last executing test programs:

1.377211744s ago: executing program 2 (id=112):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd4e, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2d, 0x80000001, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xed, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4e, 0x81}, 0x104108, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x42}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
socket$kcm(0x2, 0x2, 0x73)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="1c0000001a006b00103fe3dc6e080000810000000006b25700000864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x3, 0x87)
sendmsg(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x20000000)
sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0), 0x3e}, 0x0)

630.816791ms ago: executing program 0 (id=123):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07480006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f877582683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)

563.075528ms ago: executing program 0 (id=124):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11149, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0}, 0x109211, 0x4, 0x10, 0x8, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)

371.879617ms ago: executing program 0 (id=128):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff65"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0xffffffffffffffbe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

310.248787ms ago: executing program 1 (id=132):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a000001", 0x2c}], 0x1}, 0x0)

302.721826ms ago: executing program 0 (id=133):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_config_ext={0x3, 0x8001}, 0x2106, 0xffffffff, 0x8001, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(r1, 0x8b0b, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0))
socket$kcm(0xa, 0x1, 0x106)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r4 = socket$kcm(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000980)=r3, 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0)
socketpair(0x25, 0x5, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008004)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)

301.985307ms ago: executing program 2 (id=134):
socket$kcm(0x1e, 0x4, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x18}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r2 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r2], 0x48}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x541b, &(0x7f0000000640))

211.487253ms ago: executing program 1 (id=135):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002220207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006000000850000000400000085000000d000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001900)={r0, 0x0, 0x0, 0x0, &(0x7f0000005580), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

211.17002ms ago: executing program 2 (id=136):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="180000003e000511d25a80698c6394090124fc602f6e3540", 0x18}], 0x1, 0x0, 0x0, 0x39c}, 0x0)

151.80566ms ago: executing program 1 (id=137):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000200), &(0x7f00000003c0)=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20)

151.634536ms ago: executing program 2 (id=138):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14000000100035", 0x7}], 0x1}, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x2, &(0x7f0000000000), 0x8)

151.444628ms ago: executing program 2 (id=139):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000400)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]})

67.665953ms ago: executing program 1 (id=140):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0xfffffffc, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)

67.356595ms ago: executing program 1 (id=141):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

65.597712ms ago: executing program 0 (id=142):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x30}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

1.282893ms ago: executing program 0 (id=143):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80001, 0x0, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x9004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

242.516µs ago: executing program 1 (id=144):
socket$kcm(0x1e, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8486, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$kcm(0x1e, 0x4, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xca, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x907b7d, 0x1, @perf_config_ext={0x407ffe, 0xaea}, 0x14105, 0x800000, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x4800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r0], 0x48}, 0x0)

