last executing test programs:

24.300562343s ago: executing program 0 (id=159):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@printk, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r1}, 0x18)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

24.300347058s ago: executing program 0 (id=160):
r0 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100), 0x120)

24.188372284s ago: executing program 0 (id=161):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x400, 0x1000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)

24.119252374s ago: executing program 0 (id=163):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x7c2})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1)

24.039099026s ago: executing program 0 (id=167):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

23.975334253s ago: executing program 0 (id=169):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0x0, 0x8}], 0x10, 0x3}, 0x94)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x76, &(0x7f0000000000)=r3, 0x8)

8.937134802s ago: executing program 32 (id=169):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0x0, 0x8}], 0x10, 0x3}, 0x94)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x76, &(0x7f0000000000)=r3, 0x8)

2.324701758s ago: executing program 1 (id=423):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0xffffffffffffffff)
getpid()
fstat(0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffff, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x4)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fstat(r3, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000040))
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x29, 0xb, 0x70bd27, 0x0, {0x5}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

2.100277621s ago: executing program 3 (id=425):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x6c, 0x30, 0xb, 0x5, 0xffffffff, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x4, 0xde3, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x4}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000804}, 0x44)

1.935270043s ago: executing program 3 (id=428):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@i, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0x88, &(0x7f0000000000)=""/136}, 0x94)

1.934942096s ago: executing program 3 (id=429):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f00000004c0)="ad5ce39667bde4014c9745573838", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.714065902s ago: executing program 2 (id=433):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x891b, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX\xf73\xa1\xa2\'\x00\x00\x00\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')

1.424971892s ago: executing program 1 (id=434):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1fd, 0xa6}, 0x11639d, 0x9, 0xfffffbff, 0x5, 0x2, 0x200, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4020000e9bf000061114c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x100800, 0xc8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x10000)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x15)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0x0, 0x0}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="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", 0x2ec}, {&(0x7f0000002b40)="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", 0x1fd}], 0x2}, 0x8400)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000640)="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", 0x10a}], 0x1}, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001440)={0x5}, 0x8)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x100)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x221020, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33)

1.011675904s ago: executing program 3 (id=435):
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8c42, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xf}, 0x1000, 0x2, 0xa9eb, 0x8, 0x0, 0x0, 0x806}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffcde, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac008000200070002002500020003a9e99fd8dc7add954664bc24eab556a705251e6182942259e65f0151f60a84c9f4d4938037e786a6d00010", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300000000000000)

1.011505237s ago: executing program 2 (id=436):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x1e, 0x5, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000037000100feffffff00000000017c00000c008e0006"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x4c080)

954.483788ms ago: executing program 2 (id=437):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f00000100", @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0x0, 0x0}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), 0x0}, 0x20)
sendmsg$tipc(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64}, 0x94)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

344.167061ms ago: executing program 3 (id=438):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0xfb, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x84}, 0x0)

279.081905ms ago: executing program 1 (id=439):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000)
sendmsg$kcm(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)='^', 0x1}], 0x1}, 0x20040010)

194.639087ms ago: executing program 1 (id=440):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r0, &(0x7f0000000500)="b2fee7b9", &(0x7f0000000580)=""/4}, 0x20)

131.527615ms ago: executing program 1 (id=441):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)

126.861358ms ago: executing program 2 (id=442):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x16, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="cbaa00fea0000000711093000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94)

120.541868ms ago: executing program 3 (id=443):
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x22, 0x2, 0x21)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x80044944, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x9, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
socket$kcm(0xa, 0x3, 0x73)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0xfffffe2b, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c25949301a3c92b", 0x14}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x4000850)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="18", 0x0, 0x0, 0x3}, 0x50)
syz_clone(0x8102500, &(0x7f00000006c0)="d9b8957753", 0x5, 0x0, 0x0, 0x0)

119.780988ms ago: executing program 2 (id=444):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)}, 0x122)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r0, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

115.775194ms ago: executing program 1 (id=445):
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x23, 0x2, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xf7fff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002380)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9d, 0x9, 0x7, 0x8, 0x4e19}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x809b}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

