last executing test programs:

4.669216214s ago: executing program 0 (id=78):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4)
sendmsg$inet(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)="87d9fe6311882d4069475f8f1b4ee374e8bfe63d39f1306c4cf85317321b667ae9", 0x21}], 0x1}, 0x20010080)

4.642112537s ago: executing program 0 (id=80):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000840)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x9)
ioctl$TUNSETOFFLOAD(r2, 0x400454cc, 0x1c)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x302)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="124a6930a9de005bfa000040020000000000000043217a08c2298dd5a1669d9da4a8ff980e57c72cfc9dafea1ea4bd913cd1640ced48f2d821c38c51becb89631c322f5dbc27ab4edecbd2e01760f1b32a673005af6c55d03600ba7b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32], 0x48)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

4.537377067s ago: executing program 0 (id=85):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x92, 0x1, 0x9, 0x0, 0x80000001, 0x1f1331, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x21ed000000000, 0x1}, 0x842, 0x5, 0x5, 0x9, 0x3, 0x8, 0x6, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x1)
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)

4.449651441s ago: executing program 0 (id=87):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x100002e, 0xfffffbff, 0x3, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4}, 0x94)

3.937716405s ago: executing program 2 (id=93):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

3.937151867s ago: executing program 2 (id=95):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x48}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.860603215s ago: executing program 2 (id=96):
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x4, 0xf7, 0xd0, 0x0, 0x0, 0x5, 0x480, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x211df764, 0x2, @perf_bp={0x0, 0x2}, 0x10, 0x5, 0x5, 0x9, 0x100000001, 0x6, 0x6, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x2)
r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002, 0xffff, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000400fd", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018320000030000000000000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x29, &(0x7f0000000200)=""/41, 0x0, 0x2, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000240)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xd, 0x1}, {0x5, 0x4, 0xb, 0xa}, {0x0, 0x2, 0x4, 0xf}], 0x10, 0xfffffffe}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
close(r1)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
close(r3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0xb}, 0x48)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
close(0xffffffffffffffff)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r5=>0x0})
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc}, 0x48)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)

3.86036967s ago: executing program 2 (id=97):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/95, 0x5f}, {&(0x7f00000037c0)=""/4057, 0xfd9}, {&(0x7f00000017c0)=""/4060, 0xfdc}, {&(0x7f0000000700)=""/228, 0xe4}, {&(0x7f00000002c0)=""/130, 0x82}, {&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000000540)=""/140, 0x8c}], 0x9}, 0x0)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)

3.71948069s ago: executing program 2 (id=100):
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
write$cgroup_int(r2, &(0x7f00000001c0)=0x60ff20038000, 0xfffffdef)

3.516512167s ago: executing program 0 (id=101):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c521c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

3.516145778s ago: executing program 2 (id=102):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)

3.42266563s ago: executing program 32 (id=102):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)

3.258426495s ago: executing program 0 (id=104):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

3.257932793s ago: executing program 33 (id=104):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

1.256518129s ago: executing program 1 (id=118):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)

666.119592ms ago: executing program 1 (id=119):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7feb, 0xc6200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, @perf_bp={0x0, 0x9}, 0x110114, 0x2e, 0xfffffbff, 0x7, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x8, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x8}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x2, 0x1, 0x100, &(0x7f0000000440))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000200)="7c3565838b4c5ef5faf03e02000000b24c5f18b1bfe51c8e077de74ed47af99f6467995f5ae72d2e7340d40a73b0706d4922be8000000000004d1accaffce0e15372ecb018815d5537d0ca089d782c7169", 0x0}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000700000005000000000000080300000002000000000000080100000000000000000000020000000000006100005f"], 0x0, 0x43}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r0, 0x8b14, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4}]}}, 0x0, 0x2a}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="1c0000001d008102e00f80ecdb4cb9f207c804a00d00000088081afb", 0x1c}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})

596.055228ms ago: executing program 1 (id=120):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28)

526.507623ms ago: executing program 1 (id=121):
r0 = socket$kcm(0x28, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000000), 0x4)

526.316493ms ago: executing program 1 (id=122):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xae6}, 0x1c125, 0x2e, 0xfffffbff, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x50, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3}, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0xfff, 0xbe, 0x1, 0x0, 0x1}, 0x63)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0xfc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8000000000}, 0x8002, 0x100003, 0x3, 0xfe8d42e69ac4daf8, 0xfff, 0xffffffff, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r2, 0x4}, 0x38)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})

