last executing test programs:

3.835335186s ago: executing program 2 (id=699):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe80000000008847875a65059ff57b00000000000000000000000000ac1414aa00006558"], 0xcfa4)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x66)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

2.505956363s ago: executing program 2 (id=710):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

2.391976055s ago: executing program 2 (id=711):
r0 = socket$kcm(0x2, 0x3, 0x84)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r0})

2.241426325s ago: executing program 2 (id=712):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x28}, 0x94)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x24000050)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0xc8012, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x8052b, 0xca, 0x1, 0x0, 0x2, 0x2, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r2, &(0x7f0000003b40)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1.702397314s ago: executing program 1 (id=717):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000001c0)=@del={0xe0, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {{'xts-camellia-aesni\x00'}, '\x00', '\x00', 0x0, 0x2400}}, 0xe0}}, 0x40400c4)

1.664614615s ago: executing program 1 (id=718):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x200040c4)

1.649889311s ago: executing program 0 (id=719):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000000)="b9ff03316844268cb89e14f008", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

669.963099ms ago: executing program 0 (id=720):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)

610.321354ms ago: executing program 0 (id=721):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

549.085113ms ago: executing program 0 (id=722):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0xff, 0x0, 0xfd, 0x0, 0xb0, 0x25108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x4}, 0x2a10, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x8012000a, 0x0, 0x0, 0xfffffff8, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1f, 0x0, 0x0, 0x2000}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000bf71000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xf7, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x42}, 0x21)
setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf)
r3 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x21, 0x10, 0xffff, 0x8, 0x18040, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000380)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xfb, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000500), &(0x7f0000000580), 0x8, 0xa3, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x7, 0x9, 0x2288, r4, 0xffffffff, '\x00', r5, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0x5}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000b7080000000000007b8af8ff00000000bfa2539eee316f46f99d20f17e198eb400000000000007020000f8ffffffb7030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@decl_tag={0xa, 0x0, 0x0, 0x11, 0x4, 0x8}]}, {0x0, [0x30]}}, &(0x7f0000000340)=""/116, 0x2b, 0x74, 0x0, 0x0, 0x10000}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000540)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], <r7=>0x0, 0x29, &(0x7f0000000640)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f00000006c0), 0x8, 0xa4, 0x8, 0x8, &(0x7f0000000700)}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d80)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000900)=@raw=[@ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0xa720d1f0}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], 0x0, 0x7f, 0xd9, &(0x7f0000001c40)=""/217, 0x40f00, 0x2a, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000b80)={0x1, 0xc, 0xfa, 0x100}, 0x10, 0x15b0f, 0xffffffffffffffff, 0x4, &(0x7f0000000bc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001d40)=[{0x3, 0x3, 0xb, 0xa}, {0x2, 0x3, 0xd, 0x3}, {0x0, 0x2, 0x9, 0xc}, {0x5, 0x2, 0x3, 0x9}], 0x10, 0x8a}, 0x94)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
close(r8)
ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x19, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@x}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0xe0, &(0x7f0000000680)=""/224, 0x41100, 0x71, '\x00', r5, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x6, 0x1, 0x8}, 0x10, r7, r2, 0x1, &(0x7f0000000780)=[r1], &(0x7f0000000880)=[{0x2, 0x5, 0x2, 0x6}], 0x10, 0xd76}, 0x94)
recvmsg(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002e40)=""/255, 0xff}], 0x1, &(0x7f0000000480)=""/4, 0x4}, 0x40010070)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x68, 0x30, 0xffff, 0x4000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0xc0000000, 0x3, 0x7}, 0x3, r11}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0)
sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0)

512.580387ms ago: executing program 2 (id=723):
r0 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x4}, 0x0, 0x0, r1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
socket$kcm(0xa, 0x3, 0x3a)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}, {0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x38}, 0x41)

511.267091ms ago: executing program 1 (id=724):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="2e00000011008188040f80ec59acbc0413a1f848090000005e2f0042180000180e000a001400000002800000121f", 0x2e}], 0x1}, 0x0)

452.158045ms ago: executing program 0 (id=725):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000038000b63d25a80648c251b0908b5e9d1", 0x14}], 0x1}, 0x0)

353.490108ms ago: executing program 0 (id=726):
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f0000000500)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}, 0x4}}, 0x10, &(0x7f0000000580)=[{0x0}], 0x1, &(0x7f0000000940)="1cebd111cfc7556586ef17b17e67a00198a125e6639e80de21e9230b13a7f053b87fc5cb73dfbd61893f0bc741cd4d56544a974adadfed", 0x37, 0x1}, 0x20000040)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x98051, 0x8, 0x0, 0x6, 0x2118, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8940, &(0x7f0000000080))
r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x0, 0x100, 0xfffffff8, 0x44, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x48)
write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12)
r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0)
write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12)

349.225779ms ago: executing program 1 (id=727):
r0 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x9c7c, 0x4, 0x98, 0x9, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20018890)

169.387071ms ago: executing program 2 (id=728):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x18)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50)
socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$kcm(0x10, 0x2, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x29, 0x11, 0x0, 0x1300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80)

78.146193ms ago: executing program 1 (id=729):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)

