last executing test programs:

1.279332912s ago: executing program 0 (id=957):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_int(r1, &(0x7f0000000140), 0xfffffdef)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000001140))

427.23485ms ago: executing program 2 (id=982):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt(r0, 0xff, 0x0, 0x0, 0x0)

346.85821ms ago: executing program 0 (id=983):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x47c94)

346.688771ms ago: executing program 2 (id=984):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x400, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0x6}, {0x0, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x800)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)

299.358421ms ago: executing program 0 (id=985):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10)

299.082597ms ago: executing program 2 (id=986):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000200cb116c004100000006000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48)

236.098752ms ago: executing program 0 (id=987):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000001040103000000000000000003000001060006410004000006000640000000000500010001000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40048d0)

235.909667ms ago: executing program 2 (id=988):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x850}, 0x0)

138.202056ms ago: executing program 0 (id=990):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={<r1=>0x0}, &(0x7f0000000880)=0x8)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}}], 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x17, &(0x7f0000001140)=@sack_info={r1, 0xef, 0x6}, 0xc)

138.042502ms ago: executing program 1 (id=991):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000280), r2)
getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x34, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)

137.845401ms ago: executing program 2 (id=992):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x6d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

137.547643ms ago: executing program 1 (id=993):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="620f", 0x2}], 0x1}}], 0x2, 0x0)
close(r0)

78.479915ms ago: executing program 1 (id=994):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)

77.167022ms ago: executing program 1 (id=995):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB=','], 0x8)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="1400000016000b63d2030000000000000724fc60", 0x14}], 0x1}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30, 0x0, 0xa3}, 0x9c)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r2, &(0x7f0000847fff)='R', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x100000, @local}, 0x1c)
shutdown(r2, 0x2)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001900)={0x144, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x23}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x59, 0xfa, "f989715d26f1c74aba4245a2d2be2d07c04a985f04518965586012de0d5d3efa6ff6abcfdb8a9dffa40813169bfeecadf6cf930c87a3ecb389568831d395e481ca663e356f42dd990efacb6d19e0025580efeef736"}, @NL80211_ATTR_FILS_ERP_RRK={0x32, 0xfc, "b5a56461e99311a8b6d647b21ec7abf244bf78a5aff448b5979f14c00e76f93c3ecec9d84b5747b74b978965d323"}, @NL80211_ATTR_FILS_ERP_REALM={0x4}, @NL80211_ATTR_FILS_ERP_REALM={0x8e, 0xfa, "eb8bc5122e996c8b923dd135e82b774c89f19ede6caef6a01d8a8acd79fe7f6b6d4cca528dcf4a13baf15d02e4caae6845aa734f64ecf787258b6c9e4986816a2114e79ed0e805ad15069ddf2685fb76f236e63b500b2e2204911b8ee153dbd1514be2d90ee00b98cf76499c07880778dfa30e079d76c459b0cfc770f436cb3a35a93e053a3df417983a"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @private0, 0x80000}}}, 0x80, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x1}], 0x1}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x40801)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001cc0)={'wpan4\x00'})

76.94951ms ago: executing program 0 (id=996):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001b147df80000000000000000090002007379983268"], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4)

75.166399ms ago: executing program 2 (id=997):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280)=0x60, 0x2)

150.789µs ago: executing program 1 (id=998):
syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0x1000000, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0)