0s ago: executing program 1 (id=123):
socket$kcm(0x25, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:46373' (ED25519) to the list of known hosts.
syzkaller login: [   40.822056][ T5757] cgroup: Unknown subsys name 'net'
[   40.892126][ T5757] cgroup: Unknown subsys name 'cpuset'
[   40.896489][ T5757] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.614486][ T5757] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.769505][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.772536][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.781863][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.787175][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.790029][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.864536][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.867655][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.870404][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.873398][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.879630][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.888508][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.896402][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.898813][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.902061][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.904947][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.038361][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   47.168856][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.171592][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.174021][ T5829] bridge_slave_0: entered allmulticast mode
[   47.176803][ T5829] bridge_slave_0: entered promiscuous mode
[   47.183226][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.185497][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.187750][ T5829] bridge_slave_1: entered allmulticast mode
[   47.192589][ T5829] bridge_slave_1: entered promiscuous mode
[   47.199210][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   47.229848][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   47.237072][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.241886][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.279578][ T5829] team0: Port device team_slave_0 added
[   47.291084][ T5829] team0: Port device team_slave_1 added
[   47.345596][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.347943][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.351109][ T5835] bridge_slave_0: entered allmulticast mode
[   47.353735][ T5835] bridge_slave_0: entered promiscuous mode
[   47.356787][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.358804][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.367142][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.383812][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.386488][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.389408][ T5835] bridge_slave_1: entered allmulticast mode
[   47.392955][ T5835] bridge_slave_1: entered promiscuous mode
[   47.396114][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.398296][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.406560][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.451575][ T5829] hsr_slave_0: entered promiscuous mode
[   47.453925][ T5829] hsr_slave_1: entered promiscuous mode
[   47.456482][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.460663][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.463993][ T5833] bridge_slave_0: entered allmulticast mode
[   47.467330][ T5833] bridge_slave_0: entered promiscuous mode
[   47.471337][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.474320][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.477423][ T5833] bridge_slave_1: entered allmulticast mode
[   47.481446][ T5833] bridge_slave_1: entered promiscuous mode
[   47.493521][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.515192][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.550493][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.567506][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.575590][ T5835] team0: Port device team_slave_0 added
[   47.590874][ T5835] team0: Port device team_slave_1 added
[   47.613330][ T5833] team0: Port device team_slave_0 added
[   47.630219][ T5833] team0: Port device team_slave_1 added
[   47.633122][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.635760][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.645760][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.679943][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.682632][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.692501][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.705712][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.707851][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.716882][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.752057][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.754252][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.762211][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.768692][ T5835] hsr_slave_0: entered promiscuous mode
[   47.773002][ T5835] hsr_slave_1: entered promiscuous mode
[   47.776258][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.779964][ T5835] Cannot create hsr debugfs directory
[   47.826367][ T5833] hsr_slave_0: entered promiscuous mode
[   47.828657][ T5833] hsr_slave_1: entered promiscuous mode
[   47.831299][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.833632][ T5833] Cannot create hsr debugfs directory