0s ago: executing program 1 (id=730):
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:21833' (ED25519) to the list of known hosts.
syzkaller login: [   55.983252][ T5831] cgroup: Unknown subsys name 'net'
[   56.071266][ T5831] cgroup: Unknown subsys name 'cpuset'
[   56.075001][ T5831] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.883897][ T5831] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   67.781448][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.890948][ T5863] chnl_net:caif_netlink_parms(): no params data found
[   67.945119][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.947390][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.950762][ T5863] bridge_slave_0: entered allmulticast mode
[   67.953704][ T5863] bridge_slave_0: entered promiscuous mode
[   67.957483][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.960230][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.962524][ T5863] bridge_slave_1: entered allmulticast mode
[   67.965197][ T5863] bridge_slave_1: entered promiscuous mode
[   68.029513][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.034358][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.061730][ T5863] team0: Port device team_slave_0 added
[   68.065100][ T5863] team0: Port device team_slave_1 added
[   68.090799][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.093148][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.101849][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.106602][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.109163][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.117511][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.153792][ T5863] hsr_slave_0: entered promiscuous mode
[   68.156138][ T5863] hsr_slave_1: entered promiscuous mode
[   68.261108][ T5863] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   68.266962][ T5863] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   68.272132][ T5863] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   68.276448][ T5863] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.297931][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.300264][ T5863] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.302908][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.305112][ T5863] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.342648][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.352216][ T4148] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.355406][ T4148] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.365438][ T5863] 8021q: adding VLAN 0 to HW filter on device team0
[   68.372256][ T4148] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.374552][ T4148] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.381165][ T4148] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.383462][ T4148] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.484895][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.507751][ T5863] veth0_vlan: entered promiscuous mode
[   68.513371][ T5863] veth1_vlan: entered promiscuous mode
[   68.531425][ T5863] veth0_macvtap: entered promiscuous mode
[   68.535388][ T5863] veth1_macvtap: entered promiscuous mode
[   68.545818][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.553872][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.561776][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.565130][ T5676] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.568257][ T5676] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.571719][ T5676] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.961846][ T5676] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.105505][ T5676] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.279390][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.283612][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.289044][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.293659][ T5900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.296853][ T5676] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.306313][ T5900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.344066][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.352416][ T5903] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.358447][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.364327][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.364411][ T5903] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.375849][ T5903] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.380757][ T5903] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.383976][ T5903] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.387203][ T5903] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.390577][ T5903] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.720053][ T5897] chnl_net:caif_netlink_parms(): no params data found
[   69.779267][ T5894] chnl_net:caif_netlink_parms(): no params data found
[   69.843021][ T5898] chnl_net:caif_netlink_parms(): no params data found
[   69.903351][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.905995][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.909081][ T5897] bridge_slave_0: entered allmulticast mode
[   69.912738][ T5897] bridge_slave_0: entered promiscuous mode
[   69.937875][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.940557][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.943181][ T5897] bridge_slave_1: entered allmulticast mode
[   69.946457][ T5897] bridge_slave_1: entered promiscuous mode
[   70.022945][ T5897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.032059][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.034736][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.037335][ T5894] bridge_slave_0: entered allmulticast mode
[   70.041675][ T5894] bridge_slave_0: entered promiscuous mode
[   70.046832][ T5897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.081060][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.083815][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.086598][ T5894] bridge_slave_1: entered allmulticast mode
[   70.090689][ T5894] bridge_slave_1: entered promiscuous mode
[   70.143127][ T5898] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.145781][ T5898] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.148792][ T5898] bridge_slave_0: entered allmulticast mode
[   70.152228][ T5898] bridge_slave_0: entered promiscuous mode
[   70.161067][ T5894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.165228][ T5897] team0: Port device team_slave_0 added
[   70.170124][ T5894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.185983][ T5898] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.188934][ T5898] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.191562][ T5898] bridge_slave_1: entered allmulticast mode
[   70.195029][ T5898] bridge_slave_1: entered promiscuous mode
[   70.203915][ T5897] team0: Port device team_slave_1 added
[   70.225061][ T5894] team0: Port device team_slave_0 added
[   70.230081][ T5894] team0: Port device team_slave_1 added
[   70.292948][ T5898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.299061][ T5898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.302877][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.305128][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.314060][ T5897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.356777][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.360090][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.369934][ T5897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.376176][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.379264][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.389043][ T5894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.394817][ T5898] team0: Port device team_slave_0 added
[   70.400110][ T5898] team0: Port device team_slave_1 added
[   70.416237][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.418768][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.427539][ T5894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.446893][ T5676] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.473240][ T5898] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.475721][ T5898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.485273][ T5898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.529569][ T5898] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.532176][ T5898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.541621][ T5898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.559880][ T5894] hsr_slave_0: entered promiscuous mode
