last executing test programs:

2.631567427s ago: executing program 0 (id=53):
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$kcm(r0, 0x0, 0x4000004)
sendmsg$inet(r0, 0x0, 0x3000c085)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x804)

2.260051679s ago: executing program 0 (id=54):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10)

2.160936015s ago: executing program 0 (id=55):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000dbffffff00000000ff070000850000006e00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

2.108345108s ago: executing program 0 (id=56):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000028c0), 0x20a40, 0x0)
close(r1)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd"], 0x280)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xe)

1.168568998s ago: executing program 2 (id=60):
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xd}, 0x2018, 0x10, 0x0, 0x9, 0x1000, 0x10000, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1.118869787s ago: executing program 2 (id=63):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xa, 0x2}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0xe9e0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
close(0xffffffffffffffff)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000cc00000095", @ANYRESHEX], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x81, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94)

1.118670749s ago: executing program 1 (id=64):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

960.293503ms ago: executing program 1 (id=65):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000470000000000000000000000711217000000000095"], &(0x7f0000000f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

959.940116ms ago: executing program 1 (id=66):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x32, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, &(0x7f0000000000))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r3, &(0x7f0000000400)='FROZEN\x00', 0x7)
mkdirat$cgroup(r2, &(0x7f0000000200)='syz1\x00', 0x1ff)

897.96001ms ago: executing program 2 (id=67):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x14, 0x0, &(0x7f0000000180)="020000000000000888f54c6588a837fc58b6c915", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

791.570478ms ago: executing program 2 (id=68):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
setsockopt$sock_attach_bpf(r0, 0x29, 0x39, &(0x7f0000000100)=r1, 0x120)

680.615164ms ago: executing program 2 (id=69):
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))

122.659348ms ago: executing program 1 (id=70):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x61]}}, 0x0, 0x33}, 0x28)

122.221972ms ago: executing program 0 (id=71):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x42)

72.180287ms ago: executing program 1 (id=72):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

71.808938ms ago: executing program 2 (id=73):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0)

460.92µs ago: executing program 1 (id=74):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x7, 0x12)

