last executing test programs:

1.678431449s ago: executing program 2 (id=1862):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000000c0)="e0", 0x1}, {&(0x7f00000002c0)="6f6d83cb95c59a6cb7b1601d004ddce7a4cd48e33b3daf3cfd0e7004b283fed76317e483fb4a4e9df14c7cc49b9c90760b49385bd43dbc8ea525e441aeacc55c2a49d4123fd63bf3696f0fc7ff312276d4cd6a133e8b669a42922ef3f956a69da261189cca1f", 0x66}, {&(0x7f0000000500)="84a3ca4b1ffc383f5b59d24036ab59423578a9baccb9dc7116cb3c00b550db2348eb162e5bd5b7b08a680374eab7f8246e73601b65f5890a9837674f79782181483835", 0x43}, {&(0x7f0000000340)="6e46bec12aa2955c9e68985d9554cd7bd70828", 0x13}, {&(0x7f0000000700)="ccb65fcd1cab72ac49a85d3cab7557d9c38485bd854606f9e826bfd4c5d5e438f2cc066c3dc8c7078005b38c4d798918f368f4e78358899352d40f9d48315b7854f4c39048848107c6c0187ecee03287c22b0428b4f0b87ce739066628353b4593f78a7e9475b4a05590bdbe3326052eb95695c3eea974db6e109710733dd4efbcbf7e1d590ec638156bdfb414583c63760e28ef27704bd6ce873b35d4fea2221253f381b73372eb90d6599b3cb39e2240e8f3711fb42cc6650f5a8e7084a9cb484d0b9dfc01d66282c4e226a48ecf3d1b947687b28e9228514cd5f2c23c2beb6e54d593271f2622c45768e6fb9a", 0xee}, {&(0x7f0000000580)="2b78e0f19cb1013c319c6e92d305f08d94ab8b4978dc5b1e7186db22783d08316758bd203bfc3cfc963b3abc7155d13b45e937a99995b8686895ea39d1620b3af8e334a94d9addba733599605c2a05ca2f19a7b41397828dc63048a5944e69f4eade1d0e67", 0x65}, {&(0x7f00000008c0)="6471cf0ff48472261ea136a510b745bab00b1dc4431b1f7747501c39bd0b50c23cc9d70b1bfa6a3a056a3acde86f5fc9960940bd3e6fbbacdf9cbb3599819e597bda4c38dfed02fee2c6da50447098b3b62b087eb83adfd2", 0x58}, {&(0x7f0000000440)="f2bb", 0x2}, {&(0x7f0000000a40)="673a707fc0afe971ded940eee450c957db1ba3c7cc58e788d6f330823db08228dfee2bfab6cda5790ffee6967a8ec34ac821a25cd57bb752099768c21a187dc862f9cafe9765e667616efc84bce7d0fe7471f7c764133c9ce6d6e103f333a814fae39da65e78f3590c8ba0a9376a5712b347c5a2c0e53f89336a57ab09b5fbaef2722d21a021dc845c7a2b6ddf651df128baf45b8bfebf616997b1044a6764fe64cf5932cc821b2054b7fac98113eb66b5a11d4466ce48f6acdb277dab0a9f6c7984d1f2a87b0eec7db48ee400c58c5675c917509533eed32fedee92577cc134d934527119b6c4af7070", 0xea}], 0x9}, 0xc000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000800), 0x4}, 0x3, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, 0x0, 0x0)
r4 = socket$kcm(0x25, 0x1, 0x0)
recvmsg(r4, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40010040) (async)
unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') (async)
perf_event_open(&(0x7f0000000840)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7b0a00ff00000000711043000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000181500", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000007cc38af8ffa0000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6) (async)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) (async)
ioctl$TUNGETVNETLE(r6, 0x40047459, &(0x7f0000000180)) (async)
ioctl$TUNGETVNETLE(r6, 0x40047459, &(0x7f0000001200))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)

1.570986831s ago: executing program 1 (id=1863):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x38, 0xb, 0xa, 0x300, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xaaa2}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}]}], {0x14}}, 0xac}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x33, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e8912f2a35170884c2a0c700"/47}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}]}}}, {0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x90}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

1.569934581s ago: executing program 0 (id=1864):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r0}, 0x18) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
close(0x3) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) (async, rerun: 32)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffff02ba, 0x8}, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xd56}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38)

1.566802534s ago: executing program 0 (id=1865):
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x81, 0x7, 0x2, 0xe, 0x0, 0x9, 0x20109, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x3}, 0x6020, 0x6, 0x10, 0x1, 0x6, 0x284, 0x6, 0x0, 0x3, 0x0, 0x367}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000140)=ANY=[@ANYBLOB="000e00a021e3e2b2c95c0000000000"])
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x3, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x1d, &(0x7f0000000200), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000af00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.500783832s ago: executing program 2 (id=1866):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$netlink(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000013c0)={0x10, 0x10, 0x2, 0x70bd25, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x40800}, 0x4008000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001f40)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000240)=@generic={0x12, "125e85507a6cbad377fa967b32f5aaa5d8dfaaf006b67b30ba0f970bd061c065dbe5bf834c5cd08ea95d3a75e8b954f8161c507d39024d2fca324de769dfcc49a312a0ebeaf030ed515c1789a8b1f9f05ff9aa1de3b4b8194125daa62ea42574464d27bdf08c253ff45aab445e2ca57d9a2bcfce3017adb62adeeef6f594"}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000340)="7862bedae34e1fa6da37f37d481c4537cf1d65c6176cfaa1c349a187b8d8f823cd90c0d1e153093f5e00eaa93b340ed15e83796a574e0ced41eca19ca2bb450fc673154c884bd5c0e0158532676345088cf6432561513f8b664a599a6cbfa573c48b959d0b2ddba9823ed66301ad82c119d03805f2e3cf62e90539bcec5b69a77571261d9faa950fc462c76a34d8be6715322ea9cbc9670daf4c5a5f8fa636cb2c46cba035dc9c3ad67bcd6f50105e", 0xaf}, {&(0x7f0000000500)="e346ab7f0bc5376591c1657746f94fcf8d80b01681f2a684aca75e4ec9ffa74d11bcce830e5b0d921f41c43bb27d0cef92edbe570b5d9f5cfa26cc1f3b805652f1620379f798917e65c104b8569e43c56402918a130066b336bb5f120092e429c567643f2b25d8a523140a160754b78d20c95ca56e2f8a737851bd6929c3bf7fd9156bb348a5f0595c19087412eb7095b0654e2a2e0404", 0x97}, {&(0x7f0000000680)="6038879d32ffe16e878b594d1b56594c9a8ec16deee6964a15523243f7c17e95dd22b8d932565d8132c925cfcd57604ee6e318fc0213b0fe2422985631ebcc6a0d34ab9f5d9eba06292f5009ab63d2f0626fb4c8b85e3a83d570d889fca9b81ee03c7a8672edebf76d20472d8db0ea74b53f480e3dec5070d4523913bf4aaa84ddeace941ae85dd4b5e99e93ff237211b9bdd41a7a1308e533c9198a8d033dc519a3e6a283c26b", 0xa7}, {&(0x7f0000000880)="ee172d011c5f01b1debfccb2237f0b61b36c814ad25dd72008d3d8451393cdc4d7fb6a46807f5e72b3eb7cd559b3b8c056b5ce8a9f147403c125386b46390a8180145d2f98ed970a90e6b34ca41809c65f8c041dffdab33343e01b8742668f2d1925fa997615e2d9e8fffff0dac4bda63233840fd3a169dfc6908b54acadb60ff4f68c9849366ed5468669f3283fd43b0884d0b7019b82f4b5767f7b7d084d3010da42d3886e255244711273ea4351feef311e31963953a77840bffc849cd414fc3fd3564324dd85af3e11088a", 0xcd}], 0x4, &(0x7f00000005c0)=[{0x78, 0x10e, 0x6, "de75f14254a4b42319f80796e0479144054105fc7e4af863f5c68ea6e97825e94ca8bdd3ae9ad7c8d6e862cc6b4f6e12e94f63a09f4408c492fb716d705f1de857b0f8ceff1726ebd2120c37d51e1957a266c5c4a94fb67e8016eddfce27715a398e"}], 0x78}, 0x40000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r7 = openat$cgroup_int(r4, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5)
close(r7)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x1f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

1.410081026s ago: executing program 1 (id=1867):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xffffffffffff4c17}, 0x40c, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac000000000301"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) (async)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000200), 0x2}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000240)={0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async, rerun: 32)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) (rerun: 32)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) (async, rerun: 64)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000018"], 0xfe33) (rerun: 64)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
close(r5)

1.409214379s ago: executing program 1 (id=1868):
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000080)=""/32, 0x20, <r0=>0x0, &(0x7f00000000c0)=""/82, 0x52}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r0, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)

1.408271341s ago: executing program 0 (id=1869):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000009b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), 0x0, 0x2}, 0x20)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x6, 0x44, 0x1, 0x0, 0x0, 0x3, 0x60014, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x9}, 0x20, 0x200, 0xfffffff9, 0x4, 0xc, 0x0, 0x200, 0x0, 0x40, 0x0, 0x7}, 0x0, 0xf, r2, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unlink(&(0x7f0000000180)='./cgroup/../file0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000200)='pids.current\x00', 0x275a, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000480)='cgroup.kill\x00', 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000400)=ANY=[@ANYBLOB='-cp'], 0x5)
write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2b, 'pids'}]}, 0xb)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0))
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = syz_clone(0x80000000, &(0x7f0000000600)="298eaa5055a30b3549f791f390988011614ee596e3adb4ea9d5038d16cf5895f9ef808c039f2f84e34f503e0b0076092243cba1d281db62777a461f776191b58b121ce46c6c0fcb8e67aee16be8168f01a3864b0a0410506627aa4a6185a1d839b29199e84bcdcf1394c5cad3c6c1e48701e3cbc2e44558b2931a7264da98fc185af27b4f9fd802d2b68b6efb0ad84b635596086deccdf8212f017886090161936295a2ed56d78", 0xa7, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="ddbc9de637becb")
sendmsg$nl_netfilter(r6, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, 0x9, 0x7, 0x201, 0x70bd25, 0x25dfdbfc, {0x8, 0x0, 0x3}, [@typed={0x8, 0xb1, 0x0, 0x0, @pid=r10}, @typed={0x14, 0xef, 0x0, 0x0, @ipv6=@local}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0x8, 0x11e, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0x9}]}, @nested={0xc, 0x48, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @ipv4=@private=0xa010101}]}, @typed={0x8, 0x92, 0x0, 0x0, @ipv4=@empty}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0xc094)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
syz_clone(0x2a020600, &(0x7f0000000300)="4e159d92ce4e466744ae3704fbcbecdf6d177309d6887a9d4f6083f01ff4b38bc7e0302ffc3a39d616b8f204f4e6067102b40bf64b442dedd91fed311fefd48b50ae9b46d11c86ae78e3f153dacb1199b2571171df725d2ec1048be9f8fdf137cdd907342f06a2943b9338ccc1477223fd60082c2fa879c1b419eb567cfc2d6b1cbef6b22c9ad3910b62a564ca93c66b38d442893508c6daf8a3537fe54b130ec3d9d6ea10aba5b7f5c2d4205e74424f", 0xb0, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f00000004c0)="df2239a5abfe7f736463aa3ae5541525d85b9df771aae02a28043c0e57aead8f2a4b3a139507dd43ac6862d4dca5877e23f4111791863277a703b41bea7d69d3a8a7ca074f8c3f27cffde6d291cb265ddfc009e96d29")
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89a0, &(0x7f0000000080))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x1ff)