[   70.563074][ T5894] hsr_slave_1: entered promiscuous mode
[   70.566301][ T5894] debugfs: 'hsr0' already exists in 'hsr'
[   70.568743][ T5894] Cannot create hsr debugfs directory
[   70.615929][ T5897] hsr_slave_0: entered promiscuous mode
[   70.619768][ T5897] hsr_slave_1: entered promiscuous mode
[   70.622521][ T5897] debugfs: 'hsr0' already exists in 'hsr'
[   70.624720][ T5897] Cannot create hsr debugfs directory
[   70.640948][ T5898] hsr_slave_0: entered promiscuous mode
[   70.643564][ T5898] hsr_slave_1: entered promiscuous mode
[   70.646115][ T5898] debugfs: 'hsr0' already exists in 'hsr'
[   70.648048][ T5898] Cannot create hsr debugfs directory
[   71.252601][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.255117][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.409760][ T5895] Bluetooth: hci2: command tx timeout
[   71.410106][ T5899] Bluetooth: hci1: command tx timeout
[   71.412200][ T5903] Bluetooth: hci0: command tx timeout
[   72.012156][ T5676] bridge_slave_1: left allmulticast mode
[   72.015453][ T5676] bridge_slave_1: left promiscuous mode
[   72.018098][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.024970][ T5676] bridge_slave_0: left allmulticast mode
[   72.026809][ T5676] bridge_slave_0: left promiscuous mode
[   72.030815][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.313426][ T5676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.319400][ T5676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.324178][ T5676] bond0 (unregistering): Released all slaves
[   72.427775][ T5676] hsr_slave_0: left promiscuous mode
[   72.431264][ T5676] hsr_slave_1: left promiscuous mode
[   72.433844][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.436401][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.441278][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.443538][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.457582][ T5676] veth1_macvtap: left promiscuous mode
[   72.464016][ T5676] veth0_macvtap: left promiscuous mode
[   72.466189][ T5676] veth1_vlan: left promiscuous mode
[   72.468088][ T5676] veth0_vlan: left promiscuous mode
[   72.789626][ T5676] team0 (unregistering): Port device team_slave_1 removed
[   72.808380][ T5676] team0 (unregistering): Port device team_slave_0 removed
[   73.182834][ T5894] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.193430][ T5894] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.200853][ T5894] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.215097][ T5894] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.300766][ T5898] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.308469][ T5898] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.316905][ T5898] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.339098][ T5898] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.403895][ T5897] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.413240][ T5897] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.489082][ T5903] Bluetooth: hci0: command tx timeout
[   73.500308][ T5903] Bluetooth: hci2: command tx timeout
[   73.500357][ T5895] Bluetooth: hci1: command tx timeout
[   73.510478][ T5897] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.517418][ T5897] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.612262][ T5894] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.641988][ T5898] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.664991][ T5894] 8021q: adding VLAN 0 to HW filter on device team0
[   73.673968][ T5898] 8021q: adding VLAN 0 to HW filter on device team0
[   73.685051][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.687779][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.700863][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.703912][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.720838][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.722931][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.739740][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.742658][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.807327][ T5898] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.836595][ T5897] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.857233][ T5897] 8021q: adding VLAN 0 to HW filter on device team0
[   73.869711][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.872600][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.886624][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.889586][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.975323][ T5894] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.004813][ T5898] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.048020][ T5894] veth0_vlan: entered promiscuous mode
[   74.064973][ T5894] veth1_vlan: entered promiscuous mode
[   74.091962][ T5898] veth0_vlan: entered promiscuous mode
[   74.114906][ T5898] veth1_vlan: entered promiscuous mode
[   74.141553][ T5894] veth0_macvtap: entered promiscuous mode
[   74.155655][ T5894] veth1_macvtap: entered promiscuous mode
[   74.174672][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.185664][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.198040][ T5898] veth0_macvtap: entered promiscuous mode
[   74.204197][ T5897] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.215274][ T5876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.220005][ T5876] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.231412][ T5898] veth1_macvtap: entered promiscuous mode
[   74.237672][ T5876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.241788][ T5876] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.277929][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.307064][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.346905][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.354379][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.359243][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.363566][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.379578][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.385064][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.420510][ T5897] veth0_vlan: entered promiscuous mode
[   74.420573][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.426161][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.452365][ T5897] veth1_vlan: entered promiscuous mode
[   74.525940][ T5897] veth0_macvtap: entered promiscuous mode
[   74.537429][ T5897] veth1_macvtap: entered promiscuous mode
[   74.566229][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.580837][ T4148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.584508][ T4148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.600281][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.625422][ T4148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.629614][ T4148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.641590][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.645248][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.650873][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.657897][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.708147][    C1] hrtimer: interrupt took 63852 ns
[   74.825319][ T4148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.833112][ T4148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.844668][ T5976] netlink: 156 bytes leftover after parsing attributes in process `syz.1.13'.
[   74.884423][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.887506][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.106440][ T5991] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.135392][ T5993] wlan1 speed is unknown, defaulting to 1000
[   75.140314][ T5993] wlan1 speed is unknown, defaulting to 1000
[   75.148792][ T5993] wlan1 speed is unknown, defaulting to 1000
[   75.174082][ T5993] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   75.212324][ T5993] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   75.298024][ T5993] wlan1 speed is unknown, defaulting to 1000
[   75.305267][ T5993] wlan1 speed is unknown, defaulting to 1000