0s ago: executing program 0 (id=75):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r0, 0x400454cc, 0x313)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x11)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:46633' (ED25519) to the list of known hosts.
syzkaller login: [   49.036486][ T5758] cgroup: Unknown subsys name 'net'
[   49.180489][ T5758] cgroup: Unknown subsys name 'cpuset'
[   49.186293][ T5758] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.967889][ T5758] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.706744][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.711150][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.715057][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.719702][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.721659][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.723223][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.729039][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.734971][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.740433][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.746604][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.754252][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.757764][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.763646][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.773330][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.776361][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.015038][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   56.064010][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   56.069986][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   56.151659][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.154390][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.158760][ T5836] bridge_slave_0: entered allmulticast mode
[   56.162745][ T5836] bridge_slave_0: entered promiscuous mode
[   56.180686][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.183663][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.186110][ T5836] bridge_slave_1: entered allmulticast mode
[   56.189037][ T5836] bridge_slave_1: entered promiscuous mode
[   56.250299][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.260250][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.290017][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.293557][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.297388][ T5827] bridge_slave_0: entered allmulticast mode
[   56.301354][ T5827] bridge_slave_0: entered promiscuous mode
[   56.334880][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.339405][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.342825][ T5827] bridge_slave_1: entered allmulticast mode
[   56.345977][ T5827] bridge_slave_1: entered promiscuous mode
[   56.352822][ T5836] team0: Port device team_slave_0 added
[   56.355860][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.361011][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.364157][ T5826] bridge_slave_0: entered allmulticast mode
[   56.369968][ T5826] bridge_slave_0: entered promiscuous mode
[   56.383167][ T5836] team0: Port device team_slave_1 added
[   56.386062][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.390609][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.393612][ T5826] bridge_slave_1: entered allmulticast mode
[   56.398052][ T5826] bridge_slave_1: entered promiscuous mode
[   56.456791][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.460568][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.464010][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.477547][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.485983][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.490531][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.494059][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.498926][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.511276][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.518345][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.569415][ T5826] team0: Port device team_slave_0 added
[   56.574273][ T5827] team0: Port device team_slave_0 added
[   56.578771][ T5827] team0: Port device team_slave_1 added
[   56.597211][ T5826] team0: Port device team_slave_1 added
[   56.634116][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.639193][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.648610][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.662231][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.664838][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.674572][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.679425][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.682700][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.694010][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.712022][ T5836] hsr_slave_0: entered promiscuous mode
[   56.715309][ T5836] hsr_slave_1: entered promiscuous mode
[   56.719356][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.722506][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.732047][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.799700][ T5826] hsr_slave_0: entered promiscuous mode