0s ago: executing program 1 (id=999):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43854' (ED25519) to the list of known hosts.
syzkaller login: [   56.012304][ T5807] cgroup: Unknown subsys name 'net'
[   56.145973][ T5807] cgroup: Unknown subsys name 'cpuset'
[   56.152276][ T5807] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.626231][ T5807] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.933379][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.629752][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.634612][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.637687][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.643437][ T5883] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.646767][ T5883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.649747][ T5883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.679957][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.683558][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.687045][ T5883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.711344][ T5883] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.746876][ T5883] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.751873][ T5883] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.755508][ T5883] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.762633][ T5883] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.766439][ T5883] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.157765][ T5880] chnl_net:caif_netlink_parms(): no params data found
[   70.168656][ T5877] chnl_net:caif_netlink_parms(): no params data found
[   70.235200][ T5884] chnl_net:caif_netlink_parms(): no params data found
[   70.324427][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.327887][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.330954][ T5880] bridge_slave_0: entered allmulticast mode
[   70.334113][ T5880] bridge_slave_0: entered promiscuous mode
[   70.365891][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.368945][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.372793][ T5880] bridge_slave_1: entered allmulticast mode
[   70.376938][ T5880] bridge_slave_1: entered promiscuous mode
[   70.417017][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.420654][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.423703][ T5877] bridge_slave_0: entered allmulticast mode
[   70.427569][ T5877] bridge_slave_0: entered promiscuous mode
[   70.444632][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.461859][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.464570][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.467013][ T5877] bridge_slave_1: entered allmulticast mode
[   70.470136][ T5877] bridge_slave_1: entered promiscuous mode
[   70.475602][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.511744][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.514330][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.517522][ T5884] bridge_slave_0: entered allmulticast mode
[   70.522306][ T5884] bridge_slave_0: entered promiscuous mode
[   70.543755][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.562928][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.566181][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.569876][ T5884] bridge_slave_1: entered allmulticast mode
[   70.573750][ T5884] bridge_slave_1: entered promiscuous mode
[   70.581025][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.586705][ T5880] team0: Port device team_slave_0 added
[   70.615448][ T5880] team0: Port device team_slave_1 added
[   70.643365][ T5877] team0: Port device team_slave_0 added
[   70.661933][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.667339][ T5877] team0: Port device team_slave_1 added
[   70.683516][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.686259][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.697951][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.706171][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.725556][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.728566][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.739423][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.744686][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.746924][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.756912][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.775471][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.778278][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.789432][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.822437][ T5884] team0: Port device team_slave_0 added
[   70.828431][ T5884] team0: Port device team_slave_1 added
[   70.912605][ T5880] hsr_slave_0: entered promiscuous mode
[   70.915243][ T5880] hsr_slave_1: entered promiscuous mode
[   70.918691][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.923880][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.936171][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.948959][ T5877] hsr_slave_0: entered promiscuous mode
[   70.952740][ T5877] hsr_slave_1: entered promiscuous mode
[   70.956000][ T5877] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.960027][ T5877] Cannot create hsr debugfs directory
[   70.964336][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.967656][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.980246][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.109796][ T5884] hsr_slave_0: entered promiscuous mode
[   71.113679][ T5884] hsr_slave_1: entered promiscuous mode
[   71.117307][ T5884] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.122471][ T5884] Cannot create hsr debugfs directory
[   71.275249][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.277980][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.375893][ T5880] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.398109][ T5880] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.408340][ T5880] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.417258][ T5880] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.475806][ T5877] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.483161][ T5877] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.492261][ T5877] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.501827][ T5877] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.563260][ T5884] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.581047][ T5884] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.588497][ T5884] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.604003][ T5884] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.679921][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.713416][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.722573][ T5880] 8021q: adding VLAN 0 to HW filter on device team0
[   71.736416][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.739731][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.750461][ T5883] Bluetooth: hci0: command tx timeout
[   71.752832][ T5879] Bluetooth: hci1: command tx timeout
[   71.768899][ T5877] 8021q: adding VLAN 0 to HW filter on device team0
[   71.774703][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.777481][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.801707][ T4406] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.804762][ T4406] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.830398][ T5879] Bluetooth: hci2: command tx timeout
[   71.834936][ T4406] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.838143][ T4406] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.854456][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.908330][ T5884] 8021q: adding VLAN 0 to HW filter on device team0