1.340463702s ago: executing program 1 (id=1870):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={<r2=>r1})
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file1\x00', 0x0, 0x4008, r0}, 0xffffffffffffff79)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f0000000440)={&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)}, {&(0x7f00000001c0)="f3123571dea16981f1366c345caed25cd232a12ace393a22f9d90c5bbf8aa2285f6ed55ad335ee8a4d52a0b223df", 0x2e}, {&(0x7f0000000300)="d0f3f010f20591cb8bfc2b22fcfc661107a5a6d877eaccbc645f93d339838b7b137d809bc4c998a070179ef5b7b34ef6e2fa0c66611b13119b8d07427b08cf1f1d3c3a77c5c0dc91123f4324f7121809b312f62f7ad47c4cb2c8d3cb766053284573fed4d5b8d71fe03859f6fc58538821792f58dba1e522c528b8fe98097ff19a7f318cb6c6a27647f775e41beae52c323cff5bf5c9511430b6fd1645627244dbc6fbdb07d8f335bb30af3181012df62428886677e9b0017391fc44", 0xbc}, {&(0x7f00000004c0)="24491826ca7b441c97537e0def08ce7cc1a7add4ac2dc03f5606fb7bf7cada5a5548538e14b3962cbb774ed3e1ab1c8132531291ca10ff6f5b247b96648d2baefe243e7e9a5c101a410f036b49a6fa39d7d29d872dd3e50d7682880404c4c67f78c229fd0869fd4c930ca16c79d3ea3a52799198c70423c586fb57b3bd72a07a1478cb7031e75eb9cc5ced8cc4f91a91516024ad77fb13789412b2c3c38a9d2d2f44e741edd6366296d4580aba0f2c8f47948faa47269a05dfbecf184b90f806d49483817c4d0af91bb49067de4a747bdbc5e542fce830299f21133ddeba74499a92987407a8d690d96c0c09", 0xec}], 0x4, &(0x7f0000000400), 0x0, 0x8080}, 0x8050)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x172e4, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0x0, 0x0, 0x0, 0x0, 0x24}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES8=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_clone(0x20981000, &(0x7f0000000400)="cf43eccf", 0x4, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="e77f8652e0c65bd0069dc13e5ddf9ec5ebb4c71b6b082fffa8020e9ace6ebf01a5365e3de370b39f0679ef9ecabf81cf88e9e651e6a78f03a011b9bee7f9ab8cc2e3918e3321a0d25e46af3b2233eb2b65c57b9075105ffc8086dbd42b2e85a929eb3d95664315ee6f359c5bb5ced0c2e7336de28d2872e3f65899b5f08257206410a514544f3c52c870a8d25b01a6a374d42e949c3840d85b224451179b8a8f665217685ffc23c574e8c8b437cd25091ca8c2976615240105c3cdf2a2fce1")
sendmsg$nl_generic(r2, &(0x7f0000000c00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000007c0)={0x3f4, 0x22, 0x400, 0x70bd2d, 0x25dfdbfc, {0x16}, [@nested={0x53, 0xf, 0x0, 0x1, [@generic="554e6eea43eca2fa72459b661cef6247770c178a60ee2971050ab59487411835ee90950d4585418eda890e4bf2ba91ad34079f72ebef830041fe1b4b2fbc6cf4a460d101261d9e9257173d609affe9"]}, @typed={0x8, 0xb7, 0x0, 0x0, @u32=0x80000000}, @nested={0x1b5, 0xc3, 0x0, 0x1, [@generic="a2f3c6f6682b433e9aa7a2c4152b6e11be3a75f65cc5cffedeeee9cea0e9e398611c94a9bcd2e2e61a939917ff5c07bdc4c13cde653835f0d37dfcac88c7efdb242342a13fd88033bb9b31dd95151d305838d4ef27cd92561e4ba18e8cc6df04230dd9e263f28277a8177ce48040b7190b5d5a8f1f78b01438950f5dbc17c1141da40f91d5de8f2b25cf352682a2ac42242970437879f4b09c7e685ad8bbc5579b446033f6b7c35f5240397b6e42885ca7f741a77ef413831148e8c6099abd554c9b8b3c09d253e9a54703e53b48ba359ea766d2d423aa38", @generic="7f866f71d17182421a29bba5680e9923", @nested={0x4, 0x21}, @typed={0x14, 0x69, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0xeb, 0x0, 0x0, @pid=r5}, @generic="ee700ae0fad63bd1c0cf405b49a8958dd6e608d0ed8e1c6407c64d04280628ca878222d669b8b4fa9eda258502b6c630ac06ca60750fceac8f18655c77f93e1bea2dabf376343e52351b48c57482bddbb7b73a0b2c87975afe44c393a157a64003be1ef7d0e5086dcade04ca3a2572339ae9d5dec6f2de271f78c94465d7c13a5c9e1f7967abc186dcc8912133518f18ee2dc1a7dd07eeae0087740483e48d4080a176e207cfee9ba9"]}, @nested={0x195, 0xff, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str='$\x00'}, @typed={0x8, 0x121, 0x0, 0x0, @pid=r6}, @generic="e4ba729b7a55032b89c1741be91dfbe03be247e18babbe77afb8cc7efe3d65a2f856e21ffd929001ab2088a16efe803a06c07833a87e35c40cf815bc18f0ce406ed0c46b9c105f37bcd52d3c85e507e70e2aa048fc21daefbb3c289352887e", @generic="4d66ef6722c5d6223031b820285c9917d9efb7cd4612679c4c154e2fb3b6c12ec5292133c557eb7601d779c80fad23994a3e23f86e0632052b6d97a3691fffcf076080b10ffdef54ea8534e62bf419fbf73f222a7719d6970feb5c730a57aff505cdc2516aea203145ea135cdb85fc421d28e6b8a00790be08d04c27d2b8236e844e98798f6ad0a5d72cc699263bb4daff8015504c91cb6acdaf4a193da719e220fd93b2fa0fc6c0b45062c60182face8f", @generic="332a4a028ab881c0de363cd902c048376d4453774aedb14fcc7d9025178afc04813e0232948d25528bc1baa7375b3a776cd16e93fcc3b01d32964735ee9a184a0417b9ee4decb05d2c1e6ef8b86ad4ffb0279a1cc32c8dc678146394168d91441d42ae87ced0b7a5fa44c5c005", @nested={0x4, 0x118}]}, @generic="956d0d023516d2f587295a8e6b7d29360c7c81d80dcc1ebaf28803ac991ea7d215fb4f20cfff958b49c31856de942075e6dded"]}, 0x3f4}}, 0x4081)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000028000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000afcd7c99000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r7}, &(0x7f0000000700), &(0x7f0000000740)=r4}, 0x20)
close(r3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001cf52f573592ca3f254cee5be69b1f7ce8c7c681e8762581fd9d00000002000000000000000200000d040000000000000c000000000000000000000001000000000000004106713c834db7b8819f847f66a51b173b342ff6a7bc8d1a88a641e743b52ef36c4a364851c44c"], 0x0, 0x36}, 0x28)

544.82377ms ago: executing program 0 (id=1871):
socket$kcm(0x11, 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xc0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x130, 0x6b, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)

470.1799ms ago: executing program 2 (id=1872):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x30}, 0x40880) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c7643600e0000200", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a010400000000000000000a0000010900010073797a3100000000340004803000018008000100636d700024000280080001401200001708000240000000011000038009000100407327c3600000000900020073797a32"], 0x88}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) (async)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}, 0x0, 0x0, 0x80000, 0x8, 0x0, 0x7fffffff, 0x1000}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
close(r2) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRESOCT=r3, @ANYRES32=r1, @ANYRES32], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000040) (async)
mkdir(&(0x7f0000003400)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) (async)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001700)='cpu.weight.nice\x00', 0x2, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000008000"/22], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="d8000000180081054e81f783db4cb9040a1d080006007c02e8fc55a10a0015000600142603600e1208001e000000040106491200fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16978ca49a3d8f7f67d0a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0d", 0xcb}], 0x1}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x9cdc2384056b48b8) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYRESDEC=r4, @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup/syz1\x00', 0x1ff) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006c00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080))

380.073137ms ago: executing program 1 (id=1873):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000640), 0x0, 0x1}, 0x40050)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYBLOB="000000cf0000020100000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa06"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000c80)="9930f8f79cf9c4ca571ddc430e4bb2416474789226b401900452a8c1b04fe141f9f17f730296540034add272117195450ac1e3169dc19db331e876874504c9b45fee55e0a47a3bc54afb215f262c216bccd101d32272e50ff31642c681bfbfa5db93e37db767565c87c28864e209ba06ef235e0e0363db9d11c0303b84bc88fba504cb471f1d3d82aa63306e6163c7f96e15c569ea3abadbe076ac4a798110df90544fb2d67f09ca56a6d8236265fbd4a9d3245eaffd1fe31276daf5fd2f16992b0b1572189fbab3152d93b65276091f7b805e5227609b779f5caad76e7282b9ee7755dddbb3fc2c15d5b4c281c2d1530cc1e79c8ba0b24a5b317d37b2a5b47c6d2a21b1d1ad95fdebb0b5bd55efc22fd6230df1e13254ca6a22365c9b5c04feba25c9ae54b720f921c4824b0bc4cf21cc30218ba81d03778bf5ea4bd5bda58b2a54d8005b38e2966de4e2273be36dbf9910351437ba452b86c85db6f06fa0418acbd2e3561be61ac641f9c33dc32524cba6ff99db6484f7edf85712c07e610c0ad068a0ca18144edaff0ab1643679e98c48d578e5797ba1209e251c9be13668efd5f08926772ea1f9f4135c1895a1a2367a6d8c5a44b8966e16713e8512805629ddccf8390b8abce584a70a93e786befb9fd17e9f7d4a522bd48d429e470e556f14ea1a211f069fb2ac822b4f84f89120c8854c8701e8d33a8f7d15217875e7cb83f5805fdbb3d93c0b5c40cef9d0564a0c4dd1d9bcb9d42db814f9e914aa05b4f8dac83148fcbe91b0cac649cddce88ce64d252a6a5289f8628ef057b375df3f2f1174373410b1949a9b199bc26f0d5aac609e004c92106d5c6f9ed816ed07f09208d20efb849d49630c6c02a3b005b6035df89857aceb6c6f03a9131e041f164b1a022f2f64b9a4c06b698456c36ccdeee7066167cc453751874fb62dead9d8e12879f2213fc59d42fe4c48bc4d0239f0a913fb0c8622b73cbb951bd73a7c3619f724f3b1", 0x2c6}], 0x1}, 0x44800)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000200000020a00080100000009500007b00000000850000001300000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x92, &(0x7f0000000240)=""/146, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x6, 0x1, 0x1, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x29, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16}, 0x94)
socket$kcm(0xa, 0x5, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x200})
socket$kcm(0xa, 0x5, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080))
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4)
sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x7eae}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="ab5d402c0ea54015c693a6bb389055248fc821da0fea042579af8d52df8e1d84c0b65eb833b8ed8d8c3dcf2993f7de4098ce43f5522dde3f407fef03ec9e84454ae6668b35e069", 0x47}, {&(0x7f0000000340)="0b789a386cfb89136db871db09a7bbb8bfac012b374f6622098bcdaf251256a9d4620c38ee7d902a295e978f1b659a310809089e824fcf399f52740d9c9f66e49dcff8651e160036621b059ce456b3ce55b87e765cfe66c4c286f081e8f6d0fb3ed769d03425018c4c45c75229043216982ca43e33f6c7fefac5407a0f09ace41a3fc9487befdd67c51af5997620f50d2f15f21a49b4cb2283b17c752e227114bb", 0xa1}], 0x2}, 0x4000)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2')

378.071485ms ago: executing program 2 (id=1874):
r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESHEX=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r2, 0x24, 0x0, 0xd8, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x4000000000000005, 0x0, 0x0, 0x0, 0x0}, 0x40)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'sit0\x00', 0x200})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0}, 0x94)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080))

372.625351ms ago: executing program 0 (id=1875):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) (async)
r1 = socket$kcm(0x11, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x20}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff9a) (async)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/151, 0x97}, {&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000680)=""/130, 0x82}, {0x0}, {&(0x7f00000007c0)=""/221, 0xdd}, {&(0x7f0000000100)=""/11, 0xb}, {&(0x7f00000008c0)=""/215, 0xd7}], 0x8}, 0x2) (async)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) (async)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000600)=@hci={0x1f, 0x300, 0x31}, 0x80, 0x0}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

220.608178ms ago: executing program 0 (id=1876):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x40}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x5c}}, 0x10)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x3ec0)
recvmsg$unix(r0, &(0x7f0000000400)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000300)=""/160, 0xa0}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000000080)=""/23, 0x17}], 0x4, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x10120)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1804000000000000000000000000000071106500000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

119.511607ms ago: executing program 2 (id=1877):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x400, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x27}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='sched_kthread_stop\x00', r0}, 0x10)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000180)={'full', 0x20, 0x3, 0x20, 0x10000000fffff}, 0x2f)
close(r2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))

