.768368][ T6914] bond0: (slave dummy0): Enslaving as an active interface with an up link

VM DIAGNOSIS:
09:40:23  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006c RBX=000000000000006c RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000002880 RDI=0000000000002881 RBP=00000000000003f8 RSP=ffffc90004dddf10
R8 =ffff888021888237 R9 =1ffff11004311046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48e9 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbc7fe9a6c0 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c32f95b CR3=000000011012a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fbc7f184478 00007fbc7f184450 XMM03=00007fbc7f184488 00007fbc7f184480
XMM04=00007fbc7fced100 00007fbc7f184440 XMM05=00007fbc7f184458 00007fbc7f1844a0
XMM06=00007fbc7f184498 00007fbc7f184490 XMM07=00007fbc7f184488 00007fbc7f184480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fbc7f011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff888136632f58 RCX=dcde6048cf613f00 RDX=0000000000000000
RSI=ffffffff8be28d20 RDI=ffffffff8be28ce0 RBP=ffffc90004e67910 RSP=ffffc90004e677d8
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1f4219f
R12=0000000000000200 R13=ffffffff8997d628 R14=ffffffff8dba7c68 R15=dffffc0000000000
RIP=ffffffff81a7137a RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055555696d588 CR3=0000000028464000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007efcc1d84478 00007efcc1d84450 XMM03=00007efcc1d84488 00007efcc1d84480
XMM04=00007efcc28ed100 00007efcc1d84440 XMM05=00007efcc1d84458 00007efcc1d844a0
XMM06=00007efcc1d84498 00007efcc1d84490 XMM07=00007efcc1d84488 00007efcc1d84480
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007efcc1c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