[   71.926777][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.930134][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.944651][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.947246][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.027891][ T5884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.141409][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.157471][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.207128][ T5877] veth0_vlan: entered promiscuous mode
[   72.228861][ T5877] veth1_vlan: entered promiscuous mode
[   72.245114][ T5880] veth0_vlan: entered promiscuous mode
[   72.268121][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.273637][ T5880] veth1_vlan: entered promiscuous mode
[   72.295341][ T5877] veth0_macvtap: entered promiscuous mode
[   72.316925][ T5877] veth1_macvtap: entered promiscuous mode
[   72.352146][ T5884] veth0_vlan: entered promiscuous mode
[   72.362312][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.371925][ T5880] veth0_macvtap: entered promiscuous mode
[   72.381610][ T5884] veth1_vlan: entered promiscuous mode
[   72.387168][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.395134][ T5880] veth1_macvtap: entered promiscuous mode
[   72.408486][ T5877] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.413303][ T5877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.417415][ T5877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.423339][ T5877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.480254][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.493580][ T5884] veth0_macvtap: entered promiscuous mode
[   72.507169][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.521005][ T5884] veth1_macvtap: entered promiscuous mode
[   72.546290][ T5880] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.550859][ T5880] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.553806][ T5880] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.556866][ T5880] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.578223][ T4406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.588480][ T4406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.611510][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.647373][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.662718][ T4406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.667135][ T4406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.674872][ T5884] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.678727][ T5884] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.682952][ T5884] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.686119][ T5884] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.728038][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.737434][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.819610][ T1283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.826886][ T1283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.880010][  T741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.883457][  T741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.966681][  T741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.981968][  T741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.101942][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'.
[   73.473702][ T5974] netlink: 'syz.2.36': attribute type 1 has an invalid length.
[   73.476985][ T5974] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.36'.
[   73.563158][ T5980] netlink: 'syz.0.38': attribute type 1 has an invalid length.
[   73.566800][ T5980] netlink: 'syz.0.38': attribute type 2 has an invalid length.
[   73.618402][ T5982] netlink: 32 bytes leftover after parsing attributes in process `syz.0.40'.
[   73.678116][ T5985] Cannot find add_set index 0 as target
[   73.745395][ T5989] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.766755][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'.
[   73.802193][ T5989] caif0: entered promiscuous mode
[   73.804654][ T5989] caif0: entered allmulticast mode
[   73.831871][ T5879] Bluetooth: hci1: command tx timeout
[   73.834389][ T5879] Bluetooth: hci0: command tx timeout
[   73.885192][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'.
[   73.888688][ T5993] netlink: 'syz.2.46': attribute type 1 has an invalid length.
[   73.909864][ T5883] Bluetooth: hci2: command tx timeout
[   74.253052][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'.
[   74.308331][ T6020] tap0: tun_chr_ioctl cmd 1074025677
[   74.315900][ T6020] tap0: linktype set to 270
[   74.460313][ T6027] netlink: 'syz.0.62': attribute type 16 has an invalid length.
[   74.463681][ T6027] netlink: 'syz.0.62': attribute type 17 has an invalid length.
[   74.557709][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.562636][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.707810][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.723719][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.818509][ T6027] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.826113][ T6027] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.830752][ T6027] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.834639][ T6027] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.907559][ T6040] netlink: 'syz.1.68': attribute type 1 has an invalid length.
[   74.917331][ T6040] netlink: 232 bytes leftover after parsing attributes in process `syz.1.68'.
[   74.921476][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'.
[   75.226133][ T6055] warning: `syz.1.73' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.413445][ T6067] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.79'.
[   75.614705][ T6083] netlink: 'syz.2.88': attribute type 2 has an invalid length.
[   75.909299][ T5883] Bluetooth: hci0: command tx timeout
[   75.912020][ T5883] Bluetooth: hci1: command tx timeout
[   75.989340][ T5879] Bluetooth: hci2: command tx timeout
[   76.585713][ T5877] cgroup: fork rejected by pids controller in /syz0
[   76.705481][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.111'.
[   77.012980][ T6143] netlink: 'syz.2.115': attribute type 12 has an invalid length.
[   77.017908][ T6143] netlink: 'syz.2.115': attribute type 3 has an invalid length.
[   77.135505][ T5883] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   77.143126][ T5883] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   77.148766][ T5883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   77.158570][ T5883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   77.163364][ T5883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   77.307415][ T5679] bridge_slave_1: left allmulticast mode
[   77.311649][ T5679] bridge_slave_1: left promiscuous mode
[   77.316564][ T5679] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.325986][ T5679] bridge_slave_0: left allmulticast mode
[   77.328672][ T5679] bridge_slave_0: left promiscuous mode
[   77.334043][ T5679] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.578418][ T5679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   77.584618][ T5679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   77.590340][ T5679] bond0 (unregistering): Released all slaves
[   77.989764][ T5883] Bluetooth: hci1: command tx timeout
[   78.069203][ T5883] Bluetooth: hci2: command tx timeout
[   78.077487][ T5679] hsr_slave_0: left promiscuous mode
[   78.100748][ T5679] hsr_slave_1: left promiscuous mode