0s ago: executing program 2 (id=446):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:7949' (ED25519) to the list of known hosts.
syzkaller login: [   55.601190][ T5831] cgroup: Unknown subsys name 'net'
[   55.666160][ T5831] cgroup: Unknown subsys name 'cpuset'
[   55.669771][ T5831] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   56.952998][ T5831] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   60.422589][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.429671][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.434248][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.438862][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.443732][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.462485][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.470079][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.473902][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.478005][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.482280][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.540305][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.546440][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.549761][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.557598][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.561771][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.707426][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   60.823923][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   60.858412][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.861923][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.864303][ T5845] bridge_slave_0: entered allmulticast mode
[   60.867000][ T5845] bridge_slave_0: entered promiscuous mode
[   60.902816][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.905275][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.907496][ T5845] bridge_slave_1: entered allmulticast mode
[   60.910536][ T5845] bridge_slave_1: entered promiscuous mode
[   60.989610][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.995530][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.014107][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.017050][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.020050][ T5849] bridge_slave_0: entered allmulticast mode
[   61.025807][ T5849] bridge_slave_0: entered promiscuous mode
[   61.029358][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   61.046514][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.049463][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.053084][ T5849] bridge_slave_1: entered allmulticast mode
[   61.056830][ T5849] bridge_slave_1: entered promiscuous mode
[   61.064832][ T5845] team0: Port device team_slave_0 added
[   61.080807][ T5845] team0: Port device team_slave_1 added
[   61.118795][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.146514][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.150733][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.153855][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.163449][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.185138][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.188070][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.198450][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.237457][ T5849] team0: Port device team_slave_0 added
[   61.240075][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.243395][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.246200][ T5853] bridge_slave_0: entered allmulticast mode
[   61.249917][ T5853] bridge_slave_0: entered promiscuous mode
[   61.263150][ T5849] team0: Port device team_slave_1 added
[   61.265934][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.268895][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.271853][ T5853] bridge_slave_1: entered allmulticast mode
[   61.274938][ T5853] bridge_slave_1: entered promiscuous mode
[   61.307755][ T5845] hsr_slave_0: entered promiscuous mode
[   61.310799][ T5845] hsr_slave_1: entered promiscuous mode
[   61.337855][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.340117][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.352216][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.378597][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.381502][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.392397][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.398970][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.415582][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.487139][ T5853] team0: Port device team_slave_0 added
[   61.499862][ T5849] hsr_slave_0: entered promiscuous mode
[   61.503743][ T5849] hsr_slave_1: entered promiscuous mode
[   61.506673][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   61.509036][ T5849] Cannot create hsr debugfs directory
[   61.513989][ T5853] team0: Port device team_slave_1 added
[   61.565296][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.568115][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.579718][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.603455][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.605717][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.616267][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.711434][ T5853] hsr_slave_0: entered promiscuous mode
[   61.714805][ T5853] hsr_slave_1: entered promiscuous mode
[   61.717260][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   61.719441][ T5853] Cannot create hsr debugfs directory
[   61.815845][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.832563][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.847951][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.868578][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.945970][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.954717][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.967898][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.974329][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.046014][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.053046][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.063762][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.075111][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.155268][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.194126][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   