[   75.312236][ T5993] wlan1 speed is unknown, defaulting to 1000
[   75.392616][ T5988] Driver unsupported XDP return value 0 on prog  (id 6) dev N/A, expect packet loss!
[   75.566611][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'.
[   75.573784][ T5895] Bluetooth: hci2: command tx timeout
[   75.573848][ T5903] Bluetooth: hci0: command tx timeout
[   75.576689][ T5895] Bluetooth: hci1: command tx timeout
[   76.354051][ T6042] netlink: 'syz.1.39': attribute type 1 has an invalid length.
[   76.357293][ T6042] netlink: 'syz.1.39': attribute type 1 has an invalid length.
[   76.555918][ T6036] Zero length message leads to an empty skb
[   76.650124][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'.
[   76.915068][ T6062] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.46'.
[   77.013993][ T6064] netlink: 40 bytes leftover after parsing attributes in process `syz.2.47'.
[   77.373546][ T6082] cgroup: fork rejected by pids controller in /syz1
[   77.649383][ T5899] Bluetooth: hci2: command tx timeout
[   77.651488][ T5895] Bluetooth: hci0: command tx timeout
[   77.659955][ T5895] Bluetooth: hci1: command tx timeout
[   77.914157][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.000462][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.090060][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.164664][ T6103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.64'.
[   78.165423][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.192440][ T6103] caif0: entered promiscuous mode
[   78.198892][ T6103] caif0: entered allmulticast mode
[   78.211153][ T6103] netlink: 10 bytes leftover after parsing attributes in process `syz.2.64'.
[   78.332292][   T13] bridge_slave_1: left allmulticast mode
[   78.334554][   T13] bridge_slave_1: left promiscuous mode
[   78.336974][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.355361][   T13] bridge_slave_0: left allmulticast mode
[   78.369527][ T5899] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.388674][ T5899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.389417][   T13] bridge_slave_0: left promiscuous mode
[   78.393436][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.406297][ T5899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.415671][ T5899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.418594][ T5899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.834366][ T5895] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11
[   78.854137][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.862446][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.866438][   T13] bond0 (unregistering): Released all slaves
[   78.961132][ T6104] wlan1 speed is unknown, defaulting to 1000
[   79.540283][ T6148] netlink: 60 bytes leftover after parsing attributes in process `syz.2.77'.
[   79.559643][ T6149] netlink: 60 bytes leftover after parsing attributes in process `syz.2.77'.
[   79.691758][   T13] hsr_slave_0: left promiscuous mode
[   79.694997][   T13] hsr_slave_1: left promiscuous mode
[   79.697693][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.703715][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.707103][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.715844][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.735629][   T13] veth1_macvtap: left promiscuous mode
[   79.737482][   T13] veth0_macvtap: left promiscuous mode
[   79.742443][   T13] veth1_vlan: left promiscuous mode
[   79.744519][   T13] veth0_vlan: left promiscuous mode
[   80.076495][   T13] team0 (unregistering): Port device team_slave_1 removed
[   80.095267][   T13] team0 (unregistering): Port device team_slave_0 removed
[   80.397244][ T6104] chnl_net:caif_netlink_parms(): no params data found
[   80.450835][ T5895] Bluetooth: hci0: command tx timeout
[   80.595770][ T6175] netlink: 60 bytes leftover after parsing attributes in process `syz.0.82'.
[   80.642125][ T6171] netlink: 60 bytes leftover after parsing attributes in process `syz.0.82'.
[   80.645603][ T6104] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.653229][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.657011][ T6104] bridge_slave_0: entered allmulticast mode
[   80.661895][ T6104] bridge_slave_0: entered promiscuous mode
[   80.667712][ T6178] netlink: 'syz.2.83': attribute type 3 has an invalid length.
[   80.676726][ T6175] netlink: 60 bytes leftover after parsing attributes in process `syz.0.82'.
[   80.693942][ T6104] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.705722][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.711753][ T6104] bridge_slave_1: entered allmulticast mode
[   80.715486][ T6104] bridge_slave_1: entered promiscuous mode
[   80.844507][ T6104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.851284][ T6104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.929671][ T6183] warning: `syz.0.85' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   80.937039][ T6104] team0: Port device team_slave_0 added
[   80.951444][ T6104] team0: Port device team_slave_1 added
[   80.982840][ T6104] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.985368][ T6104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.995501][ T6104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.007061][ T6104] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.010786][ T6104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.021749][ T6104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.026769][ T6189] netlink: 'syz.2.88': attribute type 3 has an invalid length.
[   81.086740][ T6104] hsr_slave_0: entered promiscuous mode
[   81.097188][ T6104] hsr_slave_1: entered promiscuous mode
[   81.112213][ T6191] syzkaller0: entered promiscuous mode
[   81.113995][ T6191] syzkaller0: entered allmulticast mode
[   81.609883][ T6211] netlink: 32 bytes leftover after parsing attributes in process `syz.2.95'.
[   81.613799][ T6211] openvswitch: netlink: Missing key (keys=40, expected=100)
[   81.946639][ T6227] netlink: 830 bytes leftover after parsing attributes in process `syz.2.99'.
[   82.154666][ T6104] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   82.172346][ T6104] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   82.187587][ T6104] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   82.205150][ T6104] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   82.414306][ T6104] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.436251][ T6104] 8021q: adding VLAN 0 to HW filter on device team0
[   82.445802][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.448813][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.461115][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.463866][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.539010][ T5895] Bluetooth: hci0: command tx timeout
[   82.725108][ T6104] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.811593][ T6104] veth0_vlan: entered promiscuous mode
[   82.823213][ T6104] veth1_vlan: entered promiscuous mode
[   82.855440][ T6104] veth0_macvtap: entered promiscuous mode
[   82.860819][ T6104] veth1_macvtap: entered promiscuous mode
[   82.881594][ T6104] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.893484][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'.
[   82.899789][ T6104] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.919967][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.922910][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.925674][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.950789][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.012747][ T6285] xt_limit: Overflow, try lower: 324382443/4200216956
[   83.016829][ T4148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.022533][ T4148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.066201][ T6288] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.073557][ T2168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.092648][ T2168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.463908][ T6306] syz.0.117: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   83.526564][ T6306] CPU: 0 UID: 0 PID: 6306 Comm: syz.0.117 Not tainted syzkaller #0 PREEMPT(full) 
[   83.526582][ T6306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   83.526588][ T6306] Call Trace:
[   83.526593][ T6306]  <TASK>