0s ago: executing program 2 (id=145):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:29885' (ED25519) to the list of known hosts.
syzkaller login: [   40.589486][ T5763] cgroup: Unknown subsys name 'net'
[   40.653148][ T5763] cgroup: Unknown subsys name 'cpuset'
[   40.659510][ T5763] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   41.875591][ T5763] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   51.113630][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   51.116635][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   51.119229][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   51.122136][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   51.124688][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   51.160838][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   51.170961][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   51.174358][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   51.178141][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   51.182485][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   51.224996][ T5218] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   51.227832][ T5218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   51.230412][ T5218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   51.233891][ T5218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   51.241295][ T5218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   51.383893][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   51.534357][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   51.538952][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.541986][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.544267][ T5850] bridge_slave_0: entered allmulticast mode
[   51.546909][ T5850] bridge_slave_0: entered promiscuous mode
[   51.554487][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.556691][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.558931][ T5850] bridge_slave_1: entered allmulticast mode
[   51.561825][ T5850] bridge_slave_1: entered promiscuous mode
[   51.586895][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   51.605654][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.621696][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.669459][ T5850] team0: Port device team_slave_0 added
[   51.683131][ T5850] team0: Port device team_slave_1 added
[   51.710472][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.713333][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.715776][ T5853] bridge_slave_0: entered allmulticast mode
[   51.718421][ T5853] bridge_slave_0: entered promiscuous mode
[   51.740392][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.743993][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.746238][ T5856] bridge_slave_0: entered allmulticast mode
[   51.748862][ T5856] bridge_slave_0: entered promiscuous mode
[   51.751569][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.753789][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.756029][ T5853] bridge_slave_1: entered allmulticast mode
[   51.758970][ T5853] bridge_slave_1: entered promiscuous mode
[   51.768791][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.771148][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.778729][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.783614][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.785859][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.788416][ T5856] bridge_slave_1: entered allmulticast mode
[   51.791174][ T5856] bridge_slave_1: entered promiscuous mode
[   51.811745][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.813899][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.822319][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.836590][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.845743][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.853125][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.873748][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.908827][ T5850] hsr_slave_0: entered promiscuous mode
[   51.911675][ T5850] hsr_slave_1: entered promiscuous mode
[   51.926551][ T5853] team0: Port device team_slave_0 added
[   51.930919][ T5856] team0: Port device team_slave_0 added
[   51.934826][ T5853] team0: Port device team_slave_1 added
[   51.938506][ T5856] team0: Port device team_slave_1 added
[   51.993562][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.995757][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.005216][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.022698][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.024863][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.033667][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.037616][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.039798][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.048874][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.056020][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.058412][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.067048][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.135383][ T5853] hsr_slave_0: entered promiscuous mode
[   52.137623][ T5853] hsr_slave_1: entered promiscuous mode
[   52.139869][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.142962][ T5853] Cannot create hsr debugfs directory
[   52.148853][ T5856] hsr_slave_0: entered promiscuous mode
[   52.151760][ T5856] hsr_slave_1: entered promiscuous mode