[   78.104180][ T5679] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.120459][ T5679] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.467098][ T5679] team0 (unregistering): Port device team_slave_1 removed
[   78.470853][ T6201] __nla_validate_parse: 2 callbacks suppressed
[   78.470862][ T6201] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.131'.
[   78.494175][ T5679] team0 (unregistering): Port device team_slave_0 removed
[   78.530949][ T6203] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.758184][ T6154] chnl_net:caif_netlink_parms(): no params data found
[   79.068338][ T6154] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.083434][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.087184][ T6154] bridge_slave_0: entered allmulticast mode
[   79.106919][ T6154] bridge_slave_0: entered promiscuous mode
[   79.119279][ T6154] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.136927][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.144792][ T6154] bridge_slave_1: entered allmulticast mode
[   79.151720][ T6154] bridge_slave_1: entered promiscuous mode
[   79.189205][ T5883] Bluetooth: hci0: command tx timeout
[   79.286038][ T6154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.320635][ T6154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.327510][ T6222] syz.1.137 uses obsolete (PF_INET,SOCK_PACKET)
[   79.478022][ T6154] team0: Port device team_slave_0 added
[   79.495209][ T6154] team0: Port device team_slave_1 added
[   79.587382][ T6233] netlink: 'syz.2.140': attribute type 1 has an invalid length.
[   79.596243][ T6233] netlink: 'syz.2.140': attribute type 2 has an invalid length.
[   79.601690][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'.
[   79.608141][ T6154] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.618436][ T6154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.632713][ T6154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.691238][ T6154] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.694333][ T6154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.738688][ T6154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.911110][ T6154] hsr_slave_0: entered promiscuous mode
[   79.916546][ T6154] hsr_slave_1: entered promiscuous mode
[   79.921629][ T6154] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.925639][ T6154] Cannot create hsr debugfs directory
[   79.980400][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'.
[   80.252603][ T6262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.147'.
[   80.787464][ T6283] netlink: 'syz.2.154': attribute type 1 has an invalid length.
[   80.885006][ T6154] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   80.900820][ T6290] TCP: TCP_TX_DELAY enabled
[   80.902472][ T6154] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   80.923519][ T6154] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   80.932089][ T6154] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   81.083147][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'.
[   81.088741][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'.
[   81.117447][ T6154] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.148691][ T6154] 8021q: adding VLAN 0 to HW filter on device team0
[   81.168851][ T1283] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.172515][ T1283] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.213217][ T1283] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.216353][ T1283] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.269905][ T5883] Bluetooth: hci0: command tx timeout
[   81.326838][ T6154] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.527416][ T6154] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.616701][ T6154] veth0_vlan: entered promiscuous mode
[   81.643229][ T6154] veth1_vlan: entered promiscuous mode
[   81.689246][ T6154] veth0_macvtap: entered promiscuous mode
[   81.718207][ T6154] veth1_macvtap: entered promiscuous mode
[   81.745741][ T6154] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.761186][ T6154] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.766931][ T6154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.789340][ T6154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.792770][ T6154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.796736][ T6154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.843333][ T6349] netlink: 56 bytes leftover after parsing attributes in process `syz.2.172'.
[   81.848734][ T6349] netlink: 19 bytes leftover after parsing attributes in process `syz.2.172'.
[   81.853884][ T6349] netlink: 19 bytes leftover after parsing attributes in process `syz.2.172'.
[   81.935933][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.938629][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.974928][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.990525][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.136638][ T6365] netlink: 'syz.0.113': attribute type 8 has an invalid length.
[   82.158761][   T33] audit: type=1800 audit(1752683355.134:2): pid=6367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.178" name="memory.events" dev="tmpfs" ino=260 res=0 errno=0
[   82.193706][   T33] audit: type=1804 audit(1752683355.134:3): pid=6367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.178" name="/newroot/48/memory.events" dev="tmpfs" ino=260 res=1 errno=0
[   82.674473][ T6396] Zero length message leads to an empty skb
[   82.996536][ T6413] xt_hashlimit: size too large, truncated to 1048576
[   83.136877][ T6419] netlink: 'syz.2.201': attribute type 4 has an invalid length.
[   83.145137][ T6419] netlink: 76 bytes leftover after parsing attributes in process `syz.2.201'.
[   83.349289][ T5883] Bluetooth: hci0: command tx timeout
[   83.502088][ T6435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.208'.
[   83.549442][ T6435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.208'.
[   83.792003][ T6453] netlink: 'syz.0.217': attribute type 29 has an invalid length.
[   83.814624][ T6453] netlink: 'syz.0.217': attribute type 29 has an invalid length.
[   83.824409][ T6453] netlink: 560 bytes leftover after parsing attributes in process `syz.0.217'.
[   84.096775][ T6475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.222'.
[   84.100897][ T6475] bond0: invalid ARP target 0.0.0.0 specified for addition
[   84.103249][ T6475] bond0: option arp_ip_target: invalid value (0)
[   84.274897][ T6486] netlink: 96 bytes leftover after parsing attributes in process `syz.0.227'.
[   84.281076][ T6473] netlink: 20 bytes leftover after parsing attributes in process `syz.1.223'.
[   84.291094][ T6486] vlan2: entered allmulticast mode
[   84.293187][ T6486] gretap0: entered allmulticast mode
[   84.562809][ T6492] ieee802154 phy0 wpan0: encryption failed: -22
[   85.427566][ T6544] netlink: 'syz.0.254': attribute type 5 has an invalid length.
[   85.431180][ T5883] Bluetooth: hci0: command tx timeout
[   85.742925][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'.
[   86.029628][ T6585] tipc: Started in network mode
[   86.031921][ T6585] tipc: Node identity 067b4c680eaf, cluster identity 4711
[   86.035267][ T6585] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.088288][ T6585] syzkaller0: entered promiscuous mode
[   86.107921][ T6585] syzkaller0: entered allmulticast mode
[   86.120071][ T6585] tipc: Resetting bearer <eth:syzkaller0>
[   86.141874][ T6584] tipc: Resetting bearer <eth:syzkaller0>
[   86.633217][   T47] cfg80211: failed to load regulatory.db
[   87.073526][ T6584] tipc: Disabling bearer <eth:syzkaller0>
[   87.197799][ T6605] netlink: 280 bytes leftover after parsing attributes in process `syz.2.273'.