115.988247ms ago: executing program 1 (id=1878):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x18, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000680)="9999e2fe372881d7f84c3e598e63d236241f2a96b0121cfce90155ddc80dc0c46dddea839006fb0976013db4177f38ddcc4c0dc3c727b8a2cf41939de9f0145e24fb038a5c2c1e53ccc5835e63a9207e13b6213da8261a9a1ddde12fc97885671608a926507d176f7f43a634d73f89fff30f28c3543d7d61b239cecbf70a189eb42b5e762523321d9fd8633649c7e9a86d5b45758198cde845709668ca1bb0a15c7e4c266c9704819f684777f99dbe95fe32a49a4833ea90ad43be7a409fe98fb3d3bf2be60711ef97047db9e41c008e56619257a9b2f98e1df7f4d346648c96", 0xe0}, {&(0x7f0000002680)="58020df462f0fe19786791e9a1d1553666dc757af6f104d928946c864706b1f48cd590dc16a0b31745991bc272b992cc83bdd2b1b5c56125682b96151e335e636b020881cfa8b943d1907764d82314caf721130dcca965f18cc63f8f5dfa6f0b31aec3e67476361db3df85ef9210656aac9cbb28f14c714eed9121af169670daafe71fa997c61246a6bcb978c98ea3568236dc70c26d5ad04b08f4300e62eef35a52578983ea2792865ce9728c5954143d24c7c56269f15a3603f42b7f67fdaf9e9fece61424266add1979c30a78ad02a3598d1f464b5a48b116710753a1b37aa4f552ae9c11e15ef32c023aadb0f18efea2b020b3414e156007bb153d1b65e54764e8190de5ddad4497f7ab9755bb2e54ffe62ea21bfb61bbd8c563daebd0ed2050d7a376b679804e9b61f57233f31873f5f76a50c0e7428d323a75978fcf6db43afa3f738ab2b5fd4d9a86c3184fb4627419c57a6242a3dbf30fb18c7c0cf137f8f31d8ec5c2ca68877ef3beb4c78c5d17bb721f34bf1efc053c65892bf363a1d51e93213d8acbdd516458d436c0078bc2031b92991bf00fb47d7ee5a77826e78931e5e6c3aa0fe8cb41d2fc5a70b1ba820bfa58c47dc57c77704797875cdf706a421b9128ed50bedf24733f35883b58c5b98604f1065533569ee0da1221d4522070fd9e8af18f1ff19f70fa63ca76cee273b461d6dfad55fd45a1efd90f67b421d5cec08ca5855f28f064829960da66df32d05f7d7c45786048990715a2e29beb0368ce0b63735b58975a610d906b35533a6750ba74f3c1ee85f0a946f21eff7a06e701553ea026aa32c8ccf82126176633885d6b7e85fb61d930390367a7b770697cb6797cbb0a6cdcb082e1b373cdac72e90e929eea5ed50ec5f96fa85461eef4d113d34b05b717c8ae1e1cf776217486d4588362f3f67366828c32992c099344d3c34cdcec80861956a2f9727048fb96fe8f4bb537d5275b9ecc6b66a1607e6980708fe130a501670258fcf2087c2b9234670376dae1e08f3b09b0103823776e514d1738ad12ecce676f7d69a40a2f91336af95a3d971421aed3e85724c9266bf79e896966093e70d1fa44ed4c8b7ce63838b1e7db8954546fcb8048ff7953c646f585e7595ef1245211b517453c290b49b328531489cd5feafc158735608801d77832186720c42933a19ad5f0c1b09bb929506b9ea7e2bf70e331dd698bff80416e3a18c31df20d7186f531bca69d9e0c97b1da3794cfcfb79c53ced4c4a450e99f8813ed85c0ca80f9ec881c4959584592fa15d837f18d5f3dee89abb01bb4f95e0b38604090fa299bdbe6fca12358be3506efb7e09038a5d3aeeaaa683b1825c351161dbf531a195294f8c4b91bf088b430adde36e167f02d4b6094dd9abfb472f2ce542b45386371cab79bfb269301eb68074762906bb30fe7a4502d3c1577f615084209d9e61e09449a11a7d520c3bb1c4ee5dd7a86085956235eb6ce9777602501a5baaec793a454bba0c433daca38fbdb1ab0fcd1fe65338a6a66ac26a9d4a5b77305293e5a4ec68c5617d43c63ad58df6e656565180cb0018a12977f5b46ced5cbc797474209440c4449bdd0dfbeea809023658c158628d8cda8a9056d17fa2436902b2a30c42dbe0427fe0ca1a4147bd4db0ab173c7ec0b88974f405a9ad09a3c8369b959575f15a112e4a41165dd9034c119c1342d03829d6c0a9f0e37b1c2f924bc41ba878722b856db2527b7613c75f2cd191489fbe85ab2aeed035cff3564f6fe8f860c25c28208646e1837d5e5c4c791c8c5960bf6c02e3ffa574dc75588cd7be70dad8158ec4bc43aa4c3ac4ddd6a6477b38a70e6fa90115591529d4df3e6457cdf044b5f9f8a4903ff7bd7ffe3864ae9d043b48dde18338427e270a8ed077f64407ccfd79499f7df91a22ee24f8727d81243a5eb557c82cbdbec17bee9acd537605cfafd8d06f8cfb70d2daa5f1f1b0712c2524485970f04c565a644de8247b89dca9e6e14f6b3f3b9966b0fae03f01626464c621f8c29d684d3bd7c9b99043e530e9cddcd38330969aa066f411f42da9d8b34c8a0a09325134b7ea1ae27ce8b47295ebf293b0b1637c012e956c9f373de0e555be65ca6c4c5afcb4fc235bd4e1201121832b30bf380fd71d86c55835dcc7496d1739ebc5ecd2370352555c2bb63a07d0897e487fe2f5d3c7f35190520babc972bc12864e9fdf6d9ca0c31857eca4882349f1680990ac1ff7b83d54e35aa2b65df3d3a49fd75f1492b2b29bead5b9afa508805ab346f90e9b80b7e72327428202005d1ae6ed6a6aa71eb286e45e156ddb7932b9d4686f73bfc9c6333dd90b68058b45c9e7030dc0fd3650de7afab677ef208b972da3cc040c1f5db53461ed15408d4c11c5cc75e4edf15d8424a65edd2a279f3c98c84dcb32be101fe1d4a030f27ef64b78e4f3880d236d96685e3e29778115e7073e4fecb0ec414b3e41170022b68d341782e32e5497981f324380bcd5a83e5694869d92aa02acde73115fe0d9aaf81f4658e5097ae5bd60fddb42c8937e45743cdc3abb4a4f73f16f6e866231b74a1849635e12036a3f25ac0a841de4f829c4e8ba15f324ebdd94a9907c631dce74d0483f60af764718164d442cfede8e8a1a961354bd70ef3bdf183436790bb7fc7ff028137e57286866580e0f5810d6bc90c533183f488db50a021cf513cd847a4812e9824452fe3e1e012e2dc1620e3fe5f9dec07dcf259aff7b7f260f45d0b3c3e99bdad692ec8744094c2eda8e9a1cca0adfff6419d663cb0548e0ad8281ffcbfa4789b9b9cd7b7385f7a45019d2de8346f9c7de3e0f252e0794735261c10216235d88b43aa910ccc51aeafde16221bc7fa0e9a42944c6a981a6a846dece6", 0x800}], 0x2, &(0x7f00000009c0)=ANY=[@ANYBLOB="140000000000000000000000020000000300000000000000140000000000000000000000010000000a0000000000000060000000000000000000000007000000072bb9e0000001ffffffffac1414aa64010101ac1414bb0a0101020a010102e00000010a0101020a010100891f3cffffffffac1e01010a010101ffffffffac1e0101e00000017f0000014404f00100001c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="e00000017f0000010000000014000000000000000000000002000000ff0f000000000000110000000000000000000000010000004f0000000000000090f0c141d0b41008713bca69ec00001f1f9130aff315075646be79fe45a6d518fc9e4118a1698d993610d5d60ebb6160476f2050cdf4fc420d85a13167aa588484f1c77feb36373c9da63ce6db8f9744629b3b6c69826e140530ccbdcd4e80a8c73f997f9fc7eda2f897d65fe2dec7b2d1e9d4cf9a7d9bd44d44b66658fd0aaeb53f9fd374d717cf9d5c1455"], 0xe0}, 0x4000000)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}]}, {0x0, [0x30]}}, &(0x7f00000011c0)=""/215, 0x33, 0xd7, 0x1, 0xffffff64}, 0x28)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0x1f, 0x0, 0x9, 0x1, 0x41880, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50)
r5 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000740)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x2, 0x1}, 0x80, 0x0}, 0x800)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33)
r7 = socket$kcm(0x2, 0x5, 0x84)
r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001b00)='syz0\x00', 0x200002, 0x0)
mkdirat$cgroup(r8, &(0x7f0000001b80)='syz1\x00', 0x1ff)
r9 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff})
recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r9, 0x84, 0x19, &(0x7f0000000000)=r11, 0x8)
sendmsg$inet6(r11, &(0x7f0000001b40)={&(0x7f0000001680)={0xa, 0x4e20, 0x80000001, @mcast1, 0x7f}, 0x1c, &(0x7f0000001a80)=[{&(0x7f00000016c0)="e1b7deb2ed8144a6f4fb70b8e0efefc67922b42bd79b1d34043690debc94d22210107b1e6cc792e0b67f598b95df99cd79336eaf210d81f89d9eb26e5a409dfe220091997fce8ae9a43f6aff48b4c9a6a5994c4fcea29619be7627dc25422e6fa41a0d4ad9b95ffc7911a9230732d5020c07d7", 0x73}, {&(0x7f0000001740)="315eabd78f5cb0c69b4a06244569abb54b35af7d9c59060b101ec9fbae15771dafaa8dcaf26d4c944d9475b11251cae7d105ac8d60fdff64061136d3b1c732f2fefb821c3a6df5ceb2d869b895928dcefeb69aa59b1b185d3a47267843fd423e526487e95be3727c18bd", 0x6a}, {&(0x7f00000017c0)="003bc5ae52e1f764ce854e99033bb83d44970a08f43974e42f5b60b556d3be5fb2b3b1bb77186946e79b9d2b2da9594184de57fece1e2ac47061f0394f46f918994006f1e95cfb801d9e92f728dc2022779b51dc7ccad014e7f69f9ebe271f5b7e4cdb3a158dd2dd405aefeaa727abcd5be2f4d11a605eb41f76020bac6c3d8938a08938ae7922a72c6ea7c72cb9709a2cd9b16788ff1b6eb9157f95a5b270eb2f90dee9ffb2a51bb7e2fd", 0xab}, {&(0x7f0000001880)="1bcd267f8d9a8acb06e33fd30a47e2b104f8526278e2f767b87bc359e9f09284613863cc6be7aba03875f415ea3b58093fc44a5951794cace09f4d888eb23b47e275e2a3d087635df3ac5b1390e23f5e09f67915f7505edd00cb26355372210ae2853390a4dec77d772b99aaff1a4f5e4a6534fb208dd1d32795860d06b6beee9a2abb9c853479ab38c42cbbf012e4206d6e2814dc8610f5b3252c735c80258062c2aa97c6db7ef70a5de5b12e6dc93854f1de652c91c3fe408366241766ba6a6b90566414cff90fd99b2d104063cc5f06", 0xd1}, {&(0x7f0000001980)="269bc516d017950e65c985ce206960d3bebd3de40a0163c140cad73c358f06f46c911d0759a70498af4d0fd9211f0c3c12d6879e651476f87ffb652a63b44df50a773eca36052bf39db0ec7bfd53c6f5f991a16d8f95a106885995ac92ac111c2c6861bd4a5c7c27eaed475fe1ee62b48ab025243c3d501423d9b95f8c4c2198ef0536e0f94cb26623afab3b0c1f6d96c5a2de29cf6d18ba83e7e7d31c34501a61a98a55dd742afeb011512310129826fa1b0fee0d958b54c0de1f77842db78a9b3ccf1e4753dc8af537385c646bb06666410df9509797a88b1afd39", 0xdc}], 0x5, &(0x7f0000001b00)}, 0x4000801)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r12=>0xffffffffffffffff})
recvmsg$unix(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r13=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg$OSF_MSG_ADD(r13, &(0x7f0000002100)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001c00)={0x4bc, 0x0, 0x5, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [{{0x254, 0x1, {{0x2, 0x2}, 0x6, 0x6, 0x7, 0x401, 0x8, 'syz0\x00', "c4381fbcae0660b0335f82e679bc0996a593c702ab156c490b7f00bb010d4ac3", "1439081a91e85b6bea9f47c8f08e5b1d1a07fb2502ed67d18711fe99c2cba267", [{0x9, 0x2, {0x1, 0xffffffff}}, {0x3, 0xfab, {0x2, 0x5}}, {0x7f, 0x3, {0x2, 0x401}}, {0x9, 0xfff4, {0x1, 0x101}}, {0x6, 0x3d7, {0x1, 0x8}}, {0x2, 0x2070, {0x0, 0xb0b}}, {0x6, 0xe1a, {0x1, 0x8}}, {0x200, 0x2, {0x1, 0x401}}, {0x0, 0xfff6, {0x1, 0x8000}}, {0xc2b, 0x8, {0x1, 0x9}}, {0x9, 0xe, {0x2, 0x91c00000}}, {0x8, 0x33, {0x0, 0x849}}, {0x3f36, 0x401, {0x3, 0x7ff8}}, {0x5, 0x401, {0x2, 0x4}}, {0x1, 0x400, {0x1, 0x10}}, {0x3ff, 0x8, {0x2, 0xffffffff}}, {0x80, 0x3, {0x3, 0x5}}, {0x2, 0x94ae, {0x3, 0x5}}, {0x7, 0x33, {0x2, 0x8001}}, {0x2, 0xd359, {0x1, 0x8}}, {0x4, 0x83d, {0x2, 0x6}}, {0x100, 0x40, {0x2, 0x3}}, {0xffff, 0x4, {0x0, 0x5}}, {0x5, 0x0, {0x0, 0x5}}, {0x6ffd, 0xa30, {0x1, 0x99a5}}, {0x5, 0x5, {0x2, 0x3}}, {0x1, 0xa, {0x3, 0x88}}, {0x7, 0xfff, {0x3, 0xa}}, {0x5527, 0x6, {0x3, 0x8}}, {0x1, 0x6, {0x0, 0x9}}, {0xa2e, 0x8, {0x2, 0xfffffff0}}, {0x50ee, 0x81, {0x3, 0x79}}, {0x5339, 0xc1, {0x1, 0x4}}, {0xb, 0x1c70, {0x3, 0x9f}}, {0x1, 0x3ff, {0x1, 0x9}}, {0xf, 0x7, {0x1, 0x7f}}, {0x1, 0x0, {0x0, 0xa0000000}}, {0x80, 0x1, {0x0, 0xf6}}, {0x9, 0x1, {0x0, 0xe39a}}, {0x4e, 0xee5, {0x3, 0x7f}}]}}}, {{0x254, 0x1, {{0x2, 0xfffffff8}, 0x81, 0x7e, 0x800, 0xfff, 0x20, 'syz1\x00', "e4206acc6c55f7743a2130260892de24e2b44d6d7e33056a92b7e126ef7030f3", "65e75d18653a0ed2dd76c234ff1af1b2678f9d37ad1e5a1e0146da0a3ccbddf5", [{0x2, 0x7, {0x0, 0x37}}, {0x4, 0x8001, {0x1, 0x2}}, {0x2, 0x4, {0x1}}, {0x8, 0x1399, {0x3, 0x80000001}}, {0x7, 0x6, {0x2, 0x7}}, {0x5, 0xcd, {0x2, 0x3}}, {0x0, 0x8001, {0x2, 0x3}}, {0x3, 0x4, {0x0, 0x8000}}, {0x5320, 0xfffd, {0x0, 0x8}}, {0x3, 0x1, {0x3}}, {0x7, 0x7, {0x3, 0x5}}, {0x6, 0x6, {0x0, 0x9}}, {0x9, 0xfffc, {0x2, 0x3}}, {0x6, 0x961e, {0x3, 0x4}}, {0x3, 0x82be, {0x2, 0x3}}, {0x1, 0x6, {0x0, 0x4d}}, {0xfffb, 0x1, {0x1, 0xe}}, {0x101, 0x3, {0x0, 0x1}}, {0x5, 0x6, {0x3, 0xfffffff6}}, {0x9, 0x7, {0x0, 0x4}}, {0xd, 0x3, {0x1, 0x9}}, {0x100, 0xfff8, {0x2, 0x3}}, {0x4, 0x7ff, {0x2, 0x1}}, {0xfffc, 0x2, {0x0, 0x9}}, {0x0, 0x1, {0x3, 0x4}}, {0x36, 0x3, {0x3, 0x1}}, {0x1, 0x8000, {0x0, 0x3}}, {0x0, 0x400, {0x1, 0x80}}, {0x7, 0x3, {0x1}}, {0xfff, 0x7036, {0x3, 0x1}}, {0x800, 0x800, {0x0, 0x9a}}, {0x2a, 0x1, {0x2, 0x1}}, {0x3ff, 0x1200, {0x1}}, {0x2, 0x8000, {0x1, 0x834}}, {0x3, 0xe, {0x0, 0x7fff}}, {0x3, 0x8, {0x1, 0x5}}, {0x4, 0x453, {0x1, 0x1}}, {0xeb39, 0x8, {0x1, 0xa}}, {0x9, 0x90, {0x3, 0x1}}, {0xb43, 0x3, {0x3, 0xdde}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x20000010}, 0x3)
setsockopt$sock_attach_bpf(r7, 0x84, 0x6e, &(0x7f0000000000)=r13, 0x20)
r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50)
r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0)={0xffffffffffffffff, <r16=>0xffffffffffffffff}, 0x4)
r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x48}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @jmp={0x5, 0x0, 0x5, 0x5, 0x1, 0x20, 0xfffffffffffffffc}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x9fae4f1548cbd2c4}}]}, &(0x7f0000000140)='syzkaller\x00', 0x80, 0x1000, &(0x7f0000000180)=""/4096, 0x40f00, 0xf, '\x00', r1, 0x0, r3, 0x8, &(0x7f0000001300)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[0x1, r4, r13, 0x1, r14, r15, r16, r17], 0x0, 0x10, 0x5}, 0x94)