[   52.153882][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.156293][ T5856] Cannot create hsr debugfs directory
[   52.235463][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   52.253961][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   52.266778][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   52.290063][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   52.363349][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.365615][ T5850] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.368311][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.370518][ T5850] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.384248][ T2420] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.387768][ T2420] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.401033][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   52.413496][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   52.421509][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   52.434379][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   52.455401][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   52.459854][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   52.468668][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   52.477129][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   52.518616][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.538585][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   52.550169][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.552561][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.569110][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.571449][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.584653][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.606542][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.609939][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   52.628917][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   52.644611][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.647228][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.651028][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.653797][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.657363][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.659612][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.663943][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.666153][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.798266][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.836618][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.840219][ T5850] veth0_vlan: entered promiscuous mode
[   52.852436][ T5850] veth1_vlan: entered promiscuous mode
[   52.873073][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.890044][ T5850] veth0_macvtap: entered promiscuous mode
[   52.904741][ T5850] veth1_macvtap: entered promiscuous mode
[   52.909614][ T5853] veth0_vlan: entered promiscuous mode
[   52.922358][ T5853] veth1_vlan: entered promiscuous mode
[   52.929390][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.934502][ T5856] veth0_vlan: entered promiscuous mode
[   52.942537][ T5856] veth1_vlan: entered promiscuous mode
[   52.946377][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.957129][ T5850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.960001][ T5850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.963252][ T5850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.965988][ T5850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.992860][ T5856] veth0_macvtap: entered promiscuous mode
[   53.000526][ T5853] veth0_macvtap: entered promiscuous mode
[   53.011938][ T5853] veth1_macvtap: entered promiscuous mode
[   53.017350][ T5856] veth1_macvtap: entered promiscuous mode
[   53.032445][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.035007][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.037488][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.059820][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.066511][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.069322][ T2420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.071103][ T5853] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.074834][ T2420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.075408][ T5853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.080227][ T5853] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.083981][ T5853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.089614][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.098521][ T5856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.105516][ T5856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.108327][ T5856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.111349][ T5856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.125525][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   53.181704][ T5218] Bluetooth: hci0: command tx timeout
[   53.208835][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.215658][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.236510][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.238971][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.261451][ T5218] Bluetooth: hci2: command tx timeout
[   53.263324][ T5218] Bluetooth: hci1: command tx timeout
[   53.268454][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.280017][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.284249][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.291350][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.364547][    C1] hrtimer: interrupt took 15393 ns