62.211035][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.214195][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.227359][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.238390][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.240624][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.270519][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   62.277934][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.296637][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.299205][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.306292][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.308676][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.323597][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   62.338083][ T1230] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.340997][ T1230] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.366401][ T1230] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.369396][ T1230] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.418240][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.445480][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.518443][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.522082][ T5235] Bluetooth: hci1: command tx timeout
[   62.524117][ T5235] Bluetooth: hci0: command tx timeout
[   62.582761][ T5845] veth0_vlan: entered promiscuous mode
[   62.589387][ T5845] veth1_vlan: entered promiscuous mode
[   62.592256][   T54] Bluetooth: hci2: command tx timeout
[   62.616768][ T5845] veth0_macvtap: entered promiscuous mode
[   62.635892][ T5845] veth1_macvtap: entered promiscuous mode
[   62.660569][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.668387][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.685046][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.700446][ T5875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.705651][ T5875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.709666][ T5875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.717352][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.721256][ T5875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.768041][ T5849] veth0_vlan: entered promiscuous mode
[   62.785671][ T5849] veth1_vlan: entered promiscuous mode
[   62.848531][ T1230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.861693][ T1230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.868132][ T5849] veth0_macvtap: entered promiscuous mode
[   62.875967][ T5853] veth0_vlan: entered promiscuous mode
[   62.900822][ T5849] veth1_macvtap: entered promiscuous mode
[   62.941240][ T1230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.945182][ T1230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.947417][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.954252][ T5853] veth1_vlan: entered promiscuous mode
[   62.960754][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.979581][ T5857] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.986074][ T5857] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.003557][ T5857] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.013058][ T5857] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.045792][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   63.100179][ T5853] veth0_macvtap: entered promiscuous mode
[   63.120033][ T5853] veth1_macvtap: entered promiscuous mode
[   63.127264][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.134248][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.142112][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.152526][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.156893][ T5875] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.160535][ T5909] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.172185][ T5909] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.206067][ T5909] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.246642][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.249894][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.363028][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.366347][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.391274][ T5295] udevd[5295]: worker [5850] terminated by signal 33 (Unknown signal 33)
[   63.414993][ T5295] udevd[5295]: worker [5850] failed while handling '/devices/virtual/block/loop1'
[   63.421612][    C1] hrtimer: interrupt took 42168 ns
[   63.451019][ T5295] udevd[5295]: worker [5848] terminated by signal 33 (Unknown signal 33)
[   63.465431][ T5295] udevd[5295]: worker [5848] failed while handling '/devices/virtual/mac80211_hwsim/hwsim7/ieee80211/phy8/rfkill13'
[   63.469973][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.480320][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.776495][    C0] Illegal XDP return value 16128 on prog  (id 6) dev veth1_to_team, expect packet loss!
[   64.082363][ T6042] Zero length message leads to an empty skb
[   64.146320][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'.
[   64.149585][ T6047] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   64.152585][ T6047] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.415799][ T6057] netlink: 'syz.0.17': attribute type 29 has an invalid length.
[   64.563053][ T6059] netlink: 'syz.2.18': attribute type 2 has an invalid length.
[   64.575853][ T6059] netlink: 'syz.2.18': attribute type 3 has an invalid length.
[   64.584606][ T6059] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18'.
[   64.642992][   T54] Bluetooth: hci0: command tx timeout
[   64.645990][   T54] Bluetooth: hci1: command tx timeout
[   64.683899][ T5235] Bluetooth: hci2: command tx timeout
[   64.798398][ T6069] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.673957][   T54] Bluetooth: hci0: command tx timeout
[   66.676455][ T5235] Bluetooth: hci1: command tx timeout
[   66.751886][ T5235] Bluetooth: hci2: command tx timeout
[   67.266986][ T6109] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.336370][ T6113] warning: `syz.0.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.413765][ T6115] netlink: 'syz.1.41': attribute type 13 has an invalid length.
[   67.990639][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'.
[   67.995605][ T6125] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[   67.999050][ T6125] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.239965][ T6135] netlink: 'syz.0.50': attribute type 1 has an invalid length.
[   68.243504][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'.
[   68.395139][ T6149] netlink: 232 bytes leftover after parsing attributes in process `syz.0.57'.
[   68.465773][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   68.754887][   T54] Bluetooth: hci0: command tx timeout