[   87.884684][ T6654] netlink: 164 bytes leftover after parsing attributes in process `syz.2.291'.
[   88.186805][ T6678] netlink: 248 bytes leftover after parsing attributes in process `syz.2.303'.
[   88.379716][ T6679] syzkaller0: entered allmulticast mode
[   88.382374][ T6693] netlink: 'syz.0.306': attribute type 3 has an invalid length.
[   88.386499][ T6693] netlink: 'syz.0.306': attribute type 3 has an invalid length.
[   88.445211][ T6679] syzkaller0 (unregistering): left allmulticast mode
[   89.005215][ T6732] netlink: 9 bytes leftover after parsing attributes in process `syz.2.317'.
[   89.026497][ T6732] gretap0: entered promiscuous mode
[   89.096650][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'.
[   89.100548][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'.
[   89.390194][ T6763] netlink: 'syz.1.328': attribute type 39 has an invalid length.
[   89.413078][ T6763] veth0_macvtap: left promiscuous mode
[   89.815128][ T6790] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode
[   89.818104][ T6790] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   90.654420][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.344'.
[   91.160822][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.355'.
[   91.523977][ T6863] lo speed is unknown, defaulting to 1000
[   91.562448][ T6863] lo speed is unknown, defaulting to 1000
[   91.566925][ T6863] lo speed is unknown, defaulting to 1000
[   91.624583][ T6868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.897340][ T6863] infiniband syz0: set active
[   91.902373][ T5885] lo speed is unknown, defaulting to 1000
[   91.907162][ T6863] infiniband syz0: added lo
[   91.954228][ T6884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.374'.
[   91.967074][ T6863] RDS/IB: syz0: added
[   91.973426][ T6863] smc: adding ib device syz0 with port count 1
[   91.976262][ T6863] smc:    ib device syz0 port 1 has pnetid 
[   91.981142][ T5885] lo speed is unknown, defaulting to 1000
[   91.987252][ T6863] lo speed is unknown, defaulting to 1000
[   92.178077][ T6863] lo speed is unknown, defaulting to 1000
[   92.373216][ T6863] lo speed is unknown, defaulting to 1000
[   92.672445][ T6899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   92.691433][   T95] lo speed is unknown, defaulting to 1000
[   93.010081][ T6915] tipc: Started in network mode
[   93.012407][ T6915] tipc: Node identity be8c309bdce1, cluster identity 4711
[   93.014719][ T6915] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.023441][ T6915] syzkaller0: entered promiscuous mode
[   93.025443][ T6915] syzkaller0: entered allmulticast mode
[   93.048316][ T6915] tipc: Resetting bearer <eth:syzkaller0>
[   93.067437][ T6914] tipc: Resetting bearer <eth:syzkaller0>
[   93.080561][ T6914] tipc: Disabling bearer <eth:syzkaller0>
[   93.225548][ T6928] syzkaller1: entered promiscuous mode
[   93.227535][ T6928] syzkaller1: entered allmulticast mode
[   93.438350][ T6945] IPv6: addrconf: prefix option has invalid lifetime
[   93.488900][ T6948] netlink: 'syz.1.404': attribute type 1 has an invalid length.
[   93.537479][ T6948] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   93.553259][ T6948] bridge_slave_0: left allmulticast mode
[   93.557783][ T6948] bridge_slave_0: left promiscuous mode
[   93.563144][ T6948] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.572869][ T6948] bridge_slave_1: left allmulticast mode
[   93.577797][ T6948] bridge_slave_1: left promiscuous mode
[   93.587058][ T6948] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.606201][ T6948] bond0: (slave bond_slave_0): Releasing backup interface
[   93.618111][ T6948] bond0: (slave bond_slave_1): Releasing backup interface
[   93.640517][ T6948] team0: Port device team_slave_0 removed
[   93.653651][ T6948] team0: Port device team_slave_1 removed
[   93.657003][ T6948] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.661979][ T6948] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.667357][ T6948] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.671783][ T6948] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.684523][ T6948] bond1: (slave ip6gretap1): Releasing backup interface
[   93.718466][ T6958] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   93.722483][ T6958] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   93.735234][ T6958] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   93.870391][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'.
[   93.874205][ T6971] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[   93.878730][ T6971] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[   94.028826][ T6969] xt_hashlimit: size too large, truncated to 1048576
[   94.354682][ T7003] netlink: 'syz.2.426': attribute type 21 has an invalid length.
[   94.357951][ T7003] netlink: 128 bytes leftover after parsing attributes in process `syz.2.426'.
[   94.362747][ T7003] netlink: 3 bytes leftover after parsing attributes in process `syz.2.426'.
[   94.545999][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.431'.
[   94.794358][ T7021] syzkaller1: entered promiscuous mode
[   94.796363][ T7021] syzkaller1: entered allmulticast mode
[   94.886457][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'.
[   95.412364][ T7040] netlink: 'syz.2.441': attribute type 1 has an invalid length.
[   95.415641][ T7040] netlink: 244 bytes leftover after parsing attributes in process `syz.2.441'.
[   96.572254][ T7132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.484'.
[   96.679622][ T7142] netlink: 'syz.2.489': attribute type 2 has an invalid length.
[   96.757352][ T7148] trusted_key: syz.2.491 sent an empty control message without MSG_MORE.
[   96.864769][ T7160] netlink: 'syz.2.497': attribute type 1 has an invalid length.
[   96.867970][ T7160] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.905069][ T7163] Driver unsupported XDP return value 0 on prog  (id 78) dev N/A, expect packet loss!
[   96.975240][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'.
[   96.979473][ T7167] netlink: 32 bytes leftover after parsing attributes in process `syz.2.501'.
[   96.983268][ T7167] netlink: 336 bytes leftover after parsing attributes in process `syz.2.501'.
[   96.987105][ T7167] netlink: 32 bytes leftover after parsing attributes in process `syz.2.501'.
[   97.976743][ T7194] xt_CT: No such helper "snmp"
[   98.563137][ T7233] netlink: 'syz.1.530': attribute type 1 has an invalid length.
[   98.583624][ T7235] syzkaller1: entered promiscuous mode
[   98.589280][ T7235] syzkaller1: entered allmulticast mode
[   98.812956][ T7243] lo speed is unknown, defaulting to 1000
[   98.952179][ T7255] lo speed is unknown, defaulting to 1000
[   99.525162][ T7280] __nla_validate_parse: 4 callbacks suppressed
[   99.525178][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.549'.
[  100.675122][ T7322] veth0: entered promiscuous mode
[  100.678522][ T7322] veth0: left promiscuous mode
[  100.825457][   T47] hid-generic 0005:0B57:0001.0001: collection stack underflow
[  100.828430][   T47] hid-generic 0005:0B57:0001.0001: item 0 0 0 12 parsing failed
[  100.841147][   T47] hid-generic 0005:0B57:0001.0001: probe with driver hid-generic failed with error -22
[  101.155772][ T7339] netlink: 'syz.1.573': attribute type 16 has an invalid length.
[  101.169539][ T7339] netlink: 'syz.1.573': attribute type 17 has an invalid length.
[  101.220468][ T7339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.637133][ T7352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.576'.
[  101.830965][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'.