[   47.902459][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.915430][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.927806][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.951021][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.064684][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.081126][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.087552][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.102852][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.141146][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.143374][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.152959][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.161325][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.168641][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.185450][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   48.201309][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.203694][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.218913][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.221228][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.300625][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.326095][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   48.332153][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.340179][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.342956][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.357068][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   48.363998][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.366328][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.378356][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.380679][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.390598][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.392843][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.408610][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.483812][ T5829] veth0_vlan: entered promiscuous mode
[   48.503108][ T5829] veth1_vlan: entered promiscuous mode
[   48.543203][ T5829] veth0_macvtap: entered promiscuous mode
[   48.550840][ T5829] veth1_macvtap: entered promiscuous mode
[   48.566620][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.576535][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.583871][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.590543][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.594881][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.597639][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.600880][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.603577][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.670954][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.673473][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.673831][ T5833] veth0_vlan: entered promiscuous mode
[   48.703233][ T5833] veth1_vlan: entered promiscuous mode
[   48.711417][ T5835] veth0_vlan: entered promiscuous mode
[   48.715929][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.718370][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.722944][ T5835] veth1_vlan: entered promiscuous mode
[   48.772801][ T5833] veth0_macvtap: entered promiscuous mode
[   48.778458][ T5835] veth0_macvtap: entered promiscuous mode
[   48.778925][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.788545][ T5835] veth1_macvtap: entered promiscuous mode
[   48.794598][ T5833] veth1_macvtap: entered promiscuous mode
[   48.818549][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.821380][   T54] Bluetooth: hci0: command tx timeout
[   48.831645][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.838318][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.845370][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.851253][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.853983][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.857270][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.861534][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.867865][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.871673][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.874406][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.876994][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.899501][   T54] Bluetooth: hci1: command tx timeout
[   48.979825][   T54] Bluetooth: hci2: command tx timeout
[   48.982443][ T5149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.984876][ T5149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.996860][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.999585][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.025582][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.028013][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.034641][ T5149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.037118][ T5149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.202135][ T5908] warning: `syz.2.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   49.359013][    C1] hrtimer: interrupt took 26068 ns
[   50.194336][ T5916] netlink: 'syz.1.10': attribute type 10 has an invalid length.
[   50.288606][ T5922] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14'.
[   50.293999][ T5922] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14'.
[   50.531554][ T5932] netlink: 'syz.0.19': attribute type 10 has an invalid length.
[   50.909326][   T54] Bluetooth: hci0: command tx timeout
[   50.989317][   T54] Bluetooth: hci1: command tx timeout
[   51.069339][   T54] Bluetooth: hci2: command tx timeout
[   51.321516][ T5932] team0: Port device wlan1 added
[   51.409226][ T5932] syz.0.19 (5932) used greatest stack depth: 19408 bytes left
[   51.564961][ T5962] netlink: 'syz.2.31': attribute type 46 has an invalid length.