0s ago: executing program 2 (id=1879):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000280)={0xfffffffffffffffc, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x1c0f5a94776e67bc}, 0x4000030)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82041, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb8, 0x0, @perf_config_ext={0x20000, 0x1946}, 0x108084, 0x3, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0xfffffff9, 0x5}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r6, 0x29, 0x11, &(0x7f0000000000)=r3, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r7, 0x4)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x8, 0x830d}, 0x22, 0x2, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010100000000f00000000000000005000400000000000900020073797a30000000000500010007000000050005000a01000014000780080011400000000008001240000affff12000300686173683a6e65742c706f7274"], 0x60}}, 0x0)
socketpair(0x1e, 0x4, 0x94b, &(0x7f00000004c0))
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x27, 0x8, 0x0, &(0x7f0000000180)="f9ad48cc429d29fc", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:47023' (ED25519) to the list of known hosts.
syzkaller login: [   48.640087][ T5843] cgroup: Unknown subsys name 'net'
[   48.782411][ T5843] cgroup: Unknown subsys name 'cpuset'
[   48.786586][ T5843] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.074536][ T5843] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.146675][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.158632][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.161886][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.165477][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.170148][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.173154][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.176758][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.180462][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.186214][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.186839][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.193608][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.197810][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.202085][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.209990][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.215357][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.490826][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   54.528248][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   54.534099][ T5862] chnl_net:caif_netlink_parms(): no params data found
[   54.614172][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.617073][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.619874][ T5852] bridge_slave_0: entered allmulticast mode
[   54.622813][ T5852] bridge_slave_0: entered promiscuous mode
[   54.655079][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.657487][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.660586][ T5852] bridge_slave_1: entered allmulticast mode
[   54.663242][ T5852] bridge_slave_1: entered promiscuous mode
[   54.673504][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.675931][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.678582][ T5854] bridge_slave_0: entered allmulticast mode
[   54.682711][ T5854] bridge_slave_0: entered promiscuous mode
[   54.685803][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.688162][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.691394][ T5862] bridge_slave_0: entered allmulticast mode
[   54.694252][ T5862] bridge_slave_0: entered promiscuous mode
[   54.697718][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.700706][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.703061][ T5862] bridge_slave_1: entered allmulticast mode
[   54.706140][ T5862] bridge_slave_1: entered promiscuous mode
[   54.715146][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.717827][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.721365][ T5854] bridge_slave_1: entered allmulticast mode
[   54.724518][ T5854] bridge_slave_1: entered promiscuous mode
[   54.744351][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.755631][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.767353][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.771650][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.784629][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.789214][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.830179][ T5852] team0: Port device team_slave_0 added
[   54.833805][ T5854] team0: Port device team_slave_0 added
[   54.836682][ T5862] team0: Port device team_slave_0 added
[   54.839717][ T5852] team0: Port device team_slave_1 added
[   54.842966][ T5854] team0: Port device team_slave_1 added
[   54.854574][ T5862] team0: Port device team_slave_1 added
[   54.891698][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.894056][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.903671][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.908344][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.910825][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.919277][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.924894][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.927083][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.936428][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.941815][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.944151][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.953399][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.957486][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.961010][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.970465][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.980117][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.982664][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.991331][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.028497][ T5862] hsr_slave_0: entered promiscuous mode
[   55.032089][ T5862] hsr_slave_1: entered promiscuous mode
[   55.071429][ T5852] hsr_slave_0: entered promiscuous mode
[   55.073717][ T5852] hsr_slave_1: entered promiscuous mode
[   55.075842][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   55.077765][ T5852] Cannot create hsr debugfs directory
[   55.111757][ T5854] hsr_slave_0: entered promiscuous mode
[   55.114078][ T5854] hsr_slave_1: entered promiscuous mode
[   55.116641][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   55.118678][ T5854] Cannot create hsr debugfs directory
[   55.394436][ T5862] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.405285][ T5862] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.412765][ T5862] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.427677][ T5862] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.465894][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.477955][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.501328][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.517293][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.545153][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.555180][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.565067][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.576332][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.672332][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.695469][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.701500][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   55.715239][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.717745][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.733901][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.736277][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.744959][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   55.755116][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.773288][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.775640][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.780968][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.783285][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.814726][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   55.822706][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.833357][ T5862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.846355][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.848839][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.864630][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.867169][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.957990][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.998432][ T5852] veth0_vlan: entered promiscuous mode
[   56.005777][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.012040][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.035564][ T5852] veth1_vlan: entered promiscuous mode
[   56.076217][ T5854] veth0_vlan: entered promiscuous mode
[   56.085784][ T5862] veth0_vlan: entered promiscuous mode
[   56.095393][ T5854] veth1_vlan: entered promiscuous mode
[   56.100735][ T5852] veth0_macvtap: entered promiscuous mode
[   56.105499][ T5862] veth1_vlan: entered promiscuous mode
[   56.110035][ T5852] veth1_macvtap: entered promiscuous mode
[   56.129151][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.144225][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.155002][ T5854] veth0_macvtap: entered promiscuous mode
[   56.164595][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.167691][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.171996][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.175856][ T5862] veth0_macvtap: entered promiscuous mode
[   56.181892][ T5854] veth1_macvtap: entered promiscuous mode
[   56.185639][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.198379][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.203053][ T5862] veth1_macvtap: entered promiscuous mode
[   56.221752][ T5238] Bluetooth: hci1: command tx timeout
[   56.228510][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.231092][ T5238] Bluetooth: hci0: command tx timeout
[   56.238094][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.254340][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.258711][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.264056][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.275063][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.278017][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.293175][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.300323][ T5238] Bluetooth: hci2: command tx timeout
[   56.302862][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.305787][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.318622][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.322513][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.331479][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.382007][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.385117][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.417043][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.423354][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.472853][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.474429][ T3592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.490922][ T3592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.498328][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.506957][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.569224][ T5238] Bluetooth: hci0: ACL packet for unknown connection handle 0
[   56.576378][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.587110][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.932171][    C0] hrtimer: interrupt took 73769 ns
[   57.004598][ T5942] netlink: 'syz.0.8': attribute type 2 has an invalid length.
[   57.007663][ T5942] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.8'.
[   57.038449][ T5933] Zero length message leads to an empty skb
[   57.455913][ T5969] netlink: 'syz.2.16': attribute type 10 has an invalid length.
[   57.458698][ T5969] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16'.
[   57.463673][ T5969] bond0: entered promiscuous mode
[   57.465590][ T5969] bond_slave_0: entered promiscuous mode
[   57.478507][ T5969] bond_slave_1: entered promiscuous mode
[   57.484827][ T5969] bridge0: port 3(bond0) entered blocking state
[   57.488665][ T5969] bridge0: port 3(bond0) entered disabled state
[   57.494670][ T5969] bond0: entered allmulticast mode
[   57.496577][ T5969] bond_slave_0: entered allmulticast mode
[   57.499026][ T5969] bond_slave_1: entered allmulticast mode
[   57.526638][ T5969] bridge0: port 3(bond0) entered blocking state
[   57.530259][ T5969] bridge0: port 3(bond0) entered forwarding state
[   57.951557][ T5981] _Z`Ԁ@S: entered promiscuous mode
[   57.982728][ T5989] Driver unsupported XDP return value 0 on prog  (id 20) dev N/A, expect packet loss!
[   58.084222][ T5238] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[   58.300647][ T5860] Bluetooth: hci0: command tx timeout
[   58.300881][ T5238] Bluetooth: hci1: command tx timeout
[   58.380267][ T5238] Bluetooth: hci2: command tx timeout
[   58.670849][ T6011] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   58.677819][ T6011] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   58.896629][ T6020] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   58.900503][ T6020] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   59.028924][ T6022] netlink: 'syz.0.31': attribute type 21 has an invalid length.
[   59.038581][ T6022] openvswitch: netlink: Key type 4610 is out of range max 32
[   59.122517][ T6027] netlink: 60 bytes leftover after parsing attributes in process `syz.2.32'.
[   59.148107][ T6027] netlink: 60 bytes leftover after parsing attributes in process `syz.2.32'.
[   59.168531][ T6027] netlink: 60 bytes leftover after parsing attributes in process `syz.2.32'.
[   59.743622][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'.
[   59.746691][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.35'.
[   59.772481][ T6036] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.776996][ T6041] netlink: 40 bytes leftover after parsing attributes in process `syz.1.37'.
[   59.782709][ T6041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.37'.