[  103.037282][ T7426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.609'.
[  103.502608][ T7454] lo: entered promiscuous mode
[  103.505055][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'.
[  103.759184][ T7472] delete_channel: no stack
[  103.882134][ T7453] lo: left promiscuous mode
[  103.933045][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.634'.
[  103.987736][ T7484] 8021q: adding VLAN 0 to HW filter on device bond2
[  104.024140][ T7484] macvlan2: entered promiscuous mode
[  104.026448][ T7484] macvlan2: entered allmulticast mode
[  104.030272][ T7484] bond_slave_0: entered promiscuous mode
[  104.033296][ T7484] bond_slave_1: entered promiscuous mode
[  104.036551][ T7484] bond0: entered allmulticast mode
[  104.038951][ T7484] bond_slave_0: entered allmulticast mode
[  104.042202][ T7484] bond_slave_1: entered allmulticast mode
[  104.044533][ T7484] bond0: entered promiscuous mode
[  104.047624][ T7484] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  104.054584][ T7484] bond2: (slave macvlan2): Enslaving as an active interface with an up link
[  104.292973][ T7508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.646'.
[  104.393683][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'.
[  105.036245][ T7535] veth3: entered promiscuous mode
[  105.762216][ T7554] netlink: 'syz.1.667': attribute type 3 has an invalid length.
[  105.765247][ T7554] netlink: 'syz.1.667': attribute type 1 has an invalid length.
[  105.768327][ T7554] netlink: 192 bytes leftover after parsing attributes in process `syz.1.667'.
[  105.788719][ T7554] NCSI netlink: No device for ifindex 0
[  105.854674][ T7556] ieee802154 phy0 wpan0: encryption failed: -22
[  105.931746][ T7564] veth0_to_bridge: entered promiscuous mode
[  105.939947][ T7562] veth0_to_bridge: left promiscuous mode
[  105.976770][ T7567] netlink: 164 bytes leftover after parsing attributes in process `syz.2.673'.
[  105.983777][ T7567] netlink: 164 bytes leftover after parsing attributes in process `syz.2.673'.
[  105.988234][ T7567] netlink: 60 bytes leftover after parsing attributes in process `syz.2.673'.
[  106.001167][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'.
[  106.014617][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'.
[  106.034549][ T7574] lo: entered allmulticast mode
[  106.041837][ T7574] lo: left allmulticast mode
[  106.202763][ T7586] tipc: Started in network mode
[  106.205492][ T7586] tipc: Node identity 42fa1afa599f, cluster identity 4711
[  106.217536][ T7586] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.223401][ T7586] syzkaller0: entered promiscuous mode
[  106.226009][ T7586] syzkaller0: entered allmulticast mode
[  106.249501][ T7586] tipc: Resetting bearer <eth:syzkaller0>
[  106.255167][ T7584] tipc: Resetting bearer <eth:syzkaller0>
[  106.268422][ T7584] tipc: Disabling bearer <eth:syzkaller0>
[  106.408519][ T7599] netlink: 14 bytes leftover after parsing attributes in process `syz.0.690'.
[  106.571852][ T7621] netlink: 'syz.2.699': attribute type 1 has an invalid length.
[  106.572621][ T7618] lo speed is unknown, defaulting to 1000
[  106.574375][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.699'.
[  106.696191][ T7629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.718404][ T7629] netlink: 'syz.0.696': attribute type 4 has an invalid length.
[  107.975861][ T7656] lo speed is unknown, defaulting to 1000
[  108.013406][ T7661] netlink: 36 bytes leftover after parsing attributes in process `syz.1.709'.
[  108.026679][ T7661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.709'.
[  108.145112][ T7667] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  108.675866][ T7687] ipt_rpfilter: unknown options
[  110.072304][ T7759] nbd: must specify at least one socket
[  110.145365][ T7765] ieee802154 phy0 wpan0: encryption failed: -22
[  110.273466][ T7775] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  110.280494][ T7775] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  110.497486][ T7792] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  110.999801][ T7823] netlink: 'syz.2.780': attribute type 10 has an invalid length.
[  111.007720][ T7823] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.011030][ T7823] batadv0: entered promiscuous mode
[  111.013375][ T7823] batadv0: entered allmulticast mode
[  111.016462][ T7823] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  111.065526][ T7827] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  111.433389][ T7849] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[  111.612862][ T7856] __nla_validate_parse: 3 callbacks suppressed
[  111.612877][ T7856] netlink: 64 bytes leftover after parsing attributes in process `syz.0.799'.
[  111.685343][ T7860] syzkaller1: entered promiscuous mode
[  111.691256][ T7860] syzkaller1: entered allmulticast mode
[  112.121810][ T7885] netlink: 24 bytes leftover after parsing attributes in process `syz.1.811'.
[  112.553181][ T7907] IPv6: sit1: Disabled Multicast RS
[  112.710531][ T7923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.830'.
[  112.777265][ T7931] SET target dimension over the limit!
[  113.003720][ T7952] netlink: 'syz.1.843': attribute type 1 has an invalid length.
[  113.115132][ T7962] netlink: 72 bytes leftover after parsing attributes in process `syz.2.848'.
[  113.120903][ T7962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.848'.
[  113.124672][ T7962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.848'.
[  113.472699][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.857'.
[  114.584754][ T8048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.885'.
[  114.848504][ T8072] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.897'.
[  114.852634][ T8072] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  114.860830][ T8070] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  115.037701][ T8039] Bluetooth: hci1: Opcode 0x0c20 failed: -4
[  115.364443][ T8112] netlink: 'syz.1.917': attribute type 12 has an invalid length.
[  115.368083][ T8112] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.917'.
[  115.477309][ T6356] IPVS: starting estimator thread 0...
[  115.589665][ T8118] IPVS: using max 48 ests per chain, 115200 per kthread
[  115.695117][ T8134] syzkaller0: entered promiscuous mode
[  115.697315][ T8134] syzkaller0: entered allmulticast mode
[  115.759678][ T8138] netlink: 'syz.1.929': attribute type 4 has an invalid length.
[  116.399427][ T5883] Bluetooth: hci1: command 0x0c20 tx timeout
[  117.431093][ T8217] __nla_validate_parse: 3 callbacks suppressed
[  117.431257][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.964'.
[  117.543710][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.968'.
[  117.624806][ T8230] netlink: 'syz.2.970': attribute type 33 has an invalid length.
[  117.627546][ T8230] netlink: 152 bytes leftover after parsing attributes in process `syz.2.970'.
[  117.835270][ T8242] netlink: 52 bytes leftover after parsing attributes in process `syz.2.976'.
[  117.931171][ T8246] tipc: Failed to remove unknown binding: 66,1,1/0:3117437897/3117437899
[  118.066278][ T8252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.981'.
[  118.157568][ T8259] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.211732][ T8261] dvmrp0: entered allmulticast mode
[  118.311120][ T8265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.987'.
[  118.360508][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.991'.
[  118.452134][ T8281] Bluetooth: MGMT ver 1.23
[  118.535163][ T8289] netlink: 'syz.1.999': attribute type 10 has an invalid length.