[   68.757360][ T5235] Bluetooth: hci1: command tx timeout
[   68.832446][ T5235] Bluetooth: hci2: command tx timeout
[   69.275301][ T6159] netlink: 'syz.1.61': attribute type 1 has an invalid length.
[   69.331191][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'.
[   69.550811][ T6176] netlink: 'syz.0.69': attribute type 10 has an invalid length.
[   69.590357][ T6176] netlink: 40 bytes leftover after parsing attributes in process `syz.0.69'.
[   69.602480][ T6176] batadv0: entered promiscuous mode
[   69.609501][ T6176] batadv0: entered allmulticast mode
[   69.628423][ T6176] bridge0: port 3(batadv0) entered blocking state
[   69.637296][ T6176] bridge0: port 3(batadv0) entered disabled state
[   69.673939][ T6176] bridge0: port 3(batadv0) entered blocking state
[   69.677479][ T6176] bridge0: port 3(batadv0) entered forwarding state
[   69.915537][ T5909] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   69.919675][ T5909] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   70.470405][ T6195] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.74'.
[   70.635657][ T6211] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   70.714934][ T6217] netlink: 'syz.0.85': attribute type 16 has an invalid length.
[   70.721313][ T6217] netlink: 156 bytes leftover after parsing attributes in process `syz.0.85'.
[   70.915527][ T6228] C: renamed from team_slave_0 (while UP)
[   70.916555][ T6223] netlink: 156 bytes leftover after parsing attributes in process `syz.1.88'.
[   70.935772][ T6228] netlink: 152 bytes leftover after parsing attributes in process `syz.1.88'.
[   71.324351][ T6237] netlink: 'syz.0.91': attribute type 1 has an invalid length.
[   71.327464][ T6237] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.333732][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.336345][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.694157][ T6260] netlink: 'syz.0.104': attribute type 10 has an invalid length.
[   72.292793][ T6260] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   72.415336][ T6270] bridge_slave_1: left allmulticast mode
[   72.417248][ T6270] bridge_slave_1: left promiscuous mode
[   72.419672][ T6270] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.445203][ T6270] bridge_slave_0: left allmulticast mode
[   72.447365][ T6270] bridge_slave_0: left promiscuous mode
[   72.449610][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.350788][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'.
[   73.516453][ T6317] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.585791][ T6323] netlink: 'syz.0.130': attribute type 1 has an invalid length.
[   73.707877][ T6331] =======================================================
[   73.707877][ T6331] WARNING: The mand mount option has been deprecated and
[   73.707877][ T6331]          and is ignored by this kernel. Remove the mand
[   73.707877][ T6331]          option from the mount to silence this warning.
[   73.707877][ T6331] =======================================================
[   73.778809][ T6338] netlink: 'syz.2.136': attribute type 29 has an invalid length.
[   73.783144][ T6338] netlink: 'syz.2.136': attribute type 29 has an invalid length.
[   73.787146][ T6338] netlink: 'syz.2.136': attribute type 29 has an invalid length.
[   73.994467][ T6355] netlink: 763 bytes leftover after parsing attributes in process `syz.0.144'.
[   74.644611][ T6379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.155'.
[   75.191421][ T6405] netlink: 'syz.1.168': attribute type 10 has an invalid length.
[   75.289411][ T6411] netlink: 'syz.1.172': attribute type 6 has an invalid length.
[   75.574458][ T6425] netlink: 'syz.1.179': attribute type 12 has an invalid length.
[   75.577996][ T6425] netlink: 132 bytes leftover after parsing attributes in process `syz.1.179'.
[   77.060178][ T6461] netlink: 360 bytes leftover after parsing attributes in process `syz.1.195'.
[   77.895222][ T6469] netlink: 40 bytes leftover after parsing attributes in process `syz.1.199'.
[   77.955172][ T6472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.198'.
[   78.828569][ T6513] netlink: 'syz.1.218': attribute type 9 has an invalid length.
[   78.841880][ T6513] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.218'.
[   78.894551][ T6517] netlink: 'syz.2.220': attribute type 27 has an invalid length.
[   78.897577][ T6517] netlink: 'syz.2.220': attribute type 1 has an invalid length.
[   78.900685][ T6517] bridge0: port 1(bridge_slave_0) entered learning state
[   79.190379][ T6526] netlink: 822 bytes leftover after parsing attributes in process `syz.2.224'.
[   79.193510][ T6526] bond0: vlans aren't supported yet for dev_uc|mc_add()
[   80.727517][ T6596] netlink: 'syz.1.257': attribute type 21 has an invalid length.
[   80.730563][ T6596] netlink: 176 bytes leftover after parsing attributes in process `syz.1.257'.
[   80.786787][ T6600] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.258'.
[   80.864110][ T6606] netlink: 277 bytes leftover after parsing attributes in process `syz.2.262'.
[   81.183344][ T6608] netlink: 14 bytes leftover after parsing attributes in process `syz.2.263'.
[   81.208183][ T6608] hsr_slave_0: left promiscuous mode
[   81.295793][ T6608] hsr_slave_1: left promiscuous mode
[   81.562626][   T24] cfg80211: failed to load regulatory.db
[   82.498909][ T6653] netlink: 'syz.1.283': attribute type 29 has an invalid length.
[   82.509337][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.283'.
[   82.736706][ T6659] netlink: 'syz.1.286': attribute type 2 has an invalid length.
[   84.127161][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'.
[   84.312678][ T6696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.302'.
[   84.315972][ T6696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.302'.
[   84.415295][ T6704] netlink: 'syz.1.305': attribute type 3 has an invalid length.
[   84.418494][ T6704] netlink: 'syz.1.305': attribute type 4 has an invalid length.
[   84.428614][ T6704] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.305'.
[   84.573213][ T6711] netlink: 76 bytes leftover after parsing attributes in process `syz.1.309'.
[   85.258099][ T6736] syzkaller0: entered promiscuous mode
[   85.260400][ T6736] syzkaller0: entered allmulticast mode
[   86.055173][ T6744] netlink: 'syz.1.324': attribute type 2 has an invalid length.
[   86.061662][ T6744] netlink: 'syz.1.324': attribute type 8 has an invalid length.
[   86.065024][ T6744] __nla_validate_parse: 1 callbacks suppressed
[   86.065034][ T6744] netlink: 132 bytes leftover after parsing attributes in process `syz.1.324'.