[   59.912161][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39'.
[   60.180322][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.196517][ T6065] bridge_slave_0 (unregistering): left allmulticast mode
[   60.198901][ T6065] bridge_slave_0 (unregistering): left promiscuous mode
[   60.201500][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.380019][ T5238] Bluetooth: hci1: command tx timeout
[   60.395511][ T5238] Bluetooth: hci0: command tx timeout
[   60.469514][ T5238] Bluetooth: hci2: command tx timeout
[   61.378164][ T6087] netlink: 'syz.1.52': attribute type 4 has an invalid length.
[   62.030152][ T6092] __nla_validate_parse: 4 callbacks suppressed
[   62.030166][ T6092] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.51'.
[   62.373281][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'.
[   62.460669][ T5238] Bluetooth: hci0: command tx timeout
[   62.460880][ T5860] Bluetooth: hci1: command tx timeout
[   62.539736][ T5860] Bluetooth: hci2: command tx timeout
[   62.758475][ T6132] netlink: 60 bytes leftover after parsing attributes in process `syz.1.65'.
[   62.763546][ T6132] netlink: 60 bytes leftover after parsing attributes in process `syz.1.65'.
[   62.766951][ T6132] netlink: 60 bytes leftover after parsing attributes in process `syz.1.65'.
[   62.771946][ T6132] netlink: 'syz.1.65': attribute type 3 has an invalid length.
[   63.120429][ T6139] warning: `syz.0.68' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.335263][ T6144] netlink: 64 bytes leftover after parsing attributes in process `syz.2.70'.
[   63.435071][ T6150] : renamed from bond0 (while UP)
[   63.489234][ T6150] bridge0: port 3() entered disabled state
[   63.531997][ T6150] syz.2.71 (6150) used greatest stack depth: 19368 bytes left
[   63.672705][ T6173] xt_policy: neither incoming nor outgoing policy selected
[   64.016902][ T6179] netlink: 'syz.1.77': attribute type 10 has an invalid length.
[   64.540168][ T5860] Bluetooth: hci0: command tx timeout
[   65.935806][ T6199] netlink: 60 bytes leftover after parsing attributes in process `syz.2.82'.
[   65.939106][ T6189] netlink: 60 bytes leftover after parsing attributes in process `syz.2.82'.
[   65.945454][ T6199] netlink: 6 bytes leftover after parsing attributes in process `syz.2.82'.
[   65.948391][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'.
[   66.839218][ T5860] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11
[   67.134613][ T6268] __nla_validate_parse: 5 callbacks suppressed
[   67.134624][ T6268] netlink: 52 bytes leftover after parsing attributes in process `syz.1.105'.
[   67.222266][ T6274] can: request_module (can-proto-5) failed.
[   67.448605][ T6289] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.876779][ T6298] netlink: 48 bytes leftover after parsing attributes in process `syz.1.116'.
[   68.086182][ T6302] netlink: 20 bytes leftover after parsing attributes in process `syz.0.118'.
[   68.233291][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.119'.
[   68.236434][ T6304] netlink: 48 bytes leftover after parsing attributes in process `syz.1.119'.
[   69.474114][ T6332] netlink: 7 bytes leftover after parsing attributes in process `syz.1.127'.
[   69.481480][ T6332] netlink: 7 bytes leftover after parsing attributes in process `syz.1.127'.
[   69.494157][ T6334] netlink: 60 bytes leftover after parsing attributes in process `syz.0.128'.
[   69.499013][ T6334] netlink: 60 bytes leftover after parsing attributes in process `syz.0.128'.
[   69.505020][ T6334] netlink: 60 bytes leftover after parsing attributes in process `syz.0.128'.
[   69.548689][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.553108][ T6338] bridge0: entered allmulticast mode
[   69.569119][ T6338] bridge_slave_1: left allmulticast mode
[   69.572352][ T6338] bridge_slave_1: left promiscuous mode
[   69.574926][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.737695][ T6345] netlink: 'syz.0.132': attribute type 40 has an invalid length.
[   69.737932][ T6346] netlink: 'syz.0.132': attribute type 2 has an invalid length.
[   69.891256][ T6354] sit0: entered allmulticast mode
[   70.012598][ T6363] netlink: zone id is out of range
[   70.014442][ T6363] netlink: zone id is out of range
[   70.016238][ T6363] netlink: zone id is out of range
[   70.017985][ T6363] netlink: zone id is out of range
[   70.020720][ T6363] netlink: zone id is out of range
[   70.022616][ T6363] netlink: zone id is out of range
[   70.024590][ T6363] netlink: zone id is out of range
[   70.026480][ T6363] netlink: zone id is out of range
[   70.028230][ T6363] netlink: zone id is out of range
[   70.029988][ T6363] netlink: zone id is out of range
[   70.258865][ T6368] netlink: 'syz.0.138': attribute type 10 has an invalid length.
[   70.264067][ T6368] syz_tun: entered promiscuous mode
[   70.279934][ T6368] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   70.357756][ T6373] netlink: 'syz.1.141': attribute type 3 has an invalid length.
[   71.115354][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.117837][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.432768][ T6413] syz.2.150 uses obsolete (PF_INET,SOCK_PACKET)
[   71.660930][ T6422] netlink: 'syz.1.154': attribute type 16 has an invalid length.
[   71.663653][ T6422] netlink: 'syz.1.154': attribute type 3 has an invalid length.
[   72.182610][ T6460] netlink: 'syz.0.160': attribute type 10 has an invalid length.
[   72.204787][ T6460] team0: Cannot enslave team device to itself
[   72.527925][ T6476] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.535646][ T6476] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.541883][ T6476] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.544437][ T6476] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.046706][ T6500] netlink: 'syz.2.172': attribute type 10 has an invalid length.
[   73.053116][ T6499] netlink: 'syz.2.172': attribute type 10 has an invalid length.
[   73.782064][ T6534] __nla_validate_parse: 8 callbacks suppressed
[   73.782082][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'.
[   73.797093][ T6534] xt_l2tp: unknown flags: 51
[   73.940051][ T6537] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.181'.
[   75.150474][ T6589] netlink: 'syz.1.191': attribute type 3 has an invalid length.
[   75.153981][ T6589] netlink: 'syz.1.191': attribute type 2 has an invalid length.
[   75.157133][ T6589] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.191'.
[   75.162836][ T6588] netlink: 'syz.1.191': attribute type 3 has an invalid length.
[   75.165689][ T6588] netlink: 'syz.1.191': attribute type 2 has an invalid length.
[   75.170792][ T6588] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.191'.
[   75.587377][ T6600] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   75.748147][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'.
[   75.763669][ T6614] netlink: 'syz.1.198': attribute type 21 has an invalid length.
[   76.328684][ T6648] netlink: 80 bytes leftover after parsing attributes in process `syz.0.205'.
[   76.456375][ T6655] netlink: 176 bytes leftover after parsing attributes in process `syz.2.208'.
[   76.850137][ T6663] netlink: 28 bytes leftover after parsing attributes in process `syz.1.210'.
[   77.185739][ T6674] net_ratelimit: 74 callbacks suppressed
[   77.185750][ T6674] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   77.376692][ T6681] netlink: 36 bytes leftover after parsing attributes in process `syz.1.216'.
[   77.506052][ T6694] netlink: 'syz.2.220': attribute type 3 has an invalid length.
[   77.521536][ T6699] netlink: 'syz.0.222': attribute type 1 has an invalid length.
[   77.530161][ T6694] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.220'.
[   78.222296][ T6738] netlink: 'syz.1.233': attribute type 2 has an invalid length.
[   78.234827][ T6738] netlink: 'syz.1.233': attribute type 8 has an invalid length.
[   78.810179][ T6755] delete_channel: no stack
[   78.812292][ T6755] delete_channel: no stack
[   78.814974][ T6755] __nla_validate_parse: 3 callbacks suppressed
[   78.814988][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'.
[   78.821887][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'.
[   79.145762][ T6764] netlink: 'syz.2.238': attribute type 49 has an invalid length.
[   79.392724][ T5860] Bluetooth: hci2: ISO packet for unknown connection handle 3083
[   79.647715][ T6784] netlink: 104 bytes leftover after parsing attributes in process `syz.0.247'.
[   79.777396][ T6789] netlink: 124 bytes leftover after parsing attributes in process `syz.2.248'.
[   80.246425][ T6807] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.256'.
[   80.247366][ T6810] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   80.333332][ T6819] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.261'.
[   80.502686][ T6830] netlink: 60 bytes leftover after parsing attributes in process `syz.2.265'.
[   80.507989][ T6830] netlink: 60 bytes leftover after parsing attributes in process `syz.2.265'.
[   80.514880][ T6830] netlink: 60 bytes leftover after parsing attributes in process `syz.2.265'.
[   80.538635][   T33] audit: type=1107 audit(1757442266.724:2): pid=6827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   80.715679][ T6841] netlink: 'syz.1.270': attribute type 1 has an invalid length.
[   80.759055][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.270'.
[   81.266576][ T6853] openvswitch: netlink: Port 808482864 exceeds max allowable 65535
[   81.341085][  T794] cfg80211: failed to load regulatory.db
[   81.508026][ T6874] openvswitch: netlink: nsh attribute has 13 unknown bytes.
[   81.511831][ T6874] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.523294][ T6875] syzkaller0: entered promiscuous mode
[   81.525220][ T6875] syzkaller0: entered allmulticast mode
[   81.555507][ T6875] netlink: 'syz.0.280': attribute type 6 has an invalid length.
[   81.560424][ T6875] netlink: 'syz.0.280': attribute type 5 has an invalid length.
[   81.777979][ T6881] netlink: 'syz.2.285': attribute type 21 has an invalid length.
[   82.042540][ T6919] netlink: 'syz.2.293': attribute type 13 has an invalid length.
[   82.045113][ T6919] netlink: 'syz.2.293': attribute type 58 has an invalid length.
[   83.609264][ T6952] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   86.216254][ T7000] IPv6: NLM_F_CREATE should be specified when creating new route
[   86.222833][ T6999] netlink: 'syz.1.318': attribute type 2 has an invalid length.
[   86.225745][ T6999] __nla_validate_parse: 9 callbacks suppressed
[   86.225754][ T6999] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.318'.
[   87.008043][ T7026] syzkaller0: tun_chr_ioctl cmd 1074025677
[   87.014395][ T7026] syzkaller0: linktype set to 801
[   87.050192][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'.
[   87.053309][ T7029] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   87.056650][ T7029] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.299824][ T7039] netlink: 'syz.1.330': attribute type 4 has an invalid length.
[   87.343563][ T7037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   87.346728][ T7037] IPv6: NLM_F_CREATE should be set when creating new route
[   87.349479][ T7037] IPv6: NLM_F_CREATE should be set when creating new route
[   87.364204][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'.
[   87.403006][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'.
[   87.487703][ T7056] netlink: 830 bytes leftover after parsing attributes in process `syz.0.332'.
[   87.652716][ T7064] netlink: 'syz.1.337': attribute type 4 has an invalid length.
[   87.655425][ T7064] netlink: 152 bytes leftover after parsing attributes in process `syz.1.337'.
[   87.718771][ T7064] netlink: 6 bytes leftover after parsing attributes in process `syz.1.337'.
[   87.724284][ T7064] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   87.986186][ T7089] netlink: 5044 bytes leftover after parsing attributes in process `syz.2.346'.
[   87.986228][ T7090] netlink: 'syz.2.346': attribute type 9 has an invalid length.
[   87.996065][ T7090] netlink: 'syz.2.346': attribute type 11 has an invalid length.
[   88.002743][ T7090] netlink: 147436 bytes leftover after parsing attributes in process `syz.2.346'.
[   88.575372][ T7130] TCP: TCP_TX_DELAY enabled
[   88.577780][ T7130] netlink: 'syz.1.357': attribute type 10 has an invalid length.
[   88.592234][ T7130] team0: Device veth1_macvtap failed to register rx_handler
[   88.756680][ T7137] netlink: 'syz.0.360': attribute type 4 has an invalid length.
[   89.050969][ T7152] netlink: 'syz.0.365': attribute type 1 has an invalid length.
[   89.053584][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'.
[   90.008022][ T7161] netlink: 'syz.0.368': attribute type 13 has an invalid length.
[   90.011417][ T7161] netlink: 'syz.0.368': attribute type 17 has an invalid length.
[   90.035509][ T7161] syz_tun: left promiscuous mode
[   90.052877][ T7161] 8021q: adding VLAN 0 to HW filter on device team0
[   90.057269][ T7161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.644007][ T7188] sctp: [Deprecated]: syz.0.375 (pid 7188) Use of int in maxseg socket option.
[   90.644007][ T7188] Use struct sctp_assoc_value instead
[   91.945653][ T7245] __nla_validate_parse: 4 callbacks suppressed
[   91.945711][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'.
[   91.989036][ T7245] netlink: 830 bytes leftover after parsing attributes in process `syz.0.392'.
[   92.562017][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.402'.
[   92.735111][ T7285] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   92.738261][ T7285] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   92.871403][ T7297] validate_nla: 7 callbacks suppressed
[   92.871448][ T7297] netlink: 'syz.2.407': attribute type 1 has an invalid length.
[   93.721602][ T7303] netlink: 60 bytes leftover after parsing attributes in process `syz.2.409'.
[   93.729161][ T7303] unsupported nlmsg_type 40
[   93.873474][ T7315] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   93.876758][ T7315] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   94.288057][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.418'.
[   94.357473][ T7344] =======================================================
[   94.357473][ T7344] WARNING: The mand mount option has been deprecated and