[   51.567459][ T5962] netlink: 55 bytes leftover after parsing attributes in process `syz.2.31'.
[   51.616364][ T5967] netlink: 'syz.0.32': attribute type 3 has an invalid length.
[   51.621367][ T5967] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.32'.
[   52.593055][ T5993] pim6reg0: tun_chr_ioctl cmd 1074025681
[   52.997760][   T54] Bluetooth: hci0: command tx timeout
[   53.060814][   T54] Bluetooth: hci1: command tx timeout
[   53.086329][ T6029] netlink: 'syz.1.56': attribute type 3 has an invalid length.
[   53.088837][ T6029] netlink: 132 bytes leftover after parsing attributes in process `syz.1.56'.
[   53.149106][   T54] Bluetooth: hci2: command tx timeout
[   53.807087][ T6031] netlink: 'syz.0.57': attribute type 10 has an invalid length.
[   53.816577][ T6031] batman_adv: batadv0: Adding interface: team0
[   53.827020][ T6031] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.835844][ T6031] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   54.498580][ T6063] delete_channel: no stack
[   54.814763][ T6103] Zero length message leads to an empty skb
[   55.059459][   T54] Bluetooth: hci0: command tx timeout
[   55.140218][   T54] Bluetooth: hci1: command tx timeout
[   55.219246][   T54] Bluetooth: hci2: command tx timeout
[   55.407036][ T6121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.97'.
[   55.413780][ T6120] netlink: 60 bytes leftover after parsing attributes in process `syz.2.97'.
[   55.419598][ T6121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.97'.
[   55.678515][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.762506][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.842558][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.891391][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.990485][   T13] bridge_slave_1: left allmulticast mode
[   55.993250][   T13] bridge_slave_1: left promiscuous mode
[   55.995665][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.002573][   T13] bridge_slave_0: left allmulticast mode
[   56.004263][   T13] bridge_slave_0: left promiscuous mode
[   56.006025][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.193415][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   56.197636][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   56.203188][   T13] bond0 (unregistering): Released all slaves
[   56.404819][   T13] hsr_slave_0: left promiscuous mode
[   56.407397][   T13] hsr_slave_1: left promiscuous mode
[   56.410410][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.413241][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.416564][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.419833][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.429578][   T13] veth1_macvtap: left promiscuous mode
[   56.431793][   T13] veth0_macvtap: left promiscuous mode
[   56.433958][   T13] veth1_vlan: left promiscuous mode
[   56.436135][   T13] veth0_vlan: left promiscuous mode
[   56.712193][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.715229][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.717706][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.720898][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.723377][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.799830][   T13] team0 (unregistering): Port device team_slave_1 removed
[   56.812520][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.818947][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.823886][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.827471][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.830990][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.831066][   T13] team0 (unregistering): Port device team_slave_0 removed
[   57.156572][ T6147] netlink: 'syz.1.106': attribute type 27 has an invalid length.
[   57.276704][ T6141] chnl_net:caif_netlink_parms(): no params data found
[   57.348208][ T6143] chnl_net:caif_netlink_parms(): no params data found
[   57.419200][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.421884][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.424098][ T6141] bridge_slave_0: entered allmulticast mode
[   57.426778][ T6141] bridge_slave_0: entered promiscuous mode
[   57.456848][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.461203][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.463406][ T6141] bridge_slave_1: entered allmulticast mode
[   57.466054][ T6141] bridge_slave_1: entered promiscuous mode
[   57.503481][ T6141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.520492][ T6143] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.522784][ T6143] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.525000][ T6143] bridge_slave_0: entered allmulticast mode
[   57.527623][ T6143] bridge_slave_0: entered promiscuous mode
[   57.543905][ T6141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.559240][ T6143] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.562090][ T6143] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.564824][ T6143] bridge_slave_1: entered allmulticast mode
[   57.576602][ T6143] bridge_slave_1: entered promiscuous mode
[   57.605987][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.637006][ T6141] team0: Port device team_slave_0 added
[   57.658957][ T6141] team0: Port device team_slave_1 added