[   83.526609][ T6306]  dump_stack_lvl+0x189/0x250
[   83.526624][ T6306]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[   83.526638][ T6306]  ? __pfx_dump_stack_lvl+0x10/0x10
[   83.526647][ T6306]  ? __pfx__printk+0x10/0x10
[   83.526659][ T6306]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   83.526669][ T6306]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   83.526682][ T6306]  warn_alloc+0x214/0x310
[   83.526695][ T6306]  ? stack_depot_save_flags+0x41b/0x860
[   83.526707][ T6306]  ? __pfx_warn_alloc+0x10/0x10
[   83.526720][ T6306]  ? kasan_save_track+0x4f/0x80
[   83.526730][ T6306]  ? xskq_create+0x56/0x170
[   83.526739][ T6306]  ? xsk_init_queue+0xb0/0x110
[   83.526747][ T6306]  ? xsk_setsockopt+0x57b/0x8d0
[   83.526755][ T6306]  ? do_sock_setsockopt+0x17c/0x1b0
[   83.526762][ T6306]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   83.526769][ T6306]  ? do_syscall_64+0xfa/0x3b0
[   83.526784][ T6306]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.526802][ T6306]  __vmalloc_node_range_noprof+0x125/0x12f0
[   83.526845][ T6306]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   83.526869][ T6306]  ? __kasan_kmalloc+0x93/0xb0
[   83.526889][ T6306]  vmalloc_user_noprof+0xad/0xf0
[   83.526909][ T6306]  ? xskq_create+0xbf/0x170
[   83.526927][ T6306]  xskq_create+0xbf/0x170
[   83.526943][ T6306]  xsk_init_queue+0xb0/0x110
[   83.526955][ T6306]  xsk_setsockopt+0x57b/0x8d0
[   83.526968][ T6306]  ? __pfx_xsk_setsockopt+0x10/0x10
[   83.526978][ T6306]  ? __pfx_aa_sk_perm+0x10/0x10
[   83.526991][ T6306]  ? __fget_files+0x2a/0x420
[   83.526997][ T6306]  ? aa_sock_opt_perm+0xff/0x1b0
[   83.527006][ T6306]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   83.527015][ T6306]  ? __pfx_xsk_setsockopt+0x10/0x10
[   83.527026][ T6306]  do_sock_setsockopt+0x17c/0x1b0
[   83.527037][ T6306]  __x64_sys_setsockopt+0x13f/0x1b0
[   83.527047][ T6306]  do_syscall_64+0xfa/0x3b0
[   83.527059][ T6306]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.527066][ T6306]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   83.527076][ T6306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.527083][ T6306] RIP: 0033:0x7f7b7258ebe9
[   83.527092][ T6306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.527099][ T6306] RSP: 002b:00007f7b7345d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   83.527109][ T6306] RAX: ffffffffffffffda RBX: 00007f7b727c6090 RCX: 00007f7b7258ebe9
[   83.527114][ T6306] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000d
[   83.527119][ T6306] RBP: 00007f7b72611e19 R08: 0000000000000004 R09: 0000000000000000
[   83.527124][ T6306] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   83.527129][ T6306] R13: 00007f7b727c6128 R14: 00007f7b727c6090 R15: 00007fff10e8faa8
[   83.527144][ T6306]  </TASK>
[   83.527204][ T6306] Mem-Info:
[   83.700096][ T6306] active_anon:5755 inactive_anon:0 isolated_anon:0
[   83.700096][ T6306]  active_file:11328 inactive_file:38238 isolated_file:0
[   83.700096][ T6306]  unevictable:1768 dirty:1438 writeback:0
[   83.700096][ T6306]  slab_reclaimable:9494 slab_unreclaimable:52196
[   83.700096][ T6306]  mapped:18083 shmem:2435 pagetables:1087
[   83.700096][ T6306]  sec_pagetables:0 bounce:0
[   83.700096][ T6306]  kernel_misc_reclaimable:0
[   83.700096][ T6306]  free:282537 free_pcp:22507 free_cma:0
[   83.728348][ T6306] Node 0 active_anon:9924kB inactive_anon:0kB active_file:7268kB inactive_file:25908kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:9200kB dirty:4660kB writeback:0kB shmem:4564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4000kB pagetables:1792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   83.746746][ T6306] Node 1 active_anon:13124kB inactive_anon:0kB active_file:38044kB inactive_file:127052kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:63172kB dirty:1096kB writeback:0kB shmem:5180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7696kB pagetables:2436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   83.758183][ T6306] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   83.783562][ T6306] lowmem_reserve[]: 0 811 811 811 811
[   83.785792][ T6306] Node 0 DMA32 free:425436kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9896kB inactive_anon:0kB active_file:7268kB inactive_file:25912kB unevictable:3536kB writepending:4660kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:46620kB local_pcp:28376kB free_cma:0kB
[   83.796908][ T6306] lowmem_reserve[]: 0 0 0 0 0
[   83.802890][ T6306] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   83.813468][ T6306] lowmem_reserve[]: 0 0 854 854 854
[   83.815934][ T6306] Node 1 Normal free:230508kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13056kB inactive_anon:0kB active_file:38044kB inactive_file:127052kB unevictable:3536kB writepending:1096kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:43756kB local_pcp:21268kB free_cma:0kB
[   83.829251][ T6306] lowmem_reserve[]: 0 0 0 0 0
[   83.833362][ T6306] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   83.841669][ T6306] Node 0 DMA32: 291*4kB (UME) 344*8kB (UM) 215*16kB (UME) 63*32kB (UME) 129*64kB (UM) 36*128kB (UM) 23*256kB (UM) 16*512kB (UME) 8*1024kB (UE) 8*2048kB (UME) 89*4096kB (M) = 425436kB
[   83.851914][ T6306] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   83.864276][ T6306] Node 1 Normal: 125*4kB (ME) 675*8kB (UME) 238*16kB (UM) 74*32kB (UM) 51*64kB (ME) 49*128kB (UME) 4*256kB (ME) 4*512kB (M) 1*1024kB (M) 2*2048kB (UM) 49*4096kB (M) = 230508kB
[   83.900277][ T6306] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   83.904142][ T6306] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   83.908612][ T6306] 52007 total pagecache pages
[   83.911278][ T6306] 0 pages in swap cache
[   83.913630][ T6306] Free swap  = 124996kB
[   83.915592][ T6306] Total swap = 124996kB
[   83.920193][ T6306] 786301 pages RAM
[   83.922029][ T6306] 0 pages HighMem/MovableOnly
[   83.924122][ T6306] 241329 pages reserved
[   83.925995][ T6306] 0 pages cma reserved
[   84.078029][ T6330] : renamed from pim6reg1
[   84.474514][ T6352] netlink: 188 bytes leftover after parsing attributes in process `syz.1.126'.
[   84.483210][ T6351] netlink: 48 bytes leftover after parsing attributes in process `syz.0.128'.
[   84.605568][ T6358] netlink: 20 bytes leftover after parsing attributes in process `syz.0.130'.
[   84.609793][ T5895] Bluetooth: hci0: command tx timeout
[   85.381079][ T6386] netlink: 276 bytes leftover after parsing attributes in process `syz.1.142'.
[   85.607994][ T6394] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664
[   86.017626][ T6410] dummy0: entered promiscuous mode
[   86.030235][ T6404] netlink: 'syz.2.150': attribute type 10 has an invalid length.
[   86.079519][ T6413] netlink: 104 bytes leftover after parsing attributes in process `syz.2.156'.
[   86.614034][ T6441] openvswitch: netlink: IP tunnel dst address not specified
[   86.699333][ T5895] Bluetooth: hci0: command tx timeout
[   86.731317][   T24] cfg80211: failed to load regulatory.db
[   87.415693][ T6457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.170'.
[   87.419807][ T6457] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   87.712453][ T6463] netlink: 'syz.2.173': attribute type 39 has an invalid length.
[   88.502731][ T6477] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   88.505722][ T6477] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   88.664252][ T5895] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[   89.484144][ T6519] openvswitch: netlink: Port 808482864 exceeds max allowable 65535
[   89.632090][ T6527] netlink: 'syz.2.201': attribute type 2 has an invalid length.
[   89.635173][ T6527] netlink: 'syz.2.201': attribute type 1 has an invalid length.
[   89.640908][ T6527] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.201'.
[   89.644695][ T6527] nbd: couldn't find a device at index 149
[   89.682075][ T6529] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   89.760706][ T6535] netlink: 'syz.2.205': attribute type 17 has an invalid length.
[   89.763773][ T6535] netlink: 'syz.2.205': attribute type 16 has an invalid length.
[   89.766557][ T6535] netlink: 152 bytes leftover after parsing attributes in process `syz.2.205'.
[   89.913284][ T6545] netlink: 'syz.2.210': attribute type 10 has an invalid length.