[   56.802937][ T5826] hsr_slave_1: entered promiscuous mode
[   56.805869][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.809768][ T5826] Cannot create hsr debugfs directory
[   56.848585][ T5827] hsr_slave_0: entered promiscuous mode
[   56.851358][ T5827] hsr_slave_1: entered promiscuous mode
[   56.853865][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.857620][ T5827] Cannot create hsr debugfs directory
[   57.106459][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.121387][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.133495][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.145371][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.172751][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.179527][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.185604][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.201908][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.252723][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.261973][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.277714][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.289243][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.353715][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.395566][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   57.407737][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.419645][  T397] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.422684][  T397] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.441424][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.445848][  T397] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.448409][  T397] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.455985][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   57.479252][  T397] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.481882][  T397] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.485724][  T397] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.488750][  T397] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.518894][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   57.535725][  T397] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.538687][  T397] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.554905][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.557808][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.754356][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.759155][ T5837] Bluetooth: hci0: command tx timeout
[   57.801906][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.827603][ T5835] Bluetooth: hci1: command tx timeout
[   57.830576][ T5837] Bluetooth: hci2: command tx timeout
[   57.835378][ T5836] veth0_vlan: entered promiscuous mode
[   57.858562][ T5836] veth1_vlan: entered promiscuous mode
[   57.873531][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.883072][ T5826] veth0_vlan: entered promiscuous mode
[   57.905510][ T5826] veth1_vlan: entered promiscuous mode
[   57.923771][ T5836] veth0_macvtap: entered promiscuous mode
[   57.944549][ T5836] veth1_macvtap: entered promiscuous mode
[   57.949261][ T5827] veth0_vlan: entered promiscuous mode
[   57.961297][ T5826] veth0_macvtap: entered promiscuous mode
[   57.967506][ T5827] veth1_vlan: entered promiscuous mode
[   57.973032][ T5826] veth1_macvtap: entered promiscuous mode
[   57.983631][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.001250][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.013624][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.020837][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.023811][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.029803][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.032718][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.058037][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.063247][ T5827] veth0_macvtap: entered promiscuous mode
[   58.083371][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.088337][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.092245][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.096954][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.110831][ T5827] veth1_macvtap: entered promiscuous mode
[   58.181261][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.197770][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.202957][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.211277][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.235704][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.247232][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.251703][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.255430][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.272912][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.275957][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.347479][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.355269][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.399491][ T3599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.402293][ T3599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.417725][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.438350][ T3599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.443010][ T3599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.498536][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.503887][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.579160][ T5900] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4'.