[   86.339568][ T6746] netlink: 60 bytes leftover after parsing attributes in process `syz.1.325'.
[   88.206025][ T5235] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[   88.366170][ T6793] netlink: 1 bytes leftover after parsing attributes in process `syz.2.345'.
[   89.853864][ T6806] netlink: 'syz.2.351': attribute type 4 has an invalid length.
[   89.857228][ T6806] netlink: 168 bytes leftover after parsing attributes in process `syz.2.351'.
[   90.140780][ T6811] netlink: 'syz.1.353': attribute type 5 has an invalid length.
[   90.148572][ T6811] netlink: 'syz.1.353': attribute type 7 has an invalid length.
[   90.164846][ T6811] : entered promiscuous mode
[   90.201566][ T6808] netlink: 'syz.2.352': attribute type 1 has an invalid length.
[   90.227274][ T6808] netlink: 17 bytes leftover after parsing attributes in process `syz.2.352'.
[   90.272425][ T5235] Bluetooth: hci2: command tx timeout
[   90.347303][ T6816] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   90.350587][ T6816] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   90.577380][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   90.580996][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   90.585822][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   90.590498][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   90.595092][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   90.728485][ T5875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.775137][ T6835] netlink: 'syz.2.362': attribute type 9 has an invalid length.
[   90.778462][ T6835] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.362'.
[   90.838712][ T5875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.918314][ T5875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.934296][ T6823] chnl_net:caif_netlink_parms(): no params data found
[   91.020833][ T5875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.150718][ T6823] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.163814][ T6823] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.166714][ T6823] bridge_slave_0: entered allmulticast mode
[   91.170879][ T6823] bridge_slave_0: entered promiscuous mode
[   91.176146][ T6816] syz.1.355 (6816) used greatest stack depth: 19792 bytes left
[   91.186411][ T6823] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.189865][ T6823] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.193431][ T6823] bridge_slave_1: entered allmulticast mode
[   91.197383][ T6823] bridge_slave_1: entered promiscuous mode
[   91.287964][ T6823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.345748][ T6823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.411999][ T5875] bridge0: port 3(batadv0) entered disabled state
[   91.433622][ T5875] bridge_slave_1: left allmulticast mode
[   91.436160][ T5875] bridge_slave_1: left promiscuous mode
[   91.438617][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.446714][ T5875] bridge_slave_0: left allmulticast mode
[   91.449178][ T5875] bridge_slave_0: left promiscuous mode
[   91.453589][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.706653][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   91.712351][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   91.718976][ T5875] bond0 (unregistering): (slave wlan1): Releasing backup interface
[   91.726285][ T5875] bond0 (unregistering): Released all slaves
[   91.753657][ T6823] team0: Port device team_slave_0 added
[   91.757204][ T6823] team0: Port device team_slave_1 added
[   91.796688][ T6823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.799519][ T6823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.819055][ T6823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.867787][ T6823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.870667][ T6823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.889743][ T6823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.116204][ T6823] hsr_slave_0: entered promiscuous mode
[   92.119426][ T6823] hsr_slave_1: entered promiscuous mode
[   92.126396][ T6823] debugfs: 'hsr0' already exists in 'hsr'
[   92.128679][ T6823] Cannot create hsr debugfs directory
[   92.220545][ T5875] hsr_slave_0: left promiscuous mode
[   92.225912][ T5875] hsr_slave_1: left promiscuous mode
[   92.229983][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.236003][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.241408][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.254378][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.278972][ T5875] veth1_macvtap: left promiscuous mode
[   92.285732][ T5875] veth0_macvtap: left promiscuous mode
[   92.288055][ T5875] veth1_vlan: left promiscuous mode
[   92.290120][ T5875] veth0_vlan: left promiscuous mode
[   92.322604][ T6879] netlink: 'syz.2.377': attribute type 2 has an invalid length.
[   92.325073][ T6879] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.377'.
[   92.672119][ T5235] Bluetooth: hci0: command tx timeout
[   93.118399][ T5875] team0 (unregistering): Port device team_slave_1 removed
[   93.139878][ T5875] team0 (unregistering): Port device team_slave_0 removed
[   93.659354][ T6823] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   93.672730][ T6823] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   93.680221][ T6823] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   93.689682][ T6895] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.386'.
[   93.709052][ T6823] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   93.738230][ T6893] netlink: 'syz.2.385': attribute type 17 has an invalid length.
[   93.746254][ T6893] netlink: 'syz.2.385': attribute type 16 has an invalid length.
[   93.750030][ T6893] netlink: 152 bytes leftover after parsing attributes in process `syz.2.385'.
[   94.015357][ T6823] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.038237][ T6823] 8021q: adding VLAN 0 to HW filter on device team0
[   94.063859][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.066777][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.080632][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.083648][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.365302][ T6823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.380493][ T6912] netlink: 60 bytes leftover after parsing attributes in process `syz.2.388'.
[   94.385856][ T6912] unsupported nlmsg_type 40
[   94.406186][ T6823] veth0_vlan: entered promiscuous mode
[   94.413049][ T6823] veth1_vlan: entered promiscuous mode