[  118.547614][ T8289] team0: Port device dummy0 added
[  118.555213][ T8289] netlink: 'syz.1.999': attribute type 10 has an invalid length.
[  118.561379][ T8289] 
[  118.562561][ T8289] ======================================================
[  118.565734][ T8289] WARNING: possible circular locking dependency detected
[  118.568728][ T8289] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  118.572789][ T8289] ------------------------------------------------------
[  118.575611][ T8289] syz.1.999/8289 is trying to acquire lock:
[  118.578203][ T8289] ffff8880335bce00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_device_event+0x182/0xa20
[  118.582306][ T8289] 
[  118.582306][ T8289] but task is already holding lock:
[  118.585189][ T8289] ffff888033688d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[  118.589673][ T8289] 
[  118.589673][ T8289] which lock already depends on the new lock.
[  118.589673][ T8289] 
[  118.594157][ T8289] 
[  118.594157][ T8289] the existing dependency chain (in reverse order) is:
[  118.597703][ T8289] 
[  118.597703][ T8289] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[  118.601342][ T8289]        lock_acquire+0x120/0x360
[  118.604053][ T8289]        __mutex_lock+0x182/0xe80
[  118.606681][ T8289]        dev_set_mtu+0x10e/0x260
[  118.609029][ T8289]        team_add_slave+0x8b8/0x2840
[  118.611293][ T8289]        do_set_master+0x533/0x6d0
[  118.613462][ T8289]        do_setlink+0xcf0/0x41c0
[  118.615556][ T8289]        rtnl_newlink+0x160b/0x1c70
[  118.617688][ T8289]        rtnetlink_rcv_msg+0x7cf/0xb70
[  118.619971][ T8289]        netlink_rcv_skb+0x208/0x470
[  118.622003][ T8289]        netlink_unicast+0x75c/0x8e0
[  118.623785][ T8289]        netlink_sendmsg+0x805/0xb30
[  118.625446][ T8289]        __sock_sendmsg+0x21c/0x270
[  118.627155][ T8289]        ____sys_sendmsg+0x505/0x830
[  118.628932][ T8289]        ___sys_sendmsg+0x21f/0x2a0
[  118.630839][ T8289]        __x64_sys_sendmsg+0x19b/0x260
[  118.633050][ T8289]        do_syscall_64+0xfa/0x3b0
[  118.634977][ T8289]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.637143][ T8289] 
[  118.637143][ T8289] -> #0 (team->team_lock_key#3){+.+.}-{4:4}:
[  118.639791][ T8289]        validate_chain+0xb9b/0x2140
[  118.641598][ T8289]        __lock_acquire+0xab9/0xd20
[  118.643387][ T8289]        lock_acquire+0x120/0x360
[  118.645190][ T8289]        __mutex_lock+0x182/0xe80
[  118.647141][ T8289]        team_device_event+0x182/0xa20
[  118.649566][ T8289]        notifier_call_chain+0x1b6/0x3e0
[  118.651755][ T8289]        __dev_notify_flags+0x18d/0x2e0
[  118.654082][ T8289]        netif_change_flags+0xe8/0x1a0
[  118.656352][ T8289]        do_setlink+0xc55/0x41c0
[  118.658711][ T8289]        rtnl_newlink+0x160b/0x1c70
[  118.661312][ T8289]        rtnetlink_rcv_msg+0x7cf/0xb70
[  118.663577][ T8289]        netlink_rcv_skb+0x208/0x470
[  118.665742][ T8289]        netlink_unicast+0x75c/0x8e0
[  118.667561][ T8289]        netlink_sendmsg+0x805/0xb30
[  118.669396][ T8289]        __sock_sendmsg+0x21c/0x270
[  118.671505][ T8289]        ____sys_sendmsg+0x505/0x830
[  118.674031][ T8289]        ___sys_sendmsg+0x21f/0x2a0
[  118.676107][ T8289]        __x64_sys_sendmsg+0x19b/0x260
[  118.677902][ T8289]        do_syscall_64+0xfa/0x3b0
[  118.679500][ T8289]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.681800][ T8289] 
[  118.681800][ T8289] other info that might help us debug this:
[  118.681800][ T8289] 
[  118.685425][ T8289]  Possible unsafe locking scenario:
[  118.685425][ T8289] 
[  118.688692][ T8289]        CPU0                    CPU1
[  118.690682][ T8289]        ----                    ----
[  118.692355][ T8289]   lock(&dev_instance_lock_key#3);
[  118.694047][ T8289]                                lock(team->team_lock_key#3);
[  118.696667][ T8289]                                lock(&dev_instance_lock_key#3);
[  118.699801][ T8289]   lock(team->team_lock_key#3);
[  118.701722][ T8289] 
[  118.701722][ T8289]  *** DEADLOCK ***
[  118.701722][ T8289] 
[  118.704574][ T8289] 2 locks held by syz.1.999/8289:
[  118.706300][ T8289]  #0: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  118.709709][ T8289]  #1: ffff888033688d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[  118.713431][ T8289] 
[  118.713431][ T8289] stack backtrace:
[  118.716140][ T8289] CPU: 0 UID: 0 PID: 8289 Comm: syz.1.999 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  118.716156][ T8289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  118.716164][ T8289] Call Trace:
[  118.716175][ T8289]  <TASK>
[  118.716181][ T8289]  dump_stack_lvl+0x189/0x250
[  118.716200][ T8289]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.716215][ T8289]  ? __pfx__printk+0x10/0x10
[  118.716231][ T8289]  ? print_lock_name+0xde/0x100
[  118.716248][ T8289]  print_circular_bug+0x2ee/0x310
[  118.716271][ T8289]  check_noncircular+0x134/0x160
[  118.716288][ T8289]  validate_chain+0xb9b/0x2140
[  118.716305][ T8289]  ? __lock_acquire+0xab9/0xd20
[  118.716320][ T8289]  __lock_acquire+0xab9/0xd20
[  118.716332][ T8289]  ? team_device_event+0x182/0xa20
[  118.716348][ T8289]  lock_acquire+0x120/0x360
[  118.716360][ T8289]  ? team_device_event+0x182/0xa20
[  118.716377][ T8289]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  118.716395][ T8289]  __mutex_lock+0x182/0xe80
[  118.716406][ T8289]  ? team_device_event+0x182/0xa20
[  118.716424][ T8289]  ? __try_to_del_timer_sync+0x34a/0x3a0
[  118.716440][ T8289]  ? team_device_event+0x182/0xa20
[  118.716455][ T8289]  ? __pfx___mutex_lock+0x10/0x10
[  118.716465][ T8289]  ? __timer_delete_sync+0x218/0x2d0
[  118.716482][ T8289]  team_device_event+0x182/0xa20
[  118.716496][ T8289]  notifier_call_chain+0x1b6/0x3e0
[  118.716513][ T8289]  __dev_notify_flags+0x18d/0x2e0
[  118.716529][ T8289]  ? __pfx___dev_notify_flags+0x10/0x10
[  118.716543][ T8289]  ? __dev_change_flags+0x4cc/0x6d0
[  118.716557][ T8289]  ? __pfx___dev_change_flags+0x10/0x10
[  118.716571][ T8289]  ? __pfx_console_unlock+0x10/0x10
[  118.716586][ T8289]  ? irq_work_queue+0xbc/0x140
[  118.716599][ T8289]  netif_change_flags+0xe8/0x1a0
[  118.716613][ T8289]  do_setlink+0xc55/0x41c0
[  118.716631][ T8289]  ? __pfx_do_setlink+0x10/0x10
[  118.716644][ T8289]  ? _printk+0xcf/0x120
[  118.716658][ T8289]  ? __pfx____ratelimit+0x10/0x10
[  118.716678][ T8289]  ? __lock_acquire+0xab9/0xd20
[  118.716691][ T8289]  ? __mutex_trylock_common+0x153/0x260
[  118.716706][ T8289]  ? __pfx___mutex_trylock_common+0x10/0x10
[  118.716721][ T8289]  ? rcu_is_watching+0x15/0xb0
[  118.716734][ T8289]  ? trace_contention_end+0x39/0x120
[  118.716749][ T8289]  ? __mutex_lock+0x330/0xe80
[  118.716761][ T8289]  ? __pfx_aa_get_newest_label+0x10/0x10
[  118.716777][ T8289]  ? rtnl_newlink+0x8db/0x1c70
[  118.716789][ T8289]  ? rcu_is_watching+0x15/0xb0
[  118.716803][ T8289]  ? __pfx___mutex_lock+0x10/0x10
[  118.716816][ T8289]  ? ns_capable+0x8a/0xf0
[  118.716830][ T8289]  ? rtnl_link_get_net_capable+0x16a/0x350
[  118.716844][ T8289]  rtnl_newlink+0x160b/0x1c70
[  118.716854][ T8289]  ? netlink_sendmsg+0x805/0xb30
[  118.716870][ T8289]  ? __pfx_rtnl_newlink+0x10/0x10
[  118.716885][ T8289]  ? kasan_quarantine_put+0xdd/0x220
[  118.716898][ T8289]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.716916][ T8289]  ? nlmon_xmit+0xb0/0x100
[  118.716928][ T8289]  ? kmem_cache_free+0x18f/0x400
[  118.716975][ T8289]  ? __local_bh_enable_ip+0x12d/0x1c0
[  118.716990][ T8289]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.717007][ T8289]  ? __local_bh_enable_ip+0x12d/0x1c0