[   58.618302][ T5902] netlink: 'syz.0.1': attribute type 4 has an invalid length.
[   58.620653][ T5902] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.1'.
[   58.741909][ T5911] Zero length message leads to an empty skb
[   59.067311][ T5918] warning: `syz.1.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.274769][    C1] hrtimer: interrupt took 50518 ns
[   59.621289][ T5930] netlink: 'syz.2.13': attribute type 3 has an invalid length.
[   59.624178][ T5930] netlink: 'syz.2.13': attribute type 1 has an invalid length.
[   59.632161][ T5930] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.13'.
[   59.791974][ T5837] Bluetooth: hci0: unknown advertising packet type: 0x70
[   59.792073][ T5837] Bluetooth: hci0: Malformed LE Event: 0x02
[   59.828356][ T5837] Bluetooth: hci0: command tx timeout
[   59.906936][ T5837] Bluetooth: hci2: command tx timeout
[   59.909661][ T5837] Bluetooth: hci1: command tx timeout
[   61.524191][ T5967] syzkaller0: entered promiscuous mode
[   61.526944][ T5967] syzkaller0: entered allmulticast mode
[   61.906611][ T5837] Bluetooth: hci0: command tx timeout
[   62.005492][ T5837] Bluetooth: hci1: command tx timeout
[   62.008172][ T5835] Bluetooth: hci2: command tx timeout
[   63.834411][ T6007] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.988842][ T5837] Bluetooth: hci0: command tx timeout
[   64.067834][ T5837] Bluetooth: hci1: command tx timeout
[   64.070727][ T5837] Bluetooth: hci2: command tx timeout
[   65.635938][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'.
[   67.233670][ T6079] netlink: 'syz.2.73': attribute type 10 has an invalid length.
[   67.285788][ T6079] team0: Port device netdevsim0 added
[   67.292718][  T397] 
[   67.293815][  T397] ======================================================
[   67.296345][  T397] WARNING: possible circular locking dependency detected
[   67.298550][  T397] 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 Not tainted
[   67.301751][  T397] ------------------------------------------------------
[   67.304033][  T397] kworker/u10:3/397 is trying to acquire lock:
[   67.306664][  T397] ffff88810f85ce00 (team->team_lock_key){+.+.}-{4:4}, at: team_device_event+0x544/0xa20
[   67.310234][  T397] 
[   67.310234][  T397] but task is already holding lock:
[   67.312473][  T397] ffff88811b2dcd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __linkwatch_run_queue+0x4a0/0x7e0
[   67.315814][  T397] 
[   67.315814][  T397] which lock already depends on the new lock.
[   67.315814][  T397] 
[   67.319152][  T397] 
[   67.319152][  T397] the existing dependency chain (in reverse order) is:
[   67.321910][  T397] 
[   67.321910][  T397] -> #1 (&dev_instance_lock_key#20){+.+.}-{4:4}:
[   67.324874][  T397]        lock_acquire+0x120/0x360
[   67.326639][  T397]        __mutex_lock+0x182/0xe80
[   67.328454][  T397]        dev_set_mtu+0x10e/0x260
[   67.330284][  T397]        team_add_slave+0x8b8/0x2840
[   67.332097][  T397]        do_set_master+0x533/0x6d0
[   67.333740][  T397]        do_setlink+0xcf0/0x41c0
[   67.335361][  T397]        rtnl_newlink+0x160b/0x1c70
[   67.337055][  T397]        rtnetlink_rcv_msg+0x7cf/0xb70
[   67.338734][  T397]        netlink_rcv_skb+0x208/0x470
[   67.340402][  T397]        netlink_unicast+0x75c/0x8e0
[   67.342148][  T397]        netlink_sendmsg+0x805/0xb30
[   67.344153][  T397]        __sock_sendmsg+0x21c/0x270
[   67.346419][  T397]        ____sys_sendmsg+0x505/0x830
[   67.348624][  T397]        ___sys_sendmsg+0x21f/0x2a0
[   67.350755][  T397]        __x64_sys_sendmsg+0x19b/0x260
[   67.352912][  T397]        do_syscall_64+0xfa/0x3b0
[   67.354859][  T397]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.357311][  T397] 
[   67.357311][  T397] -> #0 (team->team_lock_key){+.+.}-{4:4}:
[   67.360011][  T397]        validate_chain+0xb9b/0x2140
[   67.362099][  T397]        __lock_acquire+0xab9/0xd20
[   67.364086][  T397]        lock_acquire+0x120/0x360
[   67.365845][  T397]        __mutex_lock+0x182/0xe80
[   67.368029][  T397]        team_device_event+0x544/0xa20
[   67.369908][  T397]        notifier_call_chain+0x1b6/0x3e0
[   67.371839][  T397]        netif_state_change+0x284/0x3a0
[   67.373775][  T397]        linkwatch_do_dev+0x117/0x170
[   67.375619][  T397]        __linkwatch_run_queue+0x56d/0x7e0
[   67.377962][  T397]        linkwatch_event+0x4c/0x60
[   67.379962][  T397]        process_scheduled_works+0xae1/0x17b0
[   67.382121][  T397]        worker_thread+0x8a0/0xda0
[   67.383867][  T397]        kthread+0x711/0x8a0
[   67.385391][  T397]        ret_from_fork+0x3fc/0x770
[   67.387230][  T397]        ret_from_fork_asm+0x1a/0x30
[   67.389122][  T397] 
[   67.389122][  T397] other info that might help us debug this:
[   67.389122][  T397] 
[   67.393147][  T397]  Possible unsafe locking scenario:
[   67.393147][  T397] 
[   67.396108][  T397]        CPU0                    CPU1
[   67.398209][  T397]        ----                    ----