[   57.684059][ T6143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.707789][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.717842][ T6143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.723660][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.729399][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.752136][ T6141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.767572][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.777154][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.800325][ T6141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.832575][ T6179] netlink: 201660 bytes leftover after parsing attributes in process `syz.1.117'.
[   57.838702][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.853734][ T6143] team0: Port device team_slave_0 added
[   57.857245][ T6143] team0: Port device team_slave_1 added
[   57.901496][ T6143] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.903626][ T6143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.912165][ T6143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.923208][ T6141] hsr_slave_0: entered promiscuous mode
[   57.925740][ T6141] hsr_slave_1: entered promiscuous mode
[   57.928275][ T6141] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.932967][ T6141] Cannot create hsr debugfs directory
[   57.947860][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.960670][ T6143] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.965305][ T6143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.981238][ T6143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.146029][ T6143] hsr_slave_0: entered promiscuous mode
[   58.148640][ T6143] hsr_slave_1: entered promiscuous mode
[   58.152362][ T6143] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.154940][ T6143] Cannot create hsr debugfs directory
[   58.554871][   T13] bridge_slave_1: left allmulticast mode
[   58.556602][   T13] bridge_slave_1: left promiscuous mode
[   58.558327][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.562572][   T13] bridge_slave_0: left allmulticast mode
[   58.564283][   T13] bridge_slave_0: left promiscuous mode
[   58.566050][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.762104][ T5830] Bluetooth: hci1: command tx timeout
[   58.899205][ T5830] Bluetooth: hci2: command tx timeout
[   59.075599][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   59.081285][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   59.084872][   T13] bond0 (unregistering): Released all slaves
[   59.114565][ T6141] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   59.119344][ T6141] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   59.134329][ T6141] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   59.138966][ T6141] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   59.212129][ T6143] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   60.018202][   T13] 
[   60.019056][   T13] ======================================================
[   60.021182][   T13] WARNING: possible circular locking dependency detected
[   60.023331][   T13] 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 Not tainted
[   60.026420][   T13] ------------------------------------------------------
[   60.028570][   T13] kworker/u8:1/13 is trying to acquire lock:
[   60.030420][   T13] ffff8880344b8e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0
[   60.033373][   T13] 
[   60.033373][   T13] but task is already holding lock:
[   60.035644][   T13] ffff888035c08768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0
[   60.038830][   T13] 
[   60.038830][   T13] which lock already depends on the new lock.
[   60.038830][   T13] 
[   60.042033][   T13] 
[   60.042033][   T13] the existing dependency chain (in reverse order) is:
[   60.044799][   T13] 
[   60.044799][   T13] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[   60.047172][   T13]        lock_acquire+0x120/0x360
[   60.048745][   T13]        __mutex_lock+0x182/0xe80
[   60.050312][   T13]        ieee80211_open+0xed/0x1f0
[   60.051911][   T13]        __dev_open+0x470/0x880
[   60.053450][   T13]        netif_open+0xaa/0x170
[   60.054934][   T13]        dev_open+0x125/0x260
[   60.056416][   T13]        team_add_slave+0xb36/0x2840
[   60.058067][   T13]        do_set_master+0x533/0x6d0
[   60.059669][   T13]        do_setlink+0xcf0/0x41c0
[   60.061217][   T13]        rtnl_newlink+0x160b/0x1c70
[   60.062842][   T13]        rtnetlink_rcv_msg+0x7cf/0xb70
[   60.064550][   T13]        netlink_rcv_skb+0x208/0x470
[   60.066173][   T13]        netlink_unicast+0x75c/0x8e0
[   60.067799][   T13]        netlink_sendmsg+0x805/0xb30
[   60.069431][   T13]        __sock_sendmsg+0x21c/0x270
[   60.071033][   T13]        ____sys_sendmsg+0x505/0x830
[   60.072670][   T13]        ___sys_sendmsg+0x21f/0x2a0
[   60.074266][   T13]        __x64_sys_sendmsg+0x19b/0x260
[   60.075951][   T13]        do_syscall_64+0xfa/0x3b0
[   60.077535][   T13]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.079499][   T13] 
[   60.079499][   T13] -> #0 (team->team_lock_key#3){+.+.}-{4:4}:
[   60.082014][   T13]        validate_chain+0xb9b/0x2140
[   60.083663][   T13]        __lock_acquire+0xab9/0xd20
[   60.085280][   T13]        lock_acquire+0x120/0x360
[   60.086846][   T13]        __mutex_lock+0x182/0xe80
[   60.088412][   T13]        team_del_slave+0x32/0x1c0
[   60.089992][   T13]        team_device_event+0x285/0xa20
[   60.091663][   T13]        notifier_call_chain+0x1b6/0x3e0
[   60.093383][   T13]        unregister_netdevice_many_notify+0x15d8/0x2320
[   60.095536][   T13]        unregister_netdevice_queue+0x33c/0x380
[   60.097459][   T13]        _cfg80211_unregister_wdev+0x165/0x590
[   60.099352][   T13]        ieee80211_remove_interfaces+0x49a/0x6d0
[   60.101300][   T13]        ieee80211_unregister_hw+0x5d/0x2c0
[   60.103132][   T13]        mac80211_hwsim_del_radio+0x275/0x460