[  118.717019][ T8289]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  118.717032][ T8289]  ? __dev_queue_xmit+0x27e/0x3a70
[  118.717050][ T8289]  ? __lock_acquire+0xab9/0xd20
[  118.717067][ T8289]  ? __pfx_rtnl_newlink+0x10/0x10
[  118.717078][ T8289]  rtnetlink_rcv_msg+0x7cf/0xb70
[  118.717091][ T8289]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  118.717102][ T8289]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  118.717113][ T8289]  ? ref_tracker_free+0x63a/0x7d0
[  118.717130][ T8289]  ? __copy_skb_header+0xa7/0x550
[  118.717144][ T8289]  ? __pfx_ref_tracker_free+0x10/0x10
[  118.717159][ T8289]  ? __skb_clone+0x63/0x7a0
[  118.717173][ T8289]  netlink_rcv_skb+0x208/0x470
[  118.717186][ T8289]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  118.717198][ T8289]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  118.717215][ T8289]  ? netlink_deliver_tap+0x2e/0x1b0
[  118.717227][ T8289]  ? netlink_deliver_tap+0x2e/0x1b0
[  118.717244][ T8289]  netlink_unicast+0x75c/0x8e0
[  118.717258][ T8289]  netlink_sendmsg+0x805/0xb30
[  118.717282][ T8289]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.717299][ T8289]  ? aa_sock_msg_perm+0x94/0x160
[  118.717317][ T8289]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  118.717335][ T8289]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.717349][ T8289]  __sock_sendmsg+0x21c/0x270
[  118.717361][ T8289]  ____sys_sendmsg+0x505/0x830
[  118.717377][ T8289]  ? __pfx_____sys_sendmsg+0x10/0x10
[  118.717394][ T8289]  ? import_iovec+0x74/0xa0
[  118.717409][ T8289]  ___sys_sendmsg+0x21f/0x2a0
[  118.717424][ T8289]  ? __pfx____sys_sendmsg+0x10/0x10
[  118.717447][ T8289]  ? __fget_files+0x2a/0x420
[  118.717463][ T8289]  ? __fget_files+0x3a0/0x420
[  118.717480][ T8289]  __x64_sys_sendmsg+0x19b/0x260
[  118.717496][ T8289]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  118.717511][ T8289]  ? rcu_is_watching+0x15/0xb0
[  118.717526][ T8289]  ? do_syscall_64+0xbe/0x3b0
[  118.717538][ T8289]  do_syscall_64+0xfa/0x3b0
[  118.717548][ T8289]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.717565][ T8289]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.717576][ T8289]  ? exc_page_fault+0x9f/0xf0
[  118.717592][ T8289]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.717604][ T8289] RIP: 0033:0x7f6473b8e929
[  118.717617][ T8289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.717627][ T8289] RSP: 002b:00007f6474940038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  118.717640][ T8289] RAX: ffffffffffffffda RBX: 00007f6473db5fa0 RCX: 00007f6473b8e929
[  118.717649][ T8289] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[  118.717657][ T8289] RBP: 00007f6473c10b39 R08: 0000000000000000 R09: 0000000000000000
[  118.717664][ T8289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  118.717671][ T8289] R13: 0000000000000000 R14: 00007f6473db5fa0 R15: 00007fff85a830f8
[  118.717681][ T8289]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  118.973310][ T8289] team0: Port device dummy0 removed
[  118.983015][ T8289] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  118.985762][ T8293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1001'.
[  118.989608][ T8293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1001'.
[  118.993436][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1001'.
[  119.156074][ T5679] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.203694][ T5679] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.281615][ T5679] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.384607][ T5679] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.600540][ T5679] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  119.604799][ T5679] bond0 (unregistering): Released all slaves
[  119.609262][ T5679] bond1 (unregistering): Released all slaves
[  119.663663][ T5679] tipc: Left network mode
[  119.847258][ T5679] hsr_slave_0: left promiscuous mode
[  119.856812][ T5679] hsr_slave_1: left promiscuous mode
[  119.860146][ T5679] veth1_macvtap: left promiscuous mode
[  119.861991][ T5679] veth1_vlan: left promiscuous mode
[  119.863690][ T5679] veth0_vlan: left promiscuous mode
[  120.102836][ T1087] smc: removing ib device syz0
[  120.105620][   T95] lo speed is unknown, defaulting to 1000
[  120.109049][   T95] syz0: Port: 1 Link DOWN
[  120.363475][ T5679] IPVS: stop unused estimator thread 0...
[  120.424048][ T5679] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.484698][ T5679] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.554209][ T5679] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.622998][ T5679] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.703454][ T5679] bridge_slave_1: left allmulticast mode
[  120.706213][ T5679] bridge_slave_1: left promiscuous mode
[  120.710990][ T5679] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.715157][ T5679] bridge_slave_0: left allmulticast mode
[  120.717568][ T5679] bridge_slave_0: left promiscuous mode
[  120.721125][ T5679] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.794592][ T5679] dvmrp0 (unregistering): left allmulticast mode
[  120.886030][ T5679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.890089][ T5679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.894244][ T5679] bond0 (unregistering): Released all slaves
[  120.958289][ T5679] tipc: Left network mode
[  121.113013][ T5679] hsr_slave_0: left promiscuous mode
[  121.115290][ T5679] hsr_slave_1: left promiscuous mode
[  121.117471][ T5679] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.120247][ T5679] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.123224][ T5679] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.125649][ T5679] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.131476][ T5679] veth1_macvtap: left promiscuous mode
[  121.133429][ T5679] veth0_macvtap: left promiscuous mode
[  121.135200][ T5679] veth1_vlan: left promiscuous mode
[  121.136927][ T5679] veth0_vlan: left promiscuous mode
[  121.257972][ T5679] team0 (unregistering): Port device team_slave_1 removed
[  121.276292][ T5679] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
16:29:51  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000079 RBX=0000000000000079 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000002a07 RDI=0000000000002a08 RBP=00000000000003f8 RSP=ffffc90009e05f10
R8 =ffff888108130237 R9 =1ffff11021026046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98a4 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f64749406c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f08b9f74fc8 CR3=0000000021ee0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f08b9385478 00007f08b9385450 XMM03=00007f08b9385488 00007f08b9385480
XMM04=00007f08b9eed100 00007f08b9385440 XMM05=00007f08b9385458 00007f08b93854a0
XMM06=00007f08b9385498 00007f08b9385490 XMM07=00007f08b9385488 00007f08b9385480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f08b9211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4c210 RBX=ffff88813663b1c0 RCX=ffff88810829b980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000477f800 RSP=ffffc9000477f6a0
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4c1f9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f08b93b7bac CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f08b9385478 00007f08b9385450 XMM03=00007f08b9385488 00007f08b9385480
XMM04=00007f08b9eed100 00007f08b9385440 XMM05=00007f08b9385458 00007f08b93854a0
XMM06=00007f08b9385498 00007f08b9385490 XMM07=00007f08b9385488 00007f08b9385480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f08b9211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