[   94.357473][ T7344]          and is ignored by this kernel. Remove the mand
[   94.357473][ T7344]          option from the mount to silence this warning.
[   94.357473][ T7344] =======================================================
[   94.625184][ T7357] netlink: 40 bytes leftover after parsing attributes in process `syz.0.423'.
[   94.650874][ T7359] netlink: 2 bytes leftover after parsing attributes in process `syz.0.424'.
[   94.691373][ T7359] netlink: 24 bytes leftover after parsing attributes in process `syz.0.424'.
[   95.037146][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'.
[   95.056769][ T7392] netlink: 'syz.2.432': attribute type 11 has an invalid length.
[   95.069708][ T7392] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.432'.
[   95.644562][ T7390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.962125][ T7435] netlink: 'syz.1.442': attribute type 32 has an invalid length.
[   96.843774][ T7443] netlink: 'syz.2.444': attribute type 10 has an invalid length.
[   97.265083][ T7453] syzkaller0: entered promiscuous mode
[   97.267047][ T7453] syzkaller0: entered allmulticast mode
[   97.445778][ T7461] __nla_validate_parse: 5 callbacks suppressed
[   97.445790][ T7461] netlink: 212940 bytes leftover after parsing attributes in process `syz.2.450'.
[   98.103540][ T7459] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   98.107401][ T7459] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   98.230118][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.455'.
[   98.233466][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'.
[   98.297011][ T7484] can: request_module (can-proto-0) failed.
[   98.476043][ T7484] syz.2.456 (7484) used greatest stack depth: 17456 bytes left
[   98.867441][ T7518] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   98.869937][ T7518] IPv6: NLM_F_CREATE should be set when creating new route
[   98.872359][ T7518] IPv6: NLM_F_CREATE should be set when creating new route
[   98.874795][ T7518] IPv6: NLM_F_CREATE should be set when creating new route
[   99.084753][ T7524] netlink: 56429 bytes leftover after parsing attributes in process `syz.1.470'.
[   99.116952][ T7526] C: renamed from team_slave_0
[   99.138637][ T7526] netlink: 'syz.0.471': attribute type 3 has an invalid length.
[   99.144468][ T7524] netlink: 'syz.1.470': attribute type 2 has an invalid length.
[   99.149962][ T7526] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   99.166347][ T7526] netlink: 'syz.0.471': attribute type 10 has an invalid length.
[   99.169684][ T7526] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.176360][ T7526] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.182343][ T7526] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   99.219142][ T7524] netlink: 'syz.1.470': attribute type 10 has an invalid length.
[   99.982737][ T7538] netlink: 'syz.1.475': attribute type 2 has an invalid length.
[  100.018459][ T7544] netlink: 'syz.2.474': attribute type 40 has an invalid length.
[  100.032314][ T7544] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.040842][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'.
[  100.056429][ T7540] netlink: 'syz.1.476': attribute type 4 has an invalid length.
[  100.104887][ T7546] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  100.248393][ T7555] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.478'.
[  100.306157][ T7557] netlink: 'syz.1.480': attribute type 4 has an invalid length.
[  100.309901][ T7557] netlink: 132 bytes leftover after parsing attributes in process `syz.1.480'.
[  103.496988][ T7572] sctp: [Deprecated]: syz.2.485 (pid 7572) Use of int in maxseg socket option.
[  103.496988][ T7572] Use struct sctp_assoc_value instead
[  103.504743][ T7574] sctp: [Deprecated]: syz.2.485 (pid 7574) Use of int in maxseg socket option.
[  103.504743][ T7574] Use struct sctp_assoc_value instead
[  103.619304][ T7579] netlink: 'syz.1.486': attribute type 39 has an invalid length.
[  103.631047][ T7579] veth0_macvtap: left promiscuous mode
[  103.772776][ T7586] netlink: 'syz.2.489': attribute type 29 has an invalid length.
[  104.090824][ T7615] netlink: 80 bytes leftover after parsing attributes in process `syz.0.497'.
[  104.137390][ T7619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  104.223371][ T7623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.500'.
[  104.403672][ T7630] validate_nla: 3 callbacks suppressed
[  104.403727][ T7630] netlink: 'syz.0.503': attribute type 10 has an invalid length.
[  104.408374][ T7630] netlink: 55 bytes leftover after parsing attributes in process `syz.0.503'.
[  105.161209][ T7628] delete_channel: no stack
[  105.668541][ T7683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  105.671445][ T7683] IPv6: NLM_F_CREATE should be set when creating new route
[  105.674205][ T7683] IPv6: NLM_F_CREATE should be set when creating new route
[  105.676922][ T7683] IPv6: NLM_F_CREATE should be set when creating new route
[  106.851110][ T7705] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  107.076128][ T7711] netlink: 'syz.1.526': attribute type 3 has an invalid length.
[  107.083573][ T7711] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.526'.
[  107.316343][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'.
[  107.609213][ T7757] netlink: 168 bytes leftover after parsing attributes in process `syz.1.540'.
[  107.830781][ T7760] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  108.017371][ T7765] netlink: 'syz.1.543': attribute type 1 has an invalid length.
[  108.020903][ T7765] netlink: 'syz.1.543': attribute type 2 has an invalid length.
[  108.024378][ T7765] netlink: 'syz.1.543': attribute type 7 has an invalid length.
[  108.027715][ T7765] netlink: 37 bytes leftover after parsing attributes in process `syz.1.543'.
[  108.032763][ T7765] netlink: 'syz.1.543': attribute type 1 has an invalid length.
[  108.036157][ T7765] netlink: 'syz.1.543': attribute type 2 has an invalid length.
[  108.039353][ T7765] netlink: 130076 bytes leftover after parsing attributes in process `syz.1.543'.
[  108.214856][ T7776] netlink: 'syz.2.546': attribute type 10 has an invalid length.
[  108.218102][ T7776] netlink: 55 bytes leftover after parsing attributes in process `syz.2.546'.
[  108.522461][ T7804] netlink: 40 bytes leftover after parsing attributes in process `syz.1.555'.
[  108.924870][ T7771] delete_channel: no stack
[  108.965150][ T7804] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.986604][ T7804] bridge_slave_0 (unregistering): left allmulticast mode
[  108.992214][ T7804] bridge_slave_0 (unregistering): left promiscuous mode
[  108.995688][ T7804] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.214997][ T5860] Bluetooth: hci1: SCO packet too small
[  109.445608][ T7858] IPv6: NLM_F_CREATE should be specified when creating new route
[  109.452880][ T7858] netlink: 'syz.2.565': attribute type 2 has an invalid length.
[  109.456097][ T7858] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.565'.
[  109.650969][ T7874] netlink: 'syz.1.570': attribute type 21 has an invalid length.
[  110.497475][ T7896] netlink: 104 bytes leftover after parsing attributes in process `syz.2.580'.
[  110.543593][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.580'.
[  110.803439][ T5860] Bluetooth: hci0: ISO packet for unknown connection handle 3082
[  111.049296][ T7905] netlink: 'syz.0.582': attribute type 2 has an invalid length.
[  111.052678][ T7905] netlink: 'syz.0.582': attribute type 1 has an invalid length.
[  111.055974][ T7905] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.582'.
[  111.060553][ T7905] block nbd5: not configured, cannot reconfigure
[  112.115981][ T7928] netlink: 60 bytes leftover after parsing attributes in process `syz.0.589'.
[  112.120734][ T7928] netlink: 60 bytes leftover after parsing attributes in process `syz.0.589'.
[  112.125182][ T7928] netlink: 60 bytes leftover after parsing attributes in process `syz.0.589'.
[  112.462621][ T7946] netlink: 132 bytes leftover after parsing attributes in process `syz.2.595'.
[  113.325134][ T7960] netlink: 'syz.0.600': attribute type 4 has an invalid length.
[  113.327601][ T7960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.600'.
[  113.565870][ T7970] netlink: 'syz.1.605': attribute type 21 has an invalid length.
[  113.568696][ T7970] netlink: 'syz.1.605': attribute type 1 has an invalid length.
[  113.577686][ T7970] netlink: 'syz.1.605': attribute type 10 has an invalid length.
[  113.596983][ T7970] 8021q: adding VLAN 0 to HW filter on device team0
[  113.602013][ T7970] bond0: (slave team0): Enslaving as an active interface with an up link
[  113.649799][ T7970] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[  113.683175][ T7970] can: request_module (can-proto-0) failed.
[  114.069987][ T7994] netlink: 'syz.2.614': attribute type 14 has an invalid length.
[  114.645834][ T8012] netlink: 'syz.2.619': attribute type 10 has an invalid length.
[  114.645885][ T8013] netlink: 68 bytes leftover after parsing attributes in process `syz.0.620'.
[  114.648700][ T8012] netlink: 55 bytes leftover after parsing attributes in process `syz.2.619'.
[  114.996973][ T8023] IPv6: NLM_F_CREATE should be specified when creating new route
[  115.175746][ T8031] netlink: 'syz.1.625': attribute type 10 has an invalid length.
[  115.178654][ T8031] netlink: 55 bytes leftover after parsing attributes in process `syz.1.625'.
[  115.343814][ T8008] delete_channel: no stack
[  115.575912][ T8034] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.626'.
[  115.922294][ T8029] delete_channel: no stack
[  117.162451][ T8073] netlink: 'syz.0.642': attribute type 12 has an invalid length.
[  117.165482][ T8073] netlink: 132 bytes leftover after parsing attributes in process `syz.0.642'.
[  117.184153][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'.
[  117.187746][ T8075] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  117.201394][ T8075] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.218511][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'.
[  118.342449][ T8128] netlink: 60 bytes leftover after parsing attributes in process `syz.0.661'.
[  118.445325][ T8138] netlink: 'syz.0.663': attribute type 10 has an invalid length.
[  118.448702][ T8138] netlink: 55 bytes leftover after parsing attributes in process `syz.0.663'.
[  118.579184][ T8150] netlink: 'syz.2.667': attribute type 2 has an invalid length.
[  118.583718][ T8150] netlink: 164 bytes leftover after parsing attributes in process `syz.2.667'.
[  118.595386][ T8150] netlink: 'syz.2.667': attribute type 2 has an invalid length.
[  118.686021][ T8153] netlink: 'syz.1.668': attribute type 10 has an invalid length.
[  119.013399][ T8160] netlink: 'syz.2.671': attribute type 5 has an invalid length.
[  119.210006][ T8130] delete_channel: no stack
[  119.451667][ T8151] delete_channel: no stack
[  119.787766][ T8165] __nla_validate_parse: 2 callbacks suppressed
[  119.787776][ T8165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.672'.
[  119.845226][ T8165] netlink: 703 bytes leftover after parsing attributes in process `syz.0.672'.
[  120.053705][ T8177] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.676'.
[  120.057480][ T8177] netlink: 'syz.2.676': attribute type 1 has an invalid length.
[  120.062931][ T8177] netlink: 'syz.2.676': attribute type 2 has an invalid length.
[  120.253366][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.680'.
[  120.271284][ T8192] netlink: 340 bytes leftover after parsing attributes in process `syz.0.680'.
[  120.274216][ T8196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.681'.
[  120.274446][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.680'.
[  120.277669][ T8196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.681'.
[  120.287277][ T8193] netlink: 340 bytes leftover after parsing attributes in process `syz.0.680'.
[  120.296968][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.680'.
[  120.338571][ T8198] netlink: 'syz.2.682': attribute type 40 has an invalid length.
[  120.481320][ T8204] IPv6: Can't replace route, no match found
[  121.540637][ T8243] syzkaller0: entered promiscuous mode
[  121.542759][ T8243] syzkaller0: entered allmulticast mode
[  121.551761][ T8242] !: renamed from bond_slave_0 (while UP)
[  121.623694][ T8249] lo: entered allmulticast mode
[  121.631731][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  123.314992][ T8299] netlink: 'syz.0.714': attribute type 210 has an invalid length.
[  123.524291][ T8318] netlink: 'syz.0.720': attribute type 10 has an invalid length.
[  123.565699][ T8318] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  124.038432][ T8324] netlink: 'syz.0.722': attribute type 10 has an invalid length.
[  124.086567][ T8328] netlink: 'syz.2.724': attribute type 11 has an invalid length.
[  125.168588][ T8370] cgroup: fork rejected by pids controller in /syz0
[  125.216974][ T8370] __nla_validate_parse: 5 callbacks suppressed
[  125.216985][ T8370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.734'.
[  125.223979][ T8370] openvswitch: netlink: Flow actions attr not present in new flow.
[  125.355880][ T5852] bond0: (slave syz_tun): Releasing backup interface
[  125.627364][ T8380] netlink: 36 bytes leftover after parsing attributes in process `syz.2.738'.
[  125.880542][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  125.884668][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  125.887779][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  125.896723][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  125.902056][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  126.038605][ T8385] chnl_net:caif_netlink_parms(): no params data found
[  126.094985][ T8385] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.098014][ T8385] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.100758][ T8385] bridge_slave_0: entered allmulticast mode
[  126.103971][ T8385] bridge_slave_0: entered promiscuous mode
[  126.108376][ T8385] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.111190][ T8385] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.113808][ T8385] bridge_slave_1: entered allmulticast mode
[  126.117082][ T8385] bridge_slave_1: entered promiscuous mode