[   60.104996][   T13]        hwsim_exit_net+0x584/0x640
[   60.106583][   T13]        ops_undo_list+0x49a/0x990
[   60.108157][   T13]        cleanup_net+0x4c5/0x800
[   60.109690][   T13]        process_scheduled_works+0xae1/0x17b0
[   60.111573][   T13]        worker_thread+0x8a0/0xda0
[   60.113165][   T13]        kthread+0x711/0x8a0
[   60.114614][   T13]        ret_from_fork+0x3fc/0x770
[   60.116183][   T13]        ret_from_fork_asm+0x1a/0x30
[   60.117817][   T13] 
[   60.117817][   T13] other info that might help us debug this:
[   60.117817][   T13] 
[   60.120904][   T13]  Possible unsafe locking scenario:
[   60.120904][   T13] 
[   60.123165][   T13]        CPU0                    CPU1
[   60.124805][   T13]        ----                    ----
[   60.126448][   T13]   lock(&rdev->wiphy.mtx);
[   60.127853][   T13]                                lock(team->team_lock_key#3);
[   60.130154][   T13]                                lock(&rdev->wiphy.mtx);
[   60.132301][   T13]   lock(team->team_lock_key#3);
[   60.133845][   T13] 
[   60.133845][   T13]  *** DEADLOCK ***
[   60.133845][   T13] 
[   60.136305][   T13] 5 locks held by kworker/u8:1/13:
[   60.137874][   T13]  #0: ffff88801b2f6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[   60.141216][   T13]  #1: ffffc90000107bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[   60.144406][   T13]  #2: ffffffff8f5101d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[   60.147260][   T13]  #3: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0
[   60.150234][   T13]  #4: ffff888035c08768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0
[   60.153535][   T13] 
[   60.153535][   T13] stack backtrace:
[   60.155348][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[   60.155358][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   60.155365][   T13] Workqueue: netns cleanup_net
[   60.155374][   T13] Call Trace:
[   60.155378][   T13]  <TASK>
[   60.155402][   T13]  dump_stack_lvl+0x189/0x250
[   60.155413][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[   60.155422][   T13]  ? __pfx__printk+0x10/0x10
[   60.155432][   T13]  ? print_lock_name+0xde/0x100
[   60.155441][   T13]  print_circular_bug+0x2ee/0x310
[   60.155452][   T13]  check_noncircular+0x134/0x160
[   60.155462][   T13]  validate_chain+0xb9b/0x2140
[   60.155472][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[   60.155484][   T13]  __lock_acquire+0xab9/0xd20
[   60.155492][   T13]  ? team_del_slave+0x32/0x1c0
[   60.155500][   T13]  lock_acquire+0x120/0x360
[   60.155506][   T13]  ? team_del_slave+0x32/0x1c0
[   60.155514][   T13]  ? __mutex_trylock_common+0x153/0x260
[   60.155525][   T13]  __mutex_lock+0x182/0xe80
[   60.155536][   T13]  ? team_del_slave+0x32/0x1c0
[   60.155543][   T13]  ? rcu_is_watching+0x15/0xb0
[   60.155553][   T13]  ? team_del_slave+0x32/0x1c0
[   60.155560][   T13]  ? __pfx___mutex_lock+0x10/0x10
[   60.155569][   T13]  ? bond_netdev_event+0xd9/0xe80
[   60.155578][   T13]  ? __pfx___mutex_lock+0x10/0x10
[   60.155587][   T13]  ? __pfx_bond_netdev_event+0x10/0x10
[   60.155596][   T13]  team_del_slave+0x32/0x1c0
[   60.155604][   T13]  team_device_event+0x285/0xa20
[   60.155613][   T13]  notifier_call_chain+0x1b6/0x3e0
[   60.155624][   T13]  unregister_netdevice_many_notify+0x15d8/0x2320
[   60.155638][   T13]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[   60.155648][   T13]  ? __lock_acquire+0xab9/0xd20
[   60.155659][   T13]  unregister_netdevice_queue+0x33c/0x380
[   60.155669][   T13]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[   60.155680][   T13]  _cfg80211_unregister_wdev+0x165/0x590
[   60.155689][   T13]  ieee80211_remove_interfaces+0x49a/0x6d0
[   60.155700][   T13]  ? __pfx_synchronize_rcu+0x10/0x10
[   60.155709][   T13]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[   60.155719][   T13]  ? rcu_is_watching+0x15/0xb0
[   60.155728][   T13]  ieee80211_unregister_hw+0x5d/0x2c0
[   60.155737][   T13]  mac80211_hwsim_del_radio+0x275/0x460
[   60.155747][   T13]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[   60.155757][   T13]  hwsim_exit_net+0x584/0x640
[   60.155764][   T13]  ? __pfx_hwsim_exit_net+0x10/0x10
[   60.155771][   T13]  ? __ip_vs_dev_cleanup_batch+0x238/0x260
[   60.155781][   T13]  ops_undo_list+0x49a/0x990
[   60.155789][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[   60.155798][   T13]  cleanup_net+0x4c5/0x800
[   60.155805][   T13]  ? __pfx_cleanup_net+0x10/0x10
[   60.155813][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[   60.155821][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[   60.155829][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[   60.155836][   T13]  process_scheduled_works+0xae1/0x17b0
[   60.155849][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[   60.155860][   T13]  worker_thread+0x8a0/0xda0
[   60.155873][   T13]  kthread+0x711/0x8a0
[   60.155883][   T13]  ? __pfx_worker_thread+0x10/0x10
[   60.155891][   T13]  ? __pfx_kthread+0x10/0x10
[   60.155900][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[   60.155908][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[   60.155917][   T13]  ? __pfx_kthread+0x10/0x10
[   60.155926][   T13]  ret_from_fork+0x3fc/0x770
[   60.155934][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[   60.155942][   T13]  ? __switch_to_asm+0x39/0x70
[   60.155951][   T13]  ? __switch_to_asm+0x33/0x70
[   60.155959][   T13]  ? __pfx_kthread+0x10/0x10
[   60.155969][   T13]  ret_from_fork_asm+0x1a/0x30
[   60.155984][   T13]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   60.290269][   T13] team0: Port device wlan1 removed