[   67.400291][  T397]   lock(&dev_instance_lock_key#20);
[   67.402043][  T397]                                lock(team->team_lock_key);
[   67.404484][  T397]                                lock(&dev_instance_lock_key#20);
[   67.407194][  T397]   lock(team->team_lock_key);
[   67.408872][  T397] 
[   67.408872][  T397]  *** DEADLOCK ***
[   67.408872][  T397] 
[   67.411970][  T397] 4 locks held by kworker/u10:3/397:
[   67.413993][  T397]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[   67.417810][  T397]  #1: ffffc9000341fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[   67.421484][  T397]  #2: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[   67.424724][  T397]  #3: ffff88811b2dcd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __linkwatch_run_queue+0x4a0/0x7e0
[   67.428973][  T397] 
[   67.428973][  T397] stack backtrace:
[   67.430952][  T397] CPU: 1 UID: 0 PID: 397 Comm: kworker/u10:3 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[   67.430963][  T397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   67.430969][  T397] Workqueue: events_unbound linkwatch_event
[   67.430980][  T397] Call Trace:
[   67.430985][  T397]  <TASK>
[   67.430989][  T397]  dump_stack_lvl+0x189/0x250
[   67.430999][  T397]  ? __pfx_dump_stack_lvl+0x10/0x10
[   67.431006][  T397]  ? __pfx__printk+0x10/0x10
[   67.431015][  T397]  ? print_lock_name+0xde/0x100
[   67.431024][  T397]  print_circular_bug+0x2ee/0x310
[   67.431034][  T397]  check_noncircular+0x134/0x160
[   67.431043][  T397]  validate_chain+0xb9b/0x2140
[   67.431054][  T397]  __lock_acquire+0xab9/0xd20
[   67.431062][  T397]  ? team_device_event+0x544/0xa20
[   67.431071][  T397]  lock_acquire+0x120/0x360
[   67.431077][  T397]  ? team_device_event+0x544/0xa20
[   67.431086][  T397]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   67.431096][  T397]  __mutex_lock+0x182/0xe80
[   67.431105][  T397]  ? team_device_event+0x544/0xa20
[   67.431114][  T397]  ? __try_to_del_timer_sync+0x34a/0x3a0
[   67.431124][  T397]  ? team_device_event+0x544/0xa20
[   67.431132][  T397]  ? __pfx___mutex_lock+0x10/0x10
[   67.431141][  T397]  ? fib_sync_down_dev+0x66/0x7b0
[   67.431150][  T397]  team_device_event+0x544/0xa20
[   67.431158][  T397]  notifier_call_chain+0x1b6/0x3e0
[   67.431168][  T397]  netif_state_change+0x284/0x3a0
[   67.431179][  T397]  ? __pfx_netif_state_change+0x10/0x10
[   67.431188][  T397]  ? dev_deactivate+0x129/0x1b0
[   67.431195][  T397]  ? nsim_get_iflink+0x20/0x280
[   67.431204][  T397]  ? rfc2863_policy+0x1c6/0x3e0
[   67.431211][  T397]  linkwatch_do_dev+0x117/0x170
[   67.431220][  T397]  __linkwatch_run_queue+0x56d/0x7e0
[   67.431228][  T397]  ? __pfx___linkwatch_run_queue+0x10/0x10
[   67.431236][  T397]  ? _raw_spin_unlock_irq+0x23/0x50
[   67.431244][  T397]  ? process_scheduled_works+0x9ef/0x17b0
[   67.431251][  T397]  ? process_scheduled_works+0x9ef/0x17b0
[   67.431259][  T397]  linkwatch_event+0x4c/0x60
[   67.431266][  T397]  process_scheduled_works+0xae1/0x17b0
[   67.431277][  T397]  ? __pfx_process_scheduled_works+0x10/0x10
[   67.431287][  T397]  worker_thread+0x8a0/0xda0
[   67.431295][  T397]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   67.431304][  T397]  ? __kthread_parkme+0x7b/0x200
[   67.431313][  T397]  kthread+0x711/0x8a0
[   67.431322][  T397]  ? __pfx_worker_thread+0x10/0x10
[   67.431333][  T397]  ? __pfx_kthread+0x10/0x10
[   67.431347][  T397]  ? _raw_spin_unlock_irq+0x23/0x50
[   67.431358][  T397]  ? lockdep_hardirqs_on+0x9c/0x150
[   67.431372][  T397]  ? __pfx_kthread+0x10/0x10
[   67.431387][  T397]  ret_from_fork+0x3fc/0x770
[   67.431401][  T397]  ? __pfx_ret_from_fork+0x10/0x10
[   67.431415][  T397]  ? __switch_to_asm+0x39/0x70
[   67.431428][  T397]  ? __switch_to_asm+0x33/0x70
[   67.431443][  T397]  ? __pfx_kthread+0x10/0x10
[   67.431467][  T397]  ret_from_fork_asm+0x1a/0x30
[   67.431478][  T397]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   67.821671][ T5700] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.890174][ T5700] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.959166][ T5700] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.011141][ T5700] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.082500][ T5700] bridge_slave_1: left allmulticast mode
[   68.085101][ T5700] bridge_slave_1: left promiscuous mode
[   68.090257][ T5700] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.094967][ T5700] bridge_slave_0: left allmulticast mode
[   68.097911][ T5700] bridge_slave_0: left promiscuous mode
[   68.100304][ T5700] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.225310][ T5700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   68.231220][ T5700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   68.235922][ T5700] bond0 (unregistering): Released all slaves
[   68.431819][ T5700] hsr_slave_0: left promiscuous mode
[   68.434261][ T5700] hsr_slave_1: left promiscuous mode
[   68.436942][ T5700] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.439397][ T5700] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.443072][ T5700] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.445690][ T5700] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.451820][ T5700] veth1_macvtap: left promiscuous mode