[  126.145671][ T8385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.152534][ T8385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.179194][ T8385] team0: Port device team_slave_0 added
[  126.183354][ T8385] team0: Port device team_slave_1 added
[  126.205557][ T8385] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.207968][ T8385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.217287][ T8385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.221924][ T8385] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.224262][ T8385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.235038][ T8385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.286181][ T8385] hsr_slave_0: entered promiscuous mode
[  126.298505][ T8385] hsr_slave_1: entered promiscuous mode
[  126.301305][ T8385] debugfs: 'hsr0' already exists in 'hsr'
[  126.303160][ T8385] Cannot create hsr debugfs directory
[  126.353325][ T8397] netlink: 'syz.1.740': attribute type 28 has an invalid length.
[  126.357714][ T8397] netlink: 'syz.1.740': attribute type 29 has an invalid length.
[  126.365197][ T8397] netlink: 132 bytes leftover after parsing attributes in process `syz.1.740'.
[  126.463782][ T8385] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.523484][ T8385] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.599036][ T8385] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.643698][ T8385] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.741691][ T8403] netlink: 'syz.2.741': attribute type 25 has an invalid length.
[  126.746089][ T8406] netlink: 'syz.2.741': attribute type 25 has an invalid length.
[  126.751432][ T8403] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.741'.
[  126.755628][ T8406] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.741'.
[  126.786524][ T8385] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  126.794101][ T8385] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  126.802819][ T8385] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  126.823479][ T8385] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  127.268171][ T8385] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.295252][ T8385] 8021q: adding VLAN 0 to HW filter on device team0
[  127.321808][ T6577] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.324722][ T6577] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.329084][ T6577] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.332512][ T6577] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.667882][ T8385] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.705969][ T8385] veth0_vlan: entered promiscuous mode
[  127.712474][ T8385] veth1_vlan: entered promiscuous mode
[  127.736656][ T8385] veth0_macvtap: entered promiscuous mode
[  127.744097][ T8385] veth1_macvtap: entered promiscuous mode
[  127.757528][ T8385] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.766001][ T8385] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.781633][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.786019][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.796256][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.803010][ T8448] netlink: 60 bytes leftover after parsing attributes in process `syz.1.751'.
[  127.807630][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.813062][ T8448] netlink: 60 bytes leftover after parsing attributes in process `syz.1.751'.
[  127.824030][ T8448] netlink: 'syz.1.751': attribute type 1 has an invalid length.
[  127.888175][ T6580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.890954][ T6580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.907199][ T6577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.910382][ T6577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.979777][ T5238] Bluetooth: hci0: command tx timeout
[  128.029196][ T8459] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4.
[  128.450633][ T8476] netlink: 'syz.2.759': attribute type 10 has an invalid length.
[  128.454391][ T8476] netlink: 40 bytes leftover after parsing attributes in process `syz.2.759'.
[  128.458481][ T8476] lo: left allmulticast mode
[  128.463135][ T8476] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  128.467547][ T8476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  129.881937][ T8521] netlink: 'syz.0.770': attribute type 10 has an invalid length.
[  129.884650][ T8521] netlink: 55 bytes leftover after parsing attributes in process `syz.0.770'.
[  130.059575][ T5238] Bluetooth: hci0: command tx timeout
[  130.614189][ T8517] delete_channel: no stack
[  130.931429][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.780'.
[  130.942425][ T8553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.979979][ T8555] netlink: 'syz.2.781': attribute type 3 has an invalid length.
[  130.983781][ T8555] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.781'.
[  131.326416][ T8562] netlink: 44 bytes leftover after parsing attributes in process `syz.1.782'.
[  131.331836][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.782'.
[  132.144492][ T5238] Bluetooth: hci0: command tx timeout
[  132.545935][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.549122][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.750153][ T8591] netlink: 'syz.2.790': attribute type 29 has an invalid length.
[  132.760318][ T8591] netlink: 'syz.2.790': attribute type 29 has an invalid length.
[  132.765891][ T8591] netlink: 'syz.2.790': attribute type 29 has an invalid length.
[  132.790288][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.792'.
[  132.979860][ T8597] netlink: 'syz.2.790': attribute type 29 has an invalid length.
[  133.433485][ T8618] netlink: 'syz.2.797': attribute type 3 has an invalid length.
[  133.436038][ T8618] netlink: 'syz.2.797': attribute type 4 has an invalid length.
[  133.439008][ T8618] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.797'.
[  133.445288][ T8617] netlink: 40 bytes leftover after parsing attributes in process `syz.2.797'.
[  133.455475][ T8617] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.489320][ T8617] bridge_slave_0 (unregistering): left allmulticast mode
[  133.499564][ T8617] bridge_slave_0 (unregistering): left promiscuous mode
[  133.502781][ T8617] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.817893][ T8630] netlink: 763 bytes leftover after parsing attributes in process `syz.0.801'.
[  133.853454][ T8633] netlink: 388 bytes leftover after parsing attributes in process `syz.1.802'.
[  133.860650][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.802'.
[  134.241031][ T5238] Bluetooth: hci0: command tx timeout
[  134.492051][ T8645] netlink: 'syz.1.805': attribute type 1 has an invalid length.
[  134.496388][ T8645] netlink: 'syz.1.805': attribute type 1 has an invalid length.
[  134.500442][ T8645] netlink: 'syz.1.805': attribute type 1 has an invalid length.
[  134.503772][ T8645] netlink: 'syz.1.805': attribute type 2 has an invalid length.
[  134.913259][ T8669] syzkaller0: tun_chr_ioctl cmd 1074025677
[  134.915705][ T8669] syzkaller0: linktype set to 801
[  135.650809][ T8687] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  135.655070][ T8687] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  136.035989][ T8707] veth1_macvtap: left promiscuous mode
[  136.181672][ T8710] __nla_validate_parse: 7 callbacks suppressed
[  136.181685][ T8710] netlink: 132 bytes leftover after parsing attributes in process `syz.1.826'.
[  136.480438][ T8708] veth1_macvtap: entered promiscuous mode
[  136.482500][ T8708] macsec0: entered promiscuous mode
[  136.484534][ T8708] macsec0: entered allmulticast mode
[  136.486304][ T8708] veth1_macvtap: entered allmulticast mode
[  136.578979][ T8723] netlink: 60 bytes leftover after parsing attributes in process `syz.2.831'.
[  136.585124][ T8723] netlink: 60 bytes leftover after parsing attributes in process `syz.2.831'.
[  136.590655][ T8723] netlink: 9292 bytes leftover after parsing attributes in process `syz.2.831'.
[  136.796449][ T8745] netlink: 182 bytes leftover after parsing attributes in process `syz.2.836'.
[  136.807022][ T8745] netlink: 132 bytes leftover after parsing attributes in process `syz.2.836'.
[  136.833692][ T8750] veth1_macvtap: left promiscuous mode
[  136.836479][ T8750] team0: Port device veth1_macvtap added
[  136.999001][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'.
[  137.081925][ T8762] dummy0: entered promiscuous mode
[  137.087558][ T8762] dummy0: entered allmulticast mode
[  137.097953][ T8762] : (slave dummy0): Enslaving as an active interface with an up link
[  137.132461][ T8756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.838'.
[  137.139976][ T8756] netlink: 152 bytes leftover after parsing attributes in process `syz.0.838'.
[  137.472025][ T8771] netlink: 60 bytes leftover after parsing attributes in process `syz.2.844'.
[  137.553437][ T8771] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.104322][ T8823] validate_nla: 7 callbacks suppressed
[  138.104332][ T8823] netlink: 'syz.0.857': attribute type 39 has an invalid length.
[  140.469885][ T8876] netlink: zone id is out of range
[  140.471815][ T8876] netlink: zone id is out of range
[  140.473728][ T8876] netlink: zone id is out of range
[  140.475671][ T8876] netlink: get zone limit has 8 unknown bytes
[  140.763680][ T8880] sit0: entered promiscuous mode
[  141.024005][ T8884] netlink: 'syz.2.876': attribute type 10 has an invalid length.
[  141.634715][ T8891] netlink: 'syz.1.879': attribute type 1 has an invalid length.
[  141.637567][ T8891] __nla_validate_parse: 6 callbacks suppressed
[  141.637623][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.879'.
[  141.703739][ T8891] netlink: 'syz.1.879': attribute type 29 has an invalid length.
[  141.711372][ T8891] netlink: 'syz.1.879': attribute type 29 has an invalid length.
[  141.717881][ T8891] netlink: 'syz.1.879': attribute type 29 has an invalid length.
[  141.770356][ T8882] delete_channel: no stack
[  141.812689][ T8896] netlink: 44 bytes leftover after parsing attributes in process `syz.2.881'.
[  142.582804][ T8900] IPv6: Can't replace route, no match found
[  143.065115][ T8935] netlink: 'syz.0.891': attribute type 4 has an invalid length.
[  143.067917][ T8935] netlink: 'syz.0.891': attribute type 3 has an invalid length.
[  143.071615][ T8935] netlink: 132 bytes leftover after parsing attributes in process `syz.0.891'.
[  143.527311][ T8946] openvswitch: netlink: Unknown key attributes 1
[  143.803597][ T8949] netlink: 'syz.2.895': attribute type 10 has an invalid length.
[  144.479130][ T8986] netlink: 'syz.1.906': attribute type 21 has an invalid length.
[  144.483836][ T8986] netlink: 'syz.1.906': attribute type 1 has an invalid length.
[  144.486960][ T8986] netlink: 100 bytes leftover after parsing attributes in process `syz.1.906'.
[  144.638079][ T8990] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  144.641496][ T8990] IPv6: NLM_F_CREATE should be set when creating new route
[  144.645684][ T8990] IPv6: NLM_F_CREATE should be set when creating new route
[  144.649269][ T8990] IPv6: NLM_F_CREATE should be set when creating new route
[  145.127483][ T9036] netlink: 'syz.1.922': attribute type 39 has an invalid length.
[  145.892016][ T9041] netlink: 'syz.0.924': attribute type 6 has an invalid length.
[  146.170263][ T9060] netlink: 132 bytes leftover after parsing attributes in process `syz.0.931'.
[  146.307575][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'.
[  147.442989][ T9096] netlink: 825 bytes leftover after parsing attributes in process `syz.2.942'.
[  147.446372][ T9098] syzkaller0: entered promiscuous mode
[  147.446565][ T9096] netlink: 130144 bytes leftover after parsing attributes in process `syz.2.942'.
[  147.448278][ T9098] syzkaller0: entered allmulticast mode
[  147.466762][ T9094] netlink: 'syz.0.941': attribute type 6 has an invalid length.
[  147.469778][ T9094] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.941'.
[  148.542608][ T9113] netlink: 56 bytes leftover after parsing attributes in process `syz.0.946'.
[  148.554370][ T9111] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.945'.
[  148.564578][ T9114] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.945'.
[  148.995075][ T9123] netlink: 872 bytes leftover after parsing attributes in process `syz.0.950'.
[  148.998446][ T9123] netlink: 872 bytes leftover after parsing attributes in process `syz.0.950'.
[  149.705495][ T9151] netlink: 4104 bytes leftover after parsing attributes in process `syz.1.958'.
[  150.166087][ T9177] netlink: 'syz.2.967': attribute type 5 has an invalid length.
[  150.168716][ T9177] netlink: 176 bytes leftover after parsing attributes in process `syz.2.967'.
[  150.399787][ T9189] C: renamed from team_slave_0 (while UP)
[  150.408311][ T9189] netlink: 'syz.1.971': attribute type 3 has an invalid length.
[  150.414415][ T9189] netlink: 'syz.1.971': attribute type 1 has an invalid length.
[  150.418030][ T9189] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  150.448388][ T9193] delete_channel: no stack
[  150.452791][ T9193] delete_channel: no stack
[  150.806855][ T9225] openvswitch: netlink: Missing key (keys=40, expected=80)
[  150.816118][ T9226] netlink: 'syz.2.982': attribute type 10 has an invalid length.
[  153.213833][ T9272] netlink: 'syz.1.996': attribute type 10 has an invalid length.
[  153.216793][ T9272] lo: entered promiscuous mode
[  153.221908][ T9272] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  153.663543][ T9300] __nla_validate_parse: 7 callbacks suppressed
[  153.663559][ T9300] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1002'.
[  154.009762][ T9308] openvswitch: netlink: Tunnel attr 72 out of range max 16
[  154.062881][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1008'.
[  154.073960][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1010'.
[  154.077055][ T9319] openvswitch: netlink: nsh attr 165 is out of range max 3
[  154.093412][ T9319] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.726692][ T9343] syzkaller1: tun_chr_ioctl cmd 1074025676
[  154.728734][ T9343] syzkaller1: owner set to 778
[  154.962030][ T9355] netlink: 'syz.1.1019': attribute type 22 has an invalid length.
[  154.970169][ T9355] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.1019'.
[  154.992125][ T9351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1018'.