[   94.432013][ T6823] veth0_macvtap: entered promiscuous mode
[   94.436145][ T6823] veth1_macvtap: entered promiscuous mode
[   94.453314][ T6823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.461213][ T6823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.488773][ T5909] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.502521][ T5909] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.508840][ T5909] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.515316][ T5909] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.574128][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.576756][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.606342][ T3622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.610725][ T3622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.746855][ T6918] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.354'.
[   94.755363][ T5235] Bluetooth: hci0: command tx timeout
[   94.869124][ T6925] netlink: 'syz.1.392': attribute type 10 has an invalid length.
[   94.872595][ T6925] netlink: 40 bytes leftover after parsing attributes in process `syz.1.392'.
[   94.876251][ T6925] dummy0: entered promiscuous mode
[   94.883183][ T6925] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   95.958319][ T6950] netlink: 48 bytes leftover after parsing attributes in process `syz.2.402'.
[   95.964116][ T6950] netlink: 'syz.2.402': attribute type 1 has an invalid length.
[   96.211208][ T6940] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.399'.
[   96.214532][ T6958] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.406'.
[   96.760408][ T6989] netlink: 188 bytes leftover after parsing attributes in process `syz.2.419'.
[   96.832312][ T5235] Bluetooth: hci0: command tx timeout
[   97.232250][ T6995] netlink: 'syz.1.423': attribute type 1 has an invalid length.
[   97.770903][ T7023] __nla_validate_parse: 1 callbacks suppressed
[   97.770999][ T7023] netlink: 64707 bytes leftover after parsing attributes in process `syz.1.434'.
[   98.094868][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'.
[   98.097734][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'.
[   98.101531][ T7025] netlink: 33 bytes leftover after parsing attributes in process `syz.3.435'.
[   98.105969][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'.
[   98.109040][ T7025] netlink: 33 bytes leftover after parsing attributes in process `syz.3.435'.
[   98.820389][ T7035] netlink: 20 bytes leftover after parsing attributes in process `syz.3.438'.
[   98.827981][ T7035] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   98.939584][ T5235] Bluetooth: hci0: command tx timeout
[   99.050437][ T7048] netlink: 'syz.2.444': attribute type 12 has an invalid length.
[   99.054842][ T7048] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.444'.
[   99.136305][ T7053] ------------[ cut here ]------------
[   99.138300][ T7053] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000)
[   99.149662][ T7053] WARNING: CPU: 1 PID: 7053 at kernel/bpf/verifier.c:2733 reg_bounds_sanity_check+0x6e6/0xc20
[   99.154464][ T7053] Modules linked in:
[   99.156350][ T7053] CPU: 1 UID: 0 PID: 7053 Comm: syz.2.446 Not tainted syzkaller #0 PREEMPT(full) 
[   99.160413][ T7053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   99.163979][ T7053] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20
[   99.166002][ T7053] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 8f 2a aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08
[   99.172393][ T7053] RSP: 0018:ffffc90002f2ef08 EFLAGS: 00010282
[   99.174296][ T7053] RAX: 1878cc0396790200 RBX: 00000000ffffdfcc RCX: 0000000000080000
[   99.176737][ T7053] RDX: ffffc90007ec9000 RSI: 0000000000031e6c RDI: 0000000000031e6d
[   99.179403][ T7053] RBP: 00000000ffffdfcd R08: 0000000000000003 R09: 0000000000000004
[   99.182273][ T7053] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888107e3d258
[   99.184815][ T7053] R13: ffff888107e3d278 R14: ffff888107e3d290 R15: 00000000ffffdfcc
[   99.188088][ T7053] FS:  00007f50ebcd96c0(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[   99.192612][ T7053] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   99.195455][ T7053] CR2: 00007f50ebcd8fc8 CR3: 00000001065d4000 CR4: 00000000000006f0
[   99.198748][ T7053] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   99.202661][ T7053] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[   99.205482][ T7053] Call Trace:
[   99.206719][ T7053]  <TASK>
[   99.207865][ T7053]  reg_set_min_max+0x214/0x300
[   99.209922][ T7053]  check_cond_jmp_op+0x1625/0x2910
[   99.212515][ T7053]  ? __pfx_check_cond_jmp_op+0x10/0x10
[   99.214791][ T7053]  do_check+0x6751/0xe520
[   99.216648][ T7053]  ? __pfx_do_check+0x10/0x10
[   99.218614][ T7053]  ? init_func_state+0x1ddf/0x2d20
[   99.220779][ T7053]  do_check_common+0x1949/0x24f0
[   99.223182][ T7053]  bpf_check+0x1746a/0x1d2e0
[   99.225105][ T7053]  ? is_bpf_text_address+0x26/0x2b0
[   99.227251][ T7053]  ? kernel_text_address+0xa5/0xe0
[   99.229379][ T7053]  ? __kernel_text_address+0xd/0x40
[   99.231521][ T7053]  ? __lock_acquire+0xab9/0xd20
[   99.233735][ T7053]  ? perf_trace_lock+0xec/0x3b0
[   99.235668][ T7053]  ? __pfx_perf_trace_lock+0x10/0x10
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   99.239179][ T7053]  ? perf_trace_lock+0xec/0x3b0
[   99.242204][ T7053]  ? perf_trace_lock+0xec/0x3b0
[   99.243978][ T7053]  ? perf_trace_lock+0xec/0x3b0
[   99.245779][ T7053]  ? __pfx_perf_trace_lock+0x10/0x10
[   99.247830][ T7053]  ? __pfx_bpf_check+0x10/0x10
[   99.249797][ T7053]  ? ktime_get_with_offset+0x8c/0x2a0
[   99.253028][ T7053]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[   99.256190][ T7053]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.258259][ T7053]  ? ktime_get_with_offset+0x8c/0x2a0
[   99.260443][ T7053]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[   99.264055][ T7053]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   99.266696][ T7053]  ? __asan_memset+0x22/0x50
[   99.268464][ T7053]  ? bpf_obj_name_cpy+0x194/0x1e0
[   99.270475][ T7053]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[   99.272413][ T7053]  ? security_bpf_prog_load+0x7f/0x310
[   99.274540][ T7053]  bpf_prog_load+0x1318/0x1930
[   99.276239][ T7053]  ? __pfx_bpf_prog_load+0x10/0x10
[   99.278294][ T7053]  ? __pfx_perf_trace_lock+0x10/0x10
[   99.280490][ T7053]  ? bpf_lsm_bpf+0x9/0x20
[   99.282085][ T7053]  ? security_bpf+0x7e/0x300
[   99.283813][ T7053]  __sys_bpf+0x528/0x870
[   99.285567][ T7053]  ? __pfx___sys_bpf+0x10/0x10