[   89.916230][ T6545] netlink: 55 bytes leftover after parsing attributes in process `syz.2.210'.
[   90.688757][ T5899] Bluetooth: hci1: command tx timeout
[   91.960837][ T6593] netlink: 'syz.1.230': attribute type 1 has an invalid length.
[   91.963962][ T6593] netlink: 17 bytes leftover after parsing attributes in process `syz.1.230'.
[   92.087478][ T6597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.843048][ T6612] netlink: 'syz.0.238': attribute type 10 has an invalid length.
[   92.866242][ T6612] 8021q: adding VLAN 0 to HW filter on device team0
[   92.874774][ T6612] bond0: (slave team0): Enslaving as an active interface with an up link
[   92.974054][ T6612] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[   93.038915][ T6612] can: request_module (can-proto-0) failed.
[   93.293284][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'.
[   93.426273][ T6631] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.245'.
[   93.655923][ T6622] netlink: 56 bytes leftover after parsing attributes in process `syz.2.241'.
[   93.665215][ T6641] openvswitch: netlink: Flow actions attr not present in new flow.
[   93.695681][ T6641] syzkaller0: entered promiscuous mode
[   93.704116][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'.
[   96.042405][ T6690] syz.1.267 uses obsolete (PF_INET,SOCK_PACKET)
[   96.477249][ T6699] syzkaller0: entered promiscuous mode
[   96.484610][ T6699] syzkaller0: entered allmulticast mode
[   96.541282][ T6708] netlink: 'syz.1.273': attribute type 1 has an invalid length.
[   97.285291][   T33] audit: type=1107 audit(1757086343.974:2): pid=6740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   97.811295][ T1269] wlan1 speed is unknown, defaulting to 1000
[   97.819982][ T1269] syz0: Port: 1 Link DOWN
[   98.876858][ T6797] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   99.382887][ T6816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.322'.
[   99.898630][ T6818] netlink: 56 bytes leftover after parsing attributes in process `syz.2.323'.
[   99.901641][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.323'.
[   99.904752][ T6818] netlink: 31 bytes leftover after parsing attributes in process `syz.2.323'.
[   99.912772][ T6818] netlink: 'syz.2.323': attribute type 2 has an invalid length.
[   99.915534][ T6818] netlink: 31 bytes leftover after parsing attributes in process `syz.2.323'.
[  100.087909][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.203619][ T6831] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.365085][ T6836] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.330'.
[  101.165873][ T6859] infiniband syz!: set active
[  101.168313][ T6859] infiniband syz!: added team_slave_0
[  101.225822][ T6859] RDS/IB: syz!: added
[  101.229819][ T6859] smc: adding ib device syz! with port count 1
[  101.234362][ T6859] smc:    ib device syz! port 1 has pnetid 
[  101.860352][ T6883] netlink: 'syz.1.350': attribute type 21 has an invalid length.
[  101.863061][ T6883] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.350'.
[  103.854637][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 2166341191 wd_nsec: 2166341165
[  108.958720][ T1269] sched: DL replenish lagged too much
[  112.008486][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.361'.
[  112.392157][ T6923] netlink: 132 bytes leftover after parsing attributes in process `syz.2.363'.
[  112.407213][ T6927] netlink: 'syz.0.364': attribute type 21 has an invalid length.
[  112.462134][ T6929] netlink: 132 bytes leftover after parsing attributes in process `syz.0.365'.
[  113.645244][ T6965] netlink: 'syz.0.379': attribute type 13 has an invalid length.
[  113.659987][ T6965] netlink: 'syz.0.379': attribute type 17 has an invalid length.
[  113.714573][ T6974] netlink: 'syz.1.382': attribute type 1 has an invalid length.
[  113.825832][ T6981] netlink: 60 bytes leftover after parsing attributes in process `syz.1.385'.
[  113.830023][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'.
[  113.834076][ T6981] netlink: 60 bytes leftover after parsing attributes in process `syz.1.385'.
[  114.075224][ T6965] dummy0: left promiscuous mode
[  114.103742][ T6965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  114.115421][ T6977] veth1_macvtap: left promiscuous mode
[  114.117936][ T6977] macsec0: entered allmulticast mode
[  117.053035][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'.
[  117.426638][ T7046] netlink: 'syz.1.416': attribute type 29 has an invalid length.
[  117.448788][ T7046] netlink: 'syz.1.416': attribute type 29 has an invalid length.
[  117.451809][ T7046] netlink: 'syz.1.416': attribute type 29 has an invalid length.
[  117.473181][ T7049] netlink: 'syz.0.417': attribute type 3 has an invalid length.
[  117.476522][ T7049] netlink: 199752 bytes leftover after parsing attributes in process `syz.0.417'.
[  117.632783][ T7059] netlink: 10 bytes leftover after parsing attributes in process `syz.0.421'.
[  117.954602][ T7074] netlink: 'syz.1.429': attribute type 1 has an invalid length.
[  117.957591][ T7074] netlink: 'syz.1.429': attribute type 3 has an invalid length.
[  117.961759][ T7074] netlink: 132 bytes leftover after parsing attributes in process `syz.1.429'.
[  118.082208][ T7075] delete_channel: no stack
[  118.115070][ T7076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.428'.
[  119.117874][ T7091] netlink: 64019 bytes leftover after parsing attributes in process `syz.0.434'.
[  120.468532][ T7105] netlink: 'syz.0.440': attribute type 21 has an invalid length.
[  120.516667][ T7111] netlink: 'syz.2.443': attribute type 13 has an invalid length.
[  120.520065][ T7111] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.443'.
[  120.754691][ T7113] netlink: 168 bytes leftover after parsing attributes in process `syz.1.444'.
[  120.977125][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.455'.
[  120.982426][ T7142] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  120.985444][ T7142] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.993735][ T7140] netlink: 'syz.2.456': attribute type 27 has an invalid length.
[  120.996731][ T7140] netlink: 164 bytes leftover after parsing attributes in process `syz.2.456'.
[  121.031598][ T7140] netlink: 'syz.2.456': attribute type 4 has an invalid length.
[  121.181339][ T7140] .`: renamed from bond0 (while UP)
[  121.873940][ T7187] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.005678][ T7187] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.008699][ T7187] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.039294][ T7187] .`: (slave bridge0): Enslaving as an active interface with an up link
[  122.065424][ T7196] __nla_validate_parse: 6 callbacks suppressed
[  122.065435][ T7196] netlink: 184 bytes leftover after parsing attributes in process `syz.1.481'.
[  122.295204][ T7212] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.488'.
[  122.308292][ T7212] nbd: couldn't find device at index 65542
[  122.548483][ T7225] netlink: 104 bytes leftover after parsing attributes in process `syz.0.494'.
[  122.834054][ T7236] validate_nla: 5 callbacks suppressed
[  122.834086][ T7236] netlink: 'syz.0.499': attribute type 1 has an invalid length.
[  122.847669][ T7236] netlink: 2 bytes leftover after parsing attributes in process `syz.0.499'.
[  122.896931][ T5899] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255
[  123.140425][ T7254] netlink: 'syz.2.508': attribute type 1 has an invalid length.
[  123.143836][ T7254] netlink: 'syz.2.508': attribute type 2 has an invalid length.
[  123.372477][ T7264] syzkaller0: entered promiscuous mode
[  123.374687][ T7264] syzkaller0: entered allmulticast mode
[  123.390253][ T7273] netlink: 9292 bytes leftover after parsing attributes in process `syz.1.517'.
[  123.597497][ T7282] netlink: 'syz.2.520': attribute type 21 has an invalid length.
[  123.604000][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'.
[  124.695439][ T7292] =======================================================
[  124.695439][ T7292] WARNING: The mand mount option has been deprecated and
[  124.695439][ T7292]          and is ignored by this kernel. Remove the mand
[  124.695439][ T7292]          option from the mount to silence this warning.
[  124.695439][ T7292] =======================================================