[   53.752094][ T5951] delete_channel: no stack
[   53.753757][ T5951] delete_channel: no stack
[   53.790226][ T5955] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.042814][ T5979] : renamed from pim6reg1
[   54.295616][ T5994] Driver unsupported XDP return value 0 on prog  (id 14) dev N/A, expect packet loss!
[   54.485152][ T6004] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.51'.
[   55.178096][ T6021] netlink: 'syz.2.59': attribute type 10 has an invalid length.
[   55.182221][ T6021] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.59'.
[   55.271054][   T54] Bluetooth: hci0: command tx timeout
[   55.344792][ T6040] netlink: 'syz.2.68': attribute type 22 has an invalid length.
[   55.347431][ T6040] netlink: 148 bytes leftover after parsing attributes in process `syz.2.68'.
[   55.352023][   T54] Bluetooth: hci1: command tx timeout
[   55.352181][ T5218] Bluetooth: hci2: command tx timeout
[   56.076351][ T6096] netlink: 'syz.0.93': attribute type 21 has an invalid length.
[   56.079502][ T6096] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.93'.
[   56.239943][ T6104] warning: `syz.1.97' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.340813][ T5218] Bluetooth: hci0: command tx timeout
[   57.402065][ T6155] tap0: tun_chr_ioctl cmd 1074025675
[   57.403905][ T6155] tap0: persist disabled
[   57.421274][ T5218] Bluetooth: hci1: command tx timeout
[   57.423549][ T5218] Bluetooth: hci2: command tx timeout
[   57.585466][ T6157] delete_channel: no stack
[   57.587819][ T6157] delete_channel: no stack
[   57.621760][ T6160] netlink: 'syz.0.123': attribute type 21 has an invalid length.
[   58.039206][ T6186] openvswitch: netlink: Flow key attr not present in new flow.
[   58.250484][ T6205] ------------[ cut here ]------------
[   58.252403][ T6205] verifier bug: error during ctx access conversion(1)
[   58.267778][ T6205] WARNING: CPU: 0 PID: 6205 at kernel/bpf/verifier.c:21409 bpf_check+0x1b6ec/0x1d2e0
[   58.270966][ T6205] Modules linked in:
[   58.272479][ T6205] CPU: 0 UID: 0 PID: 6205 Comm: syz.2.145 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[   58.277263][ T6205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   58.280641][ T6205] RIP: 0010:bpf_check+0x1b6ec/0x1d2e0
[   58.282685][ T6205] Code: 8b e8 88 9b af ff 90 0f 0b 90 90 e9 6b 60 ff ff e8 29 ae eb ff c6 05 80 53 b7 0d 01 90 48 c7 c7 20 01 92 8b e8 65 9b af ff 90 <0f> 0b 90 90 e9 b5 bd ff ff e8 06 ae eb ff c6 05 62 53 b7 0d 01 90
[   58.289019][ T6205] RSP: 0018:ffffc90006bcf600 EFLAGS: 00010246
[   58.291198][ T6205] RAX: 23f4c4ad498e5200 RBX: 0000000000000000 RCX: 0000000000080000
[   58.293832][ T6205] RDX: ffffc9000728a000 RSI: 0000000000004008 RDI: 0000000000004009
[   58.296652][ T6205] RBP: ffffc90006bcfb50 R08: ffff88804b024293 R09: 1ffff11009604852
[   58.299268][ T6205] R10: dffffc0000000000 R11: ffffed1009604853 R12: ffffc90006fc104a
[   58.302757][ T6205] R13: dffffc0000000000 R14: ffff88803aba8000 R15: 0000000000000004
[   58.305398][ T6205] FS:  00007f11980676c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[   58.308308][ T6205] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   58.310486][ T6205] CR2: 0000000000000001 CR3: 0000000027d1a000 CR4: 00000000000006f0
[   58.313305][ T6205] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[   58.315914][ T6205] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[   58.318464][ T6205] Call Trace:
[   58.319547][ T6205]  <TASK>
[   58.320531][ T6205]  ? is_bpf_text_address+0x26/0x2b0
[   58.322452][ T6205]  ? __pfx_flow_dissector_convert_ctx_access+0x10/0x10
[   58.324735][ T6205]  ? __pfx_bpf_check+0x10/0x10
[   58.326349][ T6205]  ? ktime_get_with_offset+0x8c/0x2a0
[   58.328162][ T6205]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[   58.330240][ T6205]  ? ktime_get_with_offset+0x8c/0x2a0
[   58.332146][ T6205]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   58.334318][ T6205]  ? __asan_memset+0x22/0x50
[   58.335869][ T6205]  ? bpf_obj_name_cpy+0x194/0x1e0
[   58.337539][ T6205]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[   58.339261][ T6205]  ? security_bpf_prog_load+0x7f/0x310
[   58.341342][ T6205]  bpf_prog_load+0x1318/0x1930
[   58.343000][ T6205]  ? __pfx_bpf_prog_load+0x10/0x10
[   58.344630][ T6205]  ? bpf_lsm_bpf+0x9/0x20
[   58.346029][ T6205]  ? security_bpf+0x7e/0x300
[   58.347579][ T6205]  __sys_bpf+0x528/0x870
[   58.349003][ T6205]  ? __pfx___sys_bpf+0x10/0x10
[   58.350612][ T6205]  ? exc_page_fault+0x76/0xf0
[   58.352284][ T6205]  __x64_sys_bpf+0x7c/0x90
[   58.353758][ T6205]  do_syscall_64+0xfa/0x3b0
[   58.355218][ T6205]  ? lockdep_hardirqs_on+0x9c/0x150
[   58.356916][ T6205]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.358852][ T6205]  ? exc_page_fault+0x9f/0xf0
[   58.360431][ T6205]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.362459][ T6205] RIP: 0033:0x7f119718e9a9
[   58.363947][ T6205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.370223][ T6205] RSP: 002b:00007f1198067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   58.373049][ T6205] RAX: ffffffffffffffda RBX: 00007f11973b5fa0 RCX: 00007f119718e9a9
[   58.375666][ T6205] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[   58.378264][ T6205] RBP: 00007f1197210d69 R08: 0000000000000000 R09: 0000000000000000
[   58.381738][ T6205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   58.384259][ T6205] R13: 0000000000000001 R14: 00007f11973b5fa0 R15: 00007fff5a9e1658