[   99.287550][ T7053]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[   99.290296][ T7053]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[   99.293033][ T7053]  __x64_sys_bpf+0x7c/0x90
[   99.294486][ T7053]  do_syscall_64+0xfa/0x3b0
[   99.296296][ T7053]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.298348][ T7053]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.300766][ T7053]  ? exc_page_fault+0x9f/0xf0
[   99.302645][ T7053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.304625][ T7053] RIP: 0033:0x7f50ead8eba9
[   99.306408][ T7053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.314326][ T7053] RSP: 002b:00007f50ebcd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   99.318084][ T7053] RAX: ffffffffffffffda RBX: 00007f50eafd5fa0 RCX: 00007f50ead8eba9
[   99.321357][ T7053] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[   99.324695][ T7053] RBP: 00007f50eae11e19 R08: 0000000000000000 R09: 0000000000000000
[   99.327902][ T7053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.331197][ T7053] R13: 00007f50eafd6038 R14: 00007f50eafd5fa0 R15: 00007ffcaf726758
[   99.334576][ T7053]  </TASK>
[   99.336733][ T7053] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   99.339724][ T7053] CPU: 1 UID: 0 PID: 7053 Comm: syz.2.446 Not tainted syzkaller #0 PREEMPT(full) 
[   99.343431][ T7053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   99.347566][ T7053] Call Trace:
[   99.349004][ T7053]  <TASK>
[   99.350227][ T7053]  dump_stack_lvl+0x99/0x250
[   99.352175][ T7053]  ? __asan_memcpy+0x40/0x70
[   99.354162][ T7053]  ? __pfx_dump_stack_lvl+0x10/0x10
[   99.356349][ T7053]  ? __pfx__printk+0x10/0x10
[   99.358323][ T7053]  vpanic+0x281/0x750
[   99.360038][ T7053]  ? __pfx__printk+0x10/0x10
[   99.361953][ T7053]  ? __pfx_vpanic+0x10/0x10
[   99.363834][ T7053]  ? is_bpf_text_address+0x26/0x2b0
[   99.366011][ T7053]  panic+0xb9/0xc0
[   99.367567][ T7053]  ? __pfx_panic+0x10/0x10
[   99.369430][ T7053]  __warn+0x31b/0x4b0
[   99.371071][ T7053]  ? reg_bounds_sanity_check+0x6e6/0xc20
[   99.373429][ T7053]  ? reg_bounds_sanity_check+0x6e6/0xc20
[   99.375714][ T7053]  report_bug+0x2be/0x4f0
[   99.377543][ T7053]  ? reg_bounds_sanity_check+0x6e6/0xc20
[   99.379853][ T7053]  ? reg_bounds_sanity_check+0x6e6/0xc20
[   99.382196][ T7053]  ? reg_bounds_sanity_check+0x6e8/0xc20
[   99.384486][ T7053]  handle_bug+0x84/0x160
[   99.386250][ T7053]  exc_invalid_op+0x1a/0x50
[   99.388171][ T7053]  asm_exc_invalid_op+0x1a/0x20
[   99.390196][ T7053] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20
[   99.392662][ T7053] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 8f 2a aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08
[   99.400350][ T7053] RSP: 0018:ffffc90002f2ef08 EFLAGS: 00010282
[   99.402830][ T7053] RAX: 1878cc0396790200 RBX: 00000000ffffdfcc RCX: 0000000000080000
[   99.406079][ T7053] RDX: ffffc90007ec9000 RSI: 0000000000031e6c RDI: 0000000000031e6d
[   99.409325][ T7053] RBP: 00000000ffffdfcd R08: 0000000000000003 R09: 0000000000000004
[   99.412523][ T7053] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888107e3d258
[   99.415784][ T7053] R13: ffff888107e3d278 R14: ffff888107e3d290 R15: 00000000ffffdfcc
[   99.419108][ T7053]  reg_set_min_max+0x214/0x300
[   99.421093][ T7053]  check_cond_jmp_op+0x1625/0x2910
[   99.423241][ T7053]  ? __pfx_check_cond_jmp_op+0x10/0x10
[   99.425483][ T7053]  do_check+0x6751/0xe520
[   99.427310][ T7053]  ? __pfx_do_check+0x10/0x10
[   99.429255][ T7053]  ? init_func_state+0x1ddf/0x2d20
[   99.431368][ T7053]  do_check_common+0x1949/0x24f0
[   99.433435][ T7053]  bpf_check+0x1746a/0x1d2e0
[   99.435417][ T7053]  ? is_bpf_text_address+0x26/0x2b0
[   99.437528][ T7053]  ? kernel_text_address+0xa5/0xe0
[   99.439643][ T7053]  ? __kernel_text_address+0xd/0x40
[   99.441799][ T7053]  ? __lock_acquire+0xab9/0xd20
[   99.443811][ T7053]  ? perf_trace_lock+0xec/0x3b0
[   99.445817][ T7053]  ? __pfx_perf_trace_lock+0x10/0x10
[   99.447980][ T7053]  ? perf_trace_lock+0xec/0x3b0
[   99.449984][ T7053]  ? perf_trace_lock+0xec/0x3b0
[   99.451961][ T7053]  ? perf_trace_lock+0xec/0x3b0
[   99.453981][ T7053]  ? __pfx_perf_trace_lock+0x10/0x10
[   99.456184][ T7053]  ? __pfx_bpf_check+0x10/0x10
[   99.458155][ T7053]  ? ktime_get_with_offset+0x8c/0x2a0
[   99.460364][ T7053]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[   99.462922][ T7053]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.465044][ T7053]  ? ktime_get_with_offset+0x8c/0x2a0
[   99.467301][ T7053]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[   99.469860][ T7053]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   99.472589][ T7053]  ? __asan_memset+0x22/0x50
[   99.474526][ T7053]  ? bpf_obj_name_cpy+0x194/0x1e0
[   99.476643][ T7053]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[   99.478849][ T7053]  ? security_bpf_prog_load+0x7f/0x310
[   99.481149][ T7053]  bpf_prog_load+0x1318/0x1930
[   99.483176][ T7053]  ? __pfx_bpf_prog_load+0x10/0x10
[   99.485316][ T7053]  ? __pfx_perf_trace_lock+0x10/0x10
[   99.487486][ T7053]  ? bpf_lsm_bpf+0x9/0x20
[   99.489309][ T7053]  ? security_bpf+0x7e/0x300
[   99.491195][ T7053]  __sys_bpf+0x528/0x870
[   99.492925][ T7053]  ? __pfx___sys_bpf+0x10/0x10
[   99.494889][ T7053]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[   99.497602][ T7053]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[   99.500330][ T7053]  __x64_sys_bpf+0x7c/0x90
[   99.502132][ T7053]  do_syscall_64+0xfa/0x3b0
[   99.504074][ T7053]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.506268][ T7053]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.508745][ T7053]  ? exc_page_fault+0x9f/0xf0
[   99.510669][ T7053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.513149][ T7053] RIP: 0033:0x7f50ead8eba9
[   99.515022][ T7053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.522980][ T7053] RSP: 002b:00007f50ebcd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   99.526569][ T7053] RAX: ffffffffffffffda RBX: 00007f50eafd5fa0 RCX: 00007f50ead8eba9
[   99.529954][ T7053] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[   99.533240][ T7053] RBP: 00007f50eae11e19 R08: 0000000000000000 R09: 0000000000000000
[   99.536598][ T7053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.540005][ T7053] R13: 00007f50eafd6038 R14: 00007f50eafd5fa0 R15: 00007ffcaf726758
[   99.543306][ T7053]  </TASK>
[   99.545441][ T7053] Kernel Offset: disabled
[   99.547313][ T7053] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:09:14  Registers:
info registers vcpu 0