[  124.725591][ T5899] Bluetooth: hci1: ISO packet too small
[  124.914015][ T7299] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  124.935443][ T7302] netlink: 'syz.0.529': attribute type 3 has an invalid length.
[  124.939035][ T7302] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.529'.
[  126.116446][ T7352] netlink: 56 bytes leftover after parsing attributes in process `syz.1.550'.
[  126.967465][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'.
[  126.978915][ T7390] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  126.992508][ T7390] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.930241][ T7436] netlink: 'syz.2.589': attribute type 2 has an invalid length.
[  127.945104][ T7436] netlink: 'syz.2.589': attribute type 3 has an invalid length.
[  127.964737][ T7436] netlink: 132 bytes leftover after parsing attributes in process `syz.2.589'.
[  128.038469][ T7439] netlink: 16 bytes leftover after parsing attributes in process `syz.1.590'.
[  128.047774][ T7438] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  128.064272][ T7438] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  128.127005][ T7439] netlink: 128 bytes leftover after parsing attributes in process `syz.1.590'.
[  128.130995][ T7439] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  128.230093][ T7446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.593'.
[  128.233851][ T7446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.593'.
[  128.237798][ T7446] netlink: 'syz.2.593': attribute type 4 has an invalid length.
[  128.513142][ T7459] netlink: 'syz.0.599': attribute type 10 has an invalid length.
[  128.523679][ T7459] team0: Device veth1_macvtap failed to register rx_handler
[  128.765987][ T7438] syz.1.590 (7438) used greatest stack depth: 18704 bytes left
[  128.960514][ T5899] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  128.961129][ T7478] @: renamed from bond_slave_0 (while UP)
[  129.014984][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'.
[  129.015710][ T7484] netlink: 92 bytes leftover after parsing attributes in process `syz.0.611'.
[  129.071795][ T7486] netlink: 132 bytes leftover after parsing attributes in process `syz.1.612'.
[  129.242217][ T7500] netlink: 'syz.2.618': attribute type 1 has an invalid length.
[  129.490304][ T7526] netlink: 188 bytes leftover after parsing attributes in process `syz.1.632'.
[  130.016852][ T7536] netlink: 176 bytes leftover after parsing attributes in process `syz.2.637'.
[  130.246344][ T7559] netlink: 'syz.0.648': attribute type 23 has an invalid length.
[  132.755528][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.758104][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  134.269841][ T7591] netlink: 'syz.2.663': attribute type 3 has an invalid length.
[  134.275153][ T7591] netlink: 'syz.2.663': attribute type 10 has an invalid length.
[  134.335168][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.665'.
[  134.666442][ T7600] netlink: 92 bytes leftover after parsing attributes in process `syz.2.666'.
[  134.891981][ T7612] netlink: 'syz.2.666': attribute type 39 has an invalid length.
[  135.000436][ T7616] netlink: 'syz.2.673': attribute type 9 has an invalid length.
[  135.003235][ T7616] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.673'.
[  135.317719][ T5899] Bluetooth: hci2: unexpected event 0x3b length: 15 > 10
[  135.664344][ T7640] netlink: 40 bytes leftover after parsing attributes in process `syz.0.683'.
[  135.675227][ T7640] netlink: 40 bytes leftover after parsing attributes in process `syz.0.683'.
[  135.771283][ T7645] netlink: 'syz.0.683': attribute type 21 has an invalid length.
[  135.774657][ T7645] netlink: 128 bytes leftover after parsing attributes in process `syz.0.683'.
[  135.784283][ T7645] netlink: 'syz.0.683': attribute type 4 has an invalid length.
[  135.793470][ T7645] netlink: 'syz.0.683': attribute type 5 has an invalid length.
[  135.797023][ T7645] netlink: 3 bytes leftover after parsing attributes in process `syz.0.683'.
[  136.269106][ T7666] wlan1 speed is unknown, defaulting to 1000
[  136.663303][ T7680] netlink: 168 bytes leftover after parsing attributes in process `syz.0.701'.
[  136.903077][ T7691] netlink: 'syz.0.706': attribute type 21 has an invalid length.
[  137.817651][ T7699] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.710'.
[  138.212423][ T7706] netlink: 'syz.2.712': attribute type 13 has an invalid length.
[  139.654862][ T7706] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.716017][ T7725] netlink: 'syz.0.721': attribute type 1 has an invalid length.
[  139.720777][ T7725] netlink: 'syz.0.721': attribute type 4 has an invalid length.
[  139.724047][ T7725] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.721'.
[  139.725214][ T7706] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.729022][ T7725] netlink: 'syz.0.721': attribute type 1 has an invalid length.
[  139.734171][ T7725] netlink: 'syz.0.721': attribute type 4 has an invalid length.
[  139.737228][ T7725] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.721'.
[  139.744773][ T7706] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.826873][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.837282][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.858047][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.864547][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.875045][ T7732] netlink: 'syz.1.724': attribute type 10 has an invalid length.
[  140.565265][ T7750] ------------[ cut here ]------------
[  140.567498][ T7750] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000)
[  140.579121][ T7750] WARNING: CPU: 0 PID: 7750 at kernel/bpf/verifier.c:2733 reg_bounds_sanity_check+0x6e6/0xc20
[  140.583554][ T7750] Modules linked in:
[  140.585423][ T7750] CPU: 0 UID: 0 PID: 7750 Comm: syz.1.730 Not tainted syzkaller #0 PREEMPT(full) 
[  140.589220][ T7750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.592502][ T7750] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20
[  140.594754][ T7750] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 1f 31 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08
[  140.605644][ T7750] RSP: 0018:ffffc90002fdef08 EFLAGS: 00010282
[  140.607739][ T7750] RAX: 0d35ff7216bf9f00 RBX: 00000000ffffdfcc RCX: 0000000000080000
[  140.610558][ T7750] RDX: ffffc9002a0c7000 RSI: 0000000000046bb0 RDI: 0000000000046bb1
[  140.613527][ T7750] RBP: 00000000ffffdfcd R08: ffffc90002fdebe7 R09: 1ffff920005fbd7c
[  140.616112][ T7750] R10: dffffc0000000000 R11: fffff520005fbd7d R12: ffff88810f9aa258
[  140.618956][ T7750] R13: ffff88810f9aa278 R14: ffff88810f9aa290 R15: 00000000ffffdfcc
[  140.621962][ T7750] FS:  00007f9bbf8666c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  140.624950][ T7750] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  140.627989][ T7750] CR2: 00007f9bbf865fc8 CR3: 0000000112688000 CR4: 00000000000006f0
[  141.185449][ T7750] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  141.188419][ T7750] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  141.190984][ T7750] Call Trace:
[  141.192097][ T7750]  <TASK>
[  141.193216][ T7750]  reg_set_min_max+0x214/0x300
[  141.195092][ T7750]  check_cond_jmp_op+0x1625/0x2910
[  141.197145][ T7750]  ? __pfx_check_cond_jmp_op+0x10/0x10
[  141.199298][ T7750]  do_check+0x6751/0xe520
[  141.200849][ T7750]  ? __pfx_do_check+0x10/0x10
[  141.202520][ T7750]  ? init_func_state+0x1ddf/0x2d20
[  141.204436][ T7750]  do_check_common+0x1949/0x24f0
[  141.206126][ T7750]  bpf_check+0x1746a/0x1d2e0
[  141.207624][ T7750]  ? __pfx_perf_tp_event+0x10/0x10
[  141.209613][ T7750]  ? perf_trace_preemptirq_template+0x280/0x340
[  141.211598][ T7750]  ? perf_trace_lock+0xec/0x3b0
[  141.213521][ T7750]  ? perf_trace_lock+0xec/0x3b0
[  141.215145][ T7750]  ? perf_trace_lock+0xec/0x3b0
[  141.216993][ T7750]  ? __pfx_perf_trace_lock+0x10/0x10
[  141.219005][ T7750]  ? __pfx_bpf_check+0x10/0x10
[  141.220643][ T7750]  ? ktime_get_with_offset+0x8c/0x2a0
[  141.222526][ T7750]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  141.224687][ T7750]  ? lockdep_hardirqs_on+0x9c/0x150
[  141.226385][ T7750]  ? ktime_get_with_offset+0x8c/0x2a0
[  141.228337][ T7750]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  141.230436][ T7750]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  141.232584][ T7750]  ? __asan_memset+0x22/0x50