[   58.386777][ T6205]  </TASK>
[   58.387829][ T6205] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   58.390242][ T6205] CPU: 0 UID: 0 PID: 6205 Comm: syz.2.145 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[   58.394239][ T6205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   58.397622][ T6205] Call Trace:
[   58.398746][ T6205]  <TASK>
[   58.399746][ T6205]  dump_stack_lvl+0x99/0x250
[   58.401287][ T6205]  ? __asan_memcpy+0x40/0x70
[   58.402787][ T6205]  ? __pfx_dump_stack_lvl+0x10/0x10
[   58.404445][ T6205]  ? __pfx__printk+0x10/0x10
[   58.405953][ T6205]  panic+0x2db/0x790
[   58.407271][ T6205]  ? __pfx_panic+0x10/0x10
[   58.408777][ T6205]  ? show_trace_log_lvl+0x4fb/0x550
[   58.410506][ T6205]  __warn+0x31b/0x4b0
[   58.411833][ T6205]  ? bpf_check+0x1b6ec/0x1d2e0
[   58.413411][ T6205]  ? bpf_check+0x1b6ec/0x1d2e0
[   58.414995][ T6205]  report_bug+0x2be/0x4f0
[   58.416443][ T6205]  ? bpf_check+0x1b6ec/0x1d2e0
[   58.418033][ T6205]  ? bpf_check+0x1b6ec/0x1d2e0
[   58.419667][ T6205]  ? bpf_check+0x1b6ee/0x1d2e0
[   58.421269][ T6205]  handle_bug+0x84/0x160
[   58.422675][ T6205]  exc_invalid_op+0x1a/0x50
[   58.424189][ T6205]  asm_exc_invalid_op+0x1a/0x20
[   58.425793][ T6205] RIP: 0010:bpf_check+0x1b6ec/0x1d2e0
[   58.427544][ T6205] Code: 8b e8 88 9b af ff 90 0f 0b 90 90 e9 6b 60 ff ff e8 29 ae eb ff c6 05 80 53 b7 0d 01 90 48 c7 c7 20 01 92 8b e8 65 9b af ff 90 <0f> 0b 90 90 e9 b5 bd ff ff e8 06 ae eb ff c6 05 62 53 b7 0d 01 90
[   58.433806][ T6205] RSP: 0018:ffffc90006bcf600 EFLAGS: 00010246
[   58.435811][ T6205] RAX: 23f4c4ad498e5200 RBX: 0000000000000000 RCX: 0000000000080000
[   58.438393][ T6205] RDX: ffffc9000728a000 RSI: 0000000000004008 RDI: 0000000000004009
[   58.440939][ T6205] RBP: ffffc90006bcfb50 R08: ffff88804b024293 R09: 1ffff11009604852
[   58.443490][ T6205] R10: dffffc0000000000 R11: ffffed1009604853 R12: ffffc90006fc104a
[   58.446075][ T6205] R13: dffffc0000000000 R14: ffff88803aba8000 R15: 0000000000000004
[   58.448652][ T6205]  ? is_bpf_text_address+0x26/0x2b0
[   58.450370][ T6205]  ? __pfx_flow_dissector_convert_ctx_access+0x10/0x10
[   58.452635][ T6205]  ? __pfx_bpf_check+0x10/0x10
[   58.454235][ T6205]  ? ktime_get_with_offset+0x8c/0x2a0
[   58.456008][ T6205]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[   58.458047][ T6205]  ? ktime_get_with_offset+0x8c/0x2a0
[   58.459796][ T6205]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   58.461853][ T6205]  ? __asan_memset+0x22/0x50
[   58.463405][ T6205]  ? bpf_obj_name_cpy+0x194/0x1e0
[   58.465056][ T6205]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[   58.466801][ T6205]  ? security_bpf_prog_load+0x7f/0x310
[   58.468633][ T6205]  bpf_prog_load+0x1318/0x1930
[   58.470234][ T6205]  ? __pfx_bpf_prog_load+0x10/0x10
[   58.471903][ T6205]  ? bpf_lsm_bpf+0x9/0x20
[   58.473339][ T6205]  ? security_bpf+0x7e/0x300
[   58.474842][ T6205]  __sys_bpf+0x528/0x870
[   58.476264][ T6205]  ? __pfx___sys_bpf+0x10/0x10
[   58.477852][ T6205]  ? exc_page_fault+0x76/0xf0
[   58.479392][ T6205]  __x64_sys_bpf+0x7c/0x90
[   58.480855][ T6205]  do_syscall_64+0xfa/0x3b0
[   58.482361][ T6205]  ? lockdep_hardirqs_on+0x9c/0x150
[   58.484081][ T6205]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.486072][ T6205]  ? exc_page_fault+0x9f/0xf0
[   58.487637][ T6205]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.489597][ T6205] RIP: 0033:0x7f119718e9a9
[   58.491054][ T6205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.497296][ T6205] RSP: 002b:00007f1198067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   58.500026][ T6205] RAX: ffffffffffffffda RBX: 00007f11973b5fa0 RCX: 00007f119718e9a9
[   58.502613][ T6205] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[   58.505215][ T6205] RBP: 00007f1197210d69 R08: 0000000000000000 R09: 0000000000000000
[   58.507720][ T6205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   58.510239][ T6205] R13: 0000000000000001 R14: 00007f11973b5fa0 R15: 00007fff5a9e1658
[   58.512858][ T6205]  </TASK>
[   58.514560][ T6205] Kernel Offset: disabled
[   58.516031][ T6205] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:32:45  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000006fe2 RDI=0000000000006fe3 RBP=00000000000003f8 RSP=ffffc90006bcedb0
R8 =ffff8881081b8237 R9 =1ffff11021037046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af588e R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f11980676c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000001 CR3=0000000027d1a000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000ffff00000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000068125 RBX=ffff888136623900 RCX=0000000000000838 RDX=0000000000000000
RSI=0000000000068125 RDI=0000000000000838 RBP=0000000000000001 RSP=ffffc90004d874d8
R8 =0000000000000000 R9 =ffffffff81aec9fe R10=0000000000000003 R11=ffffffff81702490
R12=00000000100015cf R13=dffffc0000000000 R14=0000000000068125 R15=0000000000000020
RIP=ffffffff81714f69 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3f518476c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f11973b7bac CR3=0000000111faa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f3f50b86478 00007f3f50b86450 XMM03=00007f3f50b86488 00007f3f50b86480
XMM04=00007f3f516ed100 00007f3f50b86440 XMM05=00007f3f50b86458 00007f3f50b864a0
XMM06=00007f3f50b86498 00007f3f50b86490 XMM07=00007f3f50b86488 00007f3f50b86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f3f50a11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