CPU#0
RAX=00000000b0814676 RBX=000000000000000c RCX=00000000d4d86f16 RDX=0000000050863988
RSI=0000000029a9c76c RDI=ffff888022651cc0 RBP=0000000000000000 RSP=ffffc900000070d0
R8 =0000000000000000 R9 =ffffffff84d0128b R10=dffffc0000000000 R11=fffffbfff1f47027
R12=0000000027ef5679 R13=ffff8880226527b0 R14=ffff888022652990 R15=9c426fd5d4d86f16
RIP=ffffffff819d67d0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f40a933a6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555557b254a8 CR3=0000000025aa6000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81c3e915 ffffffff81c3e915
XMM02=ffffffff81c939bc ffffffff81c939bc XMM03=ffffffff81c939bc ffffffff81c3e915
XMM04=00007f40a930d100 00007f40a87a7460 XMM05=00007f40a87a7478 00007f40a87a74c0
XMM06=00007f40a87a74b8 00007f40a87a74b0 XMM07=00007f40a87a74a8 00007f40a87a74a0
XMM08=0000000000000000 00007f40a8612ee7 XMM09=0000000000000000 00007f40a8612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000034d7b RDI=0000000000034d7c RBP=00000000000003f8 RSP=ffffc90002f2e6b0
R8 =ffff8881069c8237 R9 =1ffff11020d39046 R10=dffffc0000000000 R11=ffffffff854f09f0
R12=dffffc0000000000 R13=ffffffff99af98c4 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f0a6c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f50ebcd96c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f50ebcd8fc8 CR3=00000001065d4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f50eae12e53
XMM06=0000000000000000 00007f50eae12e4d XMM07=0000000000000000 00007f50eae12e61
XMM08=0000000000000000 00007f50eae12ee7 XMM09=0000000000000000 00007f50eae12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