[   60.293741][ T6143] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   60.328691][ T6194] caif:caif_disconnect_client(): nothing to disconnect
[   60.399151][   T13] hsr_slave_0: left promiscuous mode
[   60.409826][   T13] hsr_slave_1: left promiscuous mode
[   60.412163][   T13] batman_adv: batadv0: Removing interface: team0
[   60.420969][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.423273][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   60.426457][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.428832][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.443012][   T13] veth1_macvtap: left promiscuous mode
[   60.444748][   T13] veth0_macvtap: left promiscuous mode
[   60.446481][   T13] veth1_vlan: left promiscuous mode
[   60.448121][   T13] veth0_vlan: left promiscuous mode
[   60.535417][   T13] team0 (unregistering): Port device team_slave_1 removed
[   60.546126][   T13] team0 (unregistering): Port device team_slave_0 removed
[   61.004649][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.042671][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.082962][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.122375][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.299696][  T149] wlan1: Trigger new scan to find an IBSS to join
[   61.575561][   T13] bridge_slave_1: left allmulticast mode
[   61.577323][   T13] bridge_slave_1: left promiscuous mode
[   61.579193][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.582031][   T13] bridge_slave_0: left allmulticast mode
[   61.583750][   T13] bridge_slave_0: left promiscuous mode
[   61.585415][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.588629][   T13] bridge_slave_1: left allmulticast mode
[   61.590937][   T13] bridge_slave_1: left promiscuous mode
[   61.592671][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.595312][   T13] bridge_slave_0: left allmulticast mode
[   61.596939][   T13] bridge_slave_0: left promiscuous mode
[   61.598643][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.602554][   T13] bridge_slave_1: left allmulticast mode
[   61.604237][   T13] bridge_slave_1: left promiscuous mode
[   61.605953][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.608497][   T13] bridge_slave_0: left allmulticast mode
[   61.610851][   T13] bridge_slave_0: left promiscuous mode
[   61.612659][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.684603][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   61.689262][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   61.693278][   T13] bond0 (unregistering): Released all slaves
[   61.782742][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   61.786376][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   61.789830][   T13] bond0 (unregistering): Released all slaves
[   61.835839][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   61.839116][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   61.842538][   T13] bond0 (unregistering): Released all slaves
[   62.006031][   T13] hsr_slave_0: left promiscuous mode
[   62.007988][   T13] hsr_slave_1: left promiscuous mode
[   62.010455][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.012790][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.015244][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.017527][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.021695][   T13] hsr_slave_0: left promiscuous mode
[   62.023594][   T13] hsr_slave_1: left promiscuous mode
[   62.025468][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.027881][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.031945][   T13] hsr_slave_0: left promiscuous mode
[   62.033856][   T13] hsr_slave_1: left promiscuous mode
[   62.035733][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.038037][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.043640][   T13] veth1_macvtap: left promiscuous mode
[   62.045413][   T13] veth0_macvtap: left promiscuous mode
[   62.047156][   T13] veth1_vlan: left promiscuous mode
[   62.048745][   T13] veth0_vlan: left promiscuous mode
[   62.131402][   T13] team0 (unregistering): Port device team_slave_1 removed
[   62.146951][   T13] team0 (unregistering): Port device team_slave_0 removed
[   62.253756][   T13] team0 (unregistering): Port device team_slave_1 removed
[   62.262791][   T13] team0 (unregistering): Port device team_slave_0 removed
[   62.348403][   T13] team0 (unregistering): Port device team_slave_1 removed
[   62.365536][   T13] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
10:43:17  Registers:
info registers vcpu 0

CPU#0
RAX=a11a149288a08800 RBX=ffffffff81976a48 RCX=a11a149288a08800 RDX=0000000000000001
RSI=ffffffff8be29f20 RDI=ffffffff81976a48 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1e8f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000d000 CR3=000000001ef06000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffff00 ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fe03ee11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000069 RBX=0000000000000069 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000106750
R8 =ffff8881089c0237 R9 =1ffff11021138046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af58d0 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30517ff8 CR3=000000010c144000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000ff0000 0000000000000000 XMM05=0000000000000000 00007f081c411d4f
XMM06=0000000000000000 00007f081c411d49 XMM07=0000000000000000 00007f081c411d5d
XMM08=0000000000000000 00007f081c411de3 XMM09=0000000000000000 00007f081c411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