[   68.453848][ T5700] veth0_macvtap: left promiscuous mode
[   68.456002][ T5700] veth1_vlan: left promiscuous mode
[   68.458889][ T5700] veth0_vlan: left promiscuous mode
[   68.563338][ T5700] team0 (unregistering): Port device team_slave_1 removed
[   68.579714][ T5700] team0 (unregistering): Port device team_slave_0 removed
[   68.937379][ T5700] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.989359][ T5700] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.020178][ T5700] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.067603][ T5700] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.131409][ T5700] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.164436][ T5700] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.209073][ T5700] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.246871][ T5700] team0: Port device netdevsim0 removed
[   69.249239][ T5700] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.314433][ T5700] bridge_slave_1: left allmulticast mode
[   69.318834][ T5700] bridge_slave_1: left promiscuous mode
[   69.320810][ T5700] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.331662][ T5700] bridge_slave_0: left allmulticast mode
[   69.333738][ T5700] bridge_slave_0: left promiscuous mode
[   69.338659][ T5700] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.342711][ T5700] bridge_slave_1: left allmulticast mode
[   69.344895][ T5700] bridge_slave_1: left promiscuous mode
[   69.347501][ T5700] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.351300][ T5700] bridge_slave_0: left allmulticast mode
[   69.353422][ T5700] bridge_slave_0: left promiscuous mode
[   69.355329][ T5700] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.430812][ T5700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.435266][ T5700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.440162][ T5700] bond0 (unregistering): Released all slaves
[   69.531562][ T5700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.535829][ T5700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.539623][ T5700] bond0 (unregistering): Released all slaves
[   69.847010][ T5700] hsr_slave_0: left promiscuous mode
[   69.851746][ T5700] hsr_slave_1: left promiscuous mode
[   69.854526][ T5700] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.860451][ T5700] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.864045][ T5700] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.868759][ T5700] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.873235][ T5700] hsr_slave_0: left promiscuous mode
[   69.875214][ T5700] hsr_slave_1: left promiscuous mode
[   69.877420][ T5700] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.879894][ T5700] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.882735][ T5700] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.885329][ T5700] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.891351][ T5700] veth1_macvtap: left promiscuous mode
[   69.893232][ T5700] veth0_macvtap: left promiscuous mode
[   69.895078][ T5700] veth1_vlan: left promiscuous mode
[   69.897009][ T5700] veth0_vlan: left promiscuous mode
[   69.899408][ T5700] veth1_macvtap: left promiscuous mode
[   69.901226][ T5700] veth0_macvtap: left promiscuous mode
[   69.903009][ T5700] veth1_vlan: left promiscuous mode
[   69.904703][ T5700] veth0_vlan: left promiscuous mode
[   70.026941][ T5700] team0 (unregistering): Port device team_slave_1 removed
[   70.047097][ T5700] team0 (unregistering): Port device team_slave_0 removed
[   70.208787][ T5700] team0 (unregistering): Port device team_slave_1 removed
[   70.225478][ T5700] team0 (unregistering): Port device team_slave_0 removed
[   70.949183][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.951840][ T1361] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
05:15:23  Registers:
info registers vcpu 0

CPU#0
RAX=7b98849513fb9e00 RBX=ffffffff81976a48 RCX=7b98849513fb9e00 RDX=0000000000000001
RSI=ffffffff8be29f20 RDI=ffffffff81976a48 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1e8f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2453de CR3=00000000221de000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fe621f86478 00007fe621f86450 XMM03=00007fe621f86488 00007fe621f86480
XMM04=00007fe622aed100 00007fe621f86440 XMM05=00007fe621f86458 00007fe621f864a0
XMM06=00007fe621f86498 00007fe621f86490 XMM07=00007fe621f86488 00007fe621f86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fe621e11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000341ecb0
R8 =ffff8881074e0237 R9 =1ffff11020e9c046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af58c1 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f38a2451fc8 CR3=00000000221de000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=000000000206145e 0000004348f8a11b
XMM02=800200000010000a 000e000000000206 XMM03=145e0000004348f8 a11b9fcc7237a72a
XMM04=00007fe622aed100 00007fe621f86440 XMM05=00007fe621f86458 00007fe621f864a0
XMM06=00007fe621f86498 00007fe621f86490 XMM07=00007fe621f86488 00007fe621f86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fe621e11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