[  141.233969][ T7750]  ? bpf_obj_name_cpy+0x194/0x1e0
[  141.235541][ T7750]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  141.237089][ T7750]  ? security_bpf_prog_load+0x7f/0x310
[  141.238806][ T7750]  bpf_prog_load+0x1318/0x1930
[  141.240291][ T7750]  ? __pfx_bpf_prog_load+0x10/0x10
[  141.241827][ T7750]  ? __pfx_perf_trace_lock+0x10/0x10
[  141.243704][ T7750]  ? bpf_lsm_bpf+0x9/0x20
[  141.245289][ T7750]  ? security_bpf+0x7e/0x300
[  141.246834][ T7750]  __sys_bpf+0x528/0x870
[  141.248469][ T7750]  ? __pfx___sys_bpf+0x10/0x10
[  141.250091][ T7750]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  141.252224][ T7750]  __x64_sys_bpf+0x7c/0x90
[  141.253788][ T7750]  do_syscall_64+0xfa/0x3b0
[  141.255269][ T7750]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.257270][ T7750]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  141.259433][ T7750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.261410][ T7750] RIP: 0033:0x7f9bbe98ebe9
[  141.262981][ T7750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.269446][ T7750] RSP: 002b:00007f9bbf866038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  141.272135][ T7750] RAX: ffffffffffffffda RBX: 00007f9bbebc5fa0 RCX: 00007f9bbe98ebe9
[  141.274809][ T7750] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  141.277374][ T7750] RBP: 00007f9bbea11e19 R08: 0000000000000000 R09: 0000000000000000
[  141.280109][ T7750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  141.282721][ T7750] R13: 00007f9bbebc6038 R14: 00007f9bbebc5fa0 R15: 00007ffc52535938
[  141.285315][ T7750]  </TASK>
[  141.286357][ T7750] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  141.288728][ T7750] CPU: 0 UID: 0 PID: 7750 Comm: syz.1.730 Not tainted syzkaller #0 PREEMPT(full) 
[  141.291696][ T7750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  141.295316][ T7750] Call Trace:
[  141.296479][ T7750]  <TASK>
[  141.297449][ T7750]  dump_stack_lvl+0x99/0x250
[  141.298918][ T7750]  ? __asan_memcpy+0x40/0x70
[  141.300487][ T7750]  ? __pfx_dump_stack_lvl+0x10/0x10
[  141.302227][ T7750]  ? __pfx__printk+0x10/0x10
[  141.303763][ T7750]  vpanic+0x281/0x750
[  141.305028][ T7750]  ? __pfx__printk+0x10/0x10
[  141.306518][ T7750]  ? __pfx_vpanic+0x10/0x10
[  141.308218][ T7750]  ? is_bpf_text_address+0x26/0x2b0
[  141.309951][ T7750]  panic+0xb9/0xc0
[  141.311254][ T7750]  ? __pfx_panic+0x10/0x10
[  141.312824][ T7750]  __warn+0x31b/0x4b0
[  141.314333][ T7750]  ? reg_bounds_sanity_check+0x6e6/0xc20
[  141.316339][ T7750]  ? reg_bounds_sanity_check+0x6e6/0xc20
[  141.318581][ T7750]  report_bug+0x2be/0x4f0
[  141.320177][ T7750]  ? reg_bounds_sanity_check+0x6e6/0xc20
[  141.322410][ T7750]  ? reg_bounds_sanity_check+0x6e6/0xc20
[  141.324427][ T7750]  ? reg_bounds_sanity_check+0x6e8/0xc20
[  141.326139][ T7750]  handle_bug+0x84/0x160
[  141.327467][ T7750]  exc_invalid_op+0x1a/0x50
[  141.328876][ T7750]  asm_exc_invalid_op+0x1a/0x20
[  141.330602][ T7750] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20
[  141.332877][ T7750] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 1f 31 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08
[  141.338709][ T7750] RSP: 0018:ffffc90002fdef08 EFLAGS: 00010282
[  141.340760][ T7750] RAX: 0d35ff7216bf9f00 RBX: 00000000ffffdfcc RCX: 0000000000080000
[  141.343365][ T7750] RDX: ffffc9002a0c7000 RSI: 0000000000046bb0 RDI: 0000000000046bb1
[  141.345990][ T7750] RBP: 00000000ffffdfcd R08: ffffc90002fdebe7 R09: 1ffff920005fbd7c
[  141.348586][ T7750] R10: dffffc0000000000 R11: fffff520005fbd7d R12: ffff88810f9aa258
[  141.351201][ T7750] R13: ffff88810f9aa278 R14: ffff88810f9aa290 R15: 00000000ffffdfcc
[  141.354197][ T7750]  reg_set_min_max+0x214/0x300
[  141.355836][ T7750]  check_cond_jmp_op+0x1625/0x2910
[  141.357459][ T7750]  ? __pfx_check_cond_jmp_op+0x10/0x10
[  141.359335][ T7750]  do_check+0x6751/0xe520
[  141.360940][ T7750]  ? __pfx_do_check+0x10/0x10
[  141.362851][ T7750]  ? init_func_state+0x1ddf/0x2d20
[  141.364569][ T7750]  do_check_common+0x1949/0x24f0
[  141.366254][ T7750]  bpf_check+0x1746a/0x1d2e0
[  141.367778][ T7750]  ? __pfx_perf_tp_event+0x10/0x10
[  141.369512][ T7750]  ? perf_trace_preemptirq_template+0x280/0x340
[  141.371599][ T7750]  ? perf_trace_lock+0xec/0x3b0
[  141.373568][ T7750]  ? perf_trace_lock+0xec/0x3b0
[  141.375550][ T7750]  ? perf_trace_lock+0xec/0x3b0
[  141.377524][ T7750]  ? __pfx_perf_trace_lock+0x10/0x10
[  141.379683][ T7750]  ? __pfx_bpf_check+0x10/0x10
[  141.381616][ T7750]  ? ktime_get_with_offset+0x8c/0x2a0
[  141.383779][ T7750]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  141.386291][ T7750]  ? lockdep_hardirqs_on+0x9c/0x150
[  141.388403][ T7750]  ? ktime_get_with_offset+0x8c/0x2a0
[  141.390097][ T7750]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  141.392083][ T7750]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  141.394219][ T7750]  ? __asan_memset+0x22/0x50
[  141.395725][ T7750]  ? bpf_obj_name_cpy+0x194/0x1e0
[  141.397405][ T7750]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  141.399278][ T7750]  ? security_bpf_prog_load+0x7f/0x310
[  141.401366][ T7750]  bpf_prog_load+0x1318/0x1930
[  141.403268][ T7750]  ? __pfx_bpf_prog_load+0x10/0x10
[  141.405248][ T7750]  ? __pfx_perf_trace_lock+0x10/0x10
[  141.407328][ T7750]  ? bpf_lsm_bpf+0x9/0x20
[  141.409075][ T7750]  ? security_bpf+0x7e/0x300
[  141.410957][ T7750]  __sys_bpf+0x528/0x870
[  141.412675][ T7750]  ? __pfx___sys_bpf+0x10/0x10
[  141.414614][ T7750]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  141.417156][ T7750]  __x64_sys_bpf+0x7c/0x90
[  141.418874][ T7750]  do_syscall_64+0xfa/0x3b0
[  141.420696][ T7750]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.423123][ T7750]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  141.425590][ T7750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.427920][ T7750] RIP: 0033:0x7f9bbe98ebe9
[  141.429648][ T7750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.436975][ T7750] RSP: 002b:00007f9bbf866038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  141.440176][ T7750] RAX: ffffffffffffffda RBX: 00007f9bbebc5fa0 RCX: 00007f9bbe98ebe9
[  141.443260][ T7750] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  141.446357][ T7750] RBP: 00007f9bbea11e19 R08: 0000000000000000 R09: 0000000000000000
[  141.449482][ T7750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  141.452619][ T7750] R13: 00007f9bbebc6038 R14: 00007f9bbebc5fa0 R15: 00007ffc52535938
[  141.455720][ T7750]  </TASK>
[  141.457602][ T7750] Kernel Offset: disabled
[  141.459348][ T7750] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:33:07  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000049eff RDI=0000000000049f00 RBP=00000000000003f8 RSP=ffffc90002fde6b0
R8 =ffff888106da0237 R9 =1ffff11020db4046 R10=dffffc0000000000 R11=ffffffff854ef830
R12=dffffc0000000000 R13=ffffffff99af98dd R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854ef8ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9bbf8666c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9bbf865fc8 CR3=0000000112688000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f9bbea12e53
XMM06=0000000000000000 00007f9bbea12e4d XMM07=0000000000000000 00007f9bbea12e61
XMM08=0000000000000000 00007f9bbea12ee7 XMM09=0000000000000000 00007f9bbea12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000053c RBX=ffff888136623900 RCX=0000000000000838 RDX=0000000000000000
RSI=000000000000053c RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc900001e0e50
R8 =0000000000000000 R9 =ffffffff81ae033e R10=0000000000000003 R11=ffffffff81703490
R12=00000000100058eb R13=dffffc0000000000 R14=000000000000053c R15=0000000000000020
RIP=ffffffff81716179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7b7347e6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005625ce6dc000 CR3=0000000036c88000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8174859b ffffffff81688a1f
XMM02=00007f7b72797498 ffffffff81688a1f XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007f7b72797478 00007f7b727974c0
XMM06=00007f7b727974b8 00007f7b727974b0 XMM07=00007f7b727974a8 00007f7b727974a0
XMM08=0000000000000000 00007f7b72612ee7 XMM09=0000000000000000 00007f7b72612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