[  154.992251][ T9352] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1018'.
[  155.193104][ T9362] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[  155.197031][ T9364] netlink: 'syz.0.1023': attribute type 237 has an invalid length.
[  155.233508][ T9364] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1023'.
[  155.387504][ T9372] netlink: set zone limit has 8 unknown bytes
[  155.397088][ T9373] sctp: [Deprecated]: syz.0.1023 (pid 9373) Use of struct sctp_assoc_value in delayed_ack socket option.
[  155.397088][ T9373] Use struct sctp_sack_info instead
[  155.453868][ T9375] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1024'.
[  156.809116][ T9383] syzkaller0: entered promiscuous mode
[  156.811330][ T9383] syzkaller0: entered allmulticast mode
[  156.894823][ T9395] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1031'.
[  156.903595][ T9395] openvswitch: netlink: Missing key (keys=40, expected=100)
[  157.622889][ T9425] netlink: 'syz.2.1037': attribute type 10 has an invalid length.
[  157.962008][ T9430] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1039'.
[  158.117058][ T9444] netlink: 'syz.0.1043': attribute type 1 has an invalid length.
[  158.120844][ T9444] netlink: 'syz.0.1043': attribute type 4 has an invalid length.
[  158.124662][ T9445] netlink: 'syz.0.1043': attribute type 1 has an invalid length.
[  158.124670][ T9444] netlink: 'syz.0.1043': attribute type 1 has an invalid length.
[  158.132336][ T9444] netlink: 'syz.0.1043': attribute type 4 has an invalid length.
[  158.136366][ T9445] netlink: 'syz.0.1043': attribute type 4 has an invalid length.
[  158.728223][ T9468] netlink: 'syz.1.1050': attribute type 10 has an invalid length.
[  158.751797][ T9468] bond0: (slave ): Enslaving as an active interface with an up link
[  159.698124][ T9496] __nla_validate_parse: 5 callbacks suppressed
[  159.698166][ T9496] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1058'.
[  159.714477][ T9496] netlink: 'syz.2.1058': attribute type 39 has an invalid length.
[  160.103159][ T9517] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1065'.
[  160.172474][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1068'.
[  160.183475][ T9526] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1066'.
[  160.222246][ T9528] netlink: 'syz.2.1069': attribute type 2 has an invalid length.
[  160.225783][ T9528] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1069'.
[  161.123599][ T9531] bridge0: port 1(ip6gretap0) entered blocking state
[  161.126004][ T9531] bridge0: port 1(ip6gretap0) entered disabled state
[  161.128354][ T9531] ip6gretap0: entered allmulticast mode
[  161.131615][ T9531] ip6gretap0: entered promiscuous mode
[  161.133954][ T9531] bridge0: port 1(ip6gretap0) entered blocking state
[  161.136261][ T9531] bridge0: port 1(ip6gretap0) entered forwarding state
[  161.214475][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1072'.
[  161.244024][ T9540] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1073'.
[  161.253396][ T9535] netlink: 'syz.2.1072': attribute type 1 has an invalid length.
[  161.258941][ T9535] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1072'.
[  161.262249][ T9540] netlink: 6200 bytes leftover after parsing attributes in process `syz.0.1073'.
[  161.268603][ T9540] netlink: 126 bytes leftover after parsing attributes in process `syz.0.1073'.
[  161.278479][ T9540] tc_dump_action: action bad kind
[  161.297583][ T9540] netlink: 'syz.0.1073': attribute type 10 has an invalid length.
[  161.301690][ T9540] lo: entered promiscuous mode
[  161.311711][ T9540] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  162.114208][ T9563] IPv6: NLM_F_CREATE should be specified when creating new route
[  162.595828][ T9580] netlink: 'syz.1.1085': attribute type 1 has an invalid length.
[  162.872296][ T9594] netlink: 'syz.0.1088': attribute type 13 has an invalid length.
[  162.875398][ T9594] netlink: 'syz.0.1088': attribute type 58 has an invalid length.
[  162.937301][ T9604] netlink: 'syz.2.1090': attribute type 1 has an invalid length.
[  163.828340][ T9632] netlink: 'syz.1.1095': attribute type 11 has an invalid length.
[  163.976682][ T9632] siw: device registration error -23
[  164.030204][ T9635] netlink: 'syz.2.1096': attribute type 10 has an invalid length.
[  164.047365][ T9634] delete_channel: no stack
[  164.964226][ T9687] __nla_validate_parse: 6 callbacks suppressed
[  164.964235][ T9687] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1112'.
[  164.992841][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1113'.
[  165.127478][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1115'.
[  165.412538][ T9720] : renamed from dummy0 (while UP)
[  165.413314][ T9721] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1123'.
[  165.567094][ T9739] netlink: 'syz.2.1127': attribute type 3 has an invalid length.
[  165.571267][ T9739] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1127'.
[  165.671163][ T9743] netlink: 'syz.2.1129': attribute type 1 has an invalid length.
[  165.676093][ T9743] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1129'.
[  165.957222][ T9746] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1130'.
[  165.962292][ T9746] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  167.958933][ T9770] netlink: 'syz.1.1137': attribute type 1 has an invalid length.
[  168.302207][ T9772] netlink: 'syz.1.1137': attribute type 1 has an invalid length.
[  169.400738][ T9803] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1146'.
[  170.412036][ T9825] IPv6: Can't replace route, no match found
[  171.475897][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1166'.
[  172.134542][ T9898] netlink: 'syz.1.1178': attribute type 21 has an invalid length.
[  172.145854][ T9898] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1178'.
[  172.152446][ T9898] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1178'.
[  172.809266][ T9907] netlink: 'syz.1.1180': attribute type 39 has an invalid length.
[  172.841752][ T9909] can: request_module (can-proto-3) failed.
[  172.877022][ T9909] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1182'.
[  173.039737][ T9923] netlink: 'syz.2.1184': attribute type 29 has an invalid length.
[  173.048586][ T9923] netlink: 'syz.2.1184': attribute type 29 has an invalid length.
[  173.058287][ T9923] netlink: 'syz.2.1184': attribute type 29 has an invalid length.
[  173.071961][ T9923] netlink: 'syz.2.1184': attribute type 29 has an invalid length.
[  173.143844][ T9939] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1188'.
[  173.264930][ T9949] netlink: 809 bytes leftover after parsing attributes in process `syz.2.1189'.
[  173.270430][ T9949] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.1189'.
[  174.168314][ T9992] netlink: 731 bytes leftover after parsing attributes in process `syz.0.1204'.
[  174.988483][T10013] netlink: 'syz.1.1209': attribute type 10 has an invalid length.
[  175.000120][T10013] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1209'.
[  175.689907][T10010] delete_channel: no stack
[  175.927567][T10027] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1214'.
[  176.577911][T10040] __nla_validate_parse: 3 callbacks suppressed
[  176.577932][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'.
[  176.743675][T10048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1221'.
[  176.747539][T10048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1221'.
[  177.232915][T10056] netlink: 'syz.0.1224': attribute type 10 has an invalid length.
[  177.235716][T10056] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1224'.
[  177.352205][T10059] netlink: 'syz.2.1225': attribute type 10 has an invalid length.
[  177.355646][T10059] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1225'.
[  177.380229][T10061] netlink: 'syz.1.1226': attribute type 2 has an invalid length.
[  177.383753][T10061] netlink: 'syz.1.1226': attribute type 1 has an invalid length.
[  177.447510][T10066] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1228'.
[  177.957339][T10053] delete_channel: no stack
[  178.078454][T10057] delete_channel: no stack
[  178.281798][T10073] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1229'.
[  178.443759][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1229'.
[  179.248308][T10079] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1232'.
[  179.436934][T10083] netlink: 'syz.0.1233': attribute type 16 has an invalid length.
[  179.440494][T10083] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1233'.
[  179.488785][T10084] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  180.710985][ T5860] Bluetooth: hci2: command 0x0406 tx timeout
[  181.020446][ T5238] Bluetooth: hci1: command 0x0406 tx timeout
[  181.358384][T10154] netlink: 'syz.2.1253': attribute type 28 has an invalid length.
[  181.402139][T10154] netlink: 'syz.2.1253': attribute type 3 has an invalid length.
[  181.673262][T10174] __nla_validate_parse: 6 callbacks suppressed
[  181.673273][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1258'.
[  182.287215][T10188] @: renamed from bond_slave_0 (while UP)
[  182.573962][T10194] lo speed is unknown, defaulting to 1000
[  182.579157][T10194] lo speed is unknown, defaulting to 1000
[  182.796674][T10194] lo speed is unknown, defaulting to 1000
[  183.199044][T10194] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  183.253323][T10194] lo speed is unknown, defaulting to 1000
[  183.257667][T10194] lo speed is unknown, defaulting to 1000
[  183.279674][T10194] lo speed is unknown, defaulting to 1000
[  183.282481][T10194] lo speed is unknown, defaulting to 1000
[  183.321136][T10220] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  184.607582][T10269] netlink: 'syz.1.1280': attribute type 21 has an invalid length.
[  184.610616][T10269] netlink: 'syz.1.1280': attribute type 4 has an invalid length.
[  184.631954][T10254] delete_channel: no stack
[  184.632316][T10271] netlink: 'syz.0.1284': attribute type 21 has an invalid length.
[  184.644915][T10271] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1284'.
[  184.648493][T10271] netlink: 'syz.0.1284': attribute type 5 has an invalid length.
[  184.651356][T10271] netlink: 'syz.0.1284': attribute type 6 has an invalid length.
[  184.655170][T10271] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1284'.
[  185.088220][T10295] netlink: 'syz.1.1292': attribute type 6 has an invalid length.
[  185.091720][T10295] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1292'.
[  185.599107][T10307] netlink: 'syz.0.1296': attribute type 64 has an invalid length.
[  185.602033][T10311] netlink: 'syz.0.1296': attribute type 64 has an invalid length.
[  185.661012][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1299'.
[  185.747161][T10318] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1299'.
[  185.753606][T10322] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  185.753698][T10322] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  185.972228][T10329] netlink: 2539 bytes leftover after parsing attributes in process `syz.0.1302'.
[  186.034936][T10334] netlink: 'syz.1.1304': attribute type 21 has an invalid length.
[  186.037790][T10334] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1304'.
[  186.042009][T10334] siw: device registration error -23
[  186.151790][T10338] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1305'.
[  186.219102][T10340] netlink: 'syz.1.1306': attribute type 1 has an invalid length.
[  186.229660][T10340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1306'.
[  187.938294][T10367] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.222084][T10404] __nla_validate_parse: 3 callbacks suppressed
[  189.222095][T10404] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1327'.
[  191.144292][T10446] ref_ctr_offset mismatch. inode: 0x9fb offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  191.187336][T10446] validate_nla: 6 callbacks suppressed
[  191.187396][T10446] netlink: 'syz.1.1339': attribute type 13 has an invalid length.
[  191.194210][T10446] netlink: 'syz.1.1339': attribute type 17 has an invalid length.
[  191.197452][T10446] lo: left promiscuous mode
[  191.268584][T10446] sit0: left promiscuous mode
[  191.283158][T10446] sit0: left allmulticast mode
[  191.353223][T10446] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.380859][T10446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  191.908167][T10484] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1352'.
[  192.376920][T10506] lo speed is unknown, defaulting to 1000
[  192.574503][T10532] proc: Unknown parameter 'u'
[  193.286286][T10551] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1371'.
[  193.292984][T10530] delete_channel: no stack
[  193.548189][T10559] syzkaller0: tun_chr_ioctl cmd 1074025677
[  193.550505][T10559] syzkaller0: linktype set to 768
[  193.888007][T10573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1378'.
[  194.001783][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.004000][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  195.066225][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1036705607 wd_nsec: 1036705691
[  196.368156][T10592] cgroup: Unknown subsys name '0x00000000000000000x0000000000000000'
[  196.487954][T10599] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1383'.
[  196.492737][T10599] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1383'.
[  196.565763][T10594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1383'.
[  196.573020][T10594] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1383'.
[  196.638274][T10602] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1385'.
[  198.453462][T10662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1407'.
[  198.629103][T10677] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1411'.
[  198.633005][T10674] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1411'.
[  198.637188][T10677] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1411'.
[  198.645838][T10675] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1410'.
[  199.174468][T10711] sit0: entered allmulticast mode
[  199.182590][T10711] sit0: entered promiscuous mode
[  200.333239][T10742] netlink: 'syz.2.1430': attribute type 10 has an invalid length.
[  201.086535][T10740] delete_channel: no stack
[  201.368292][T10784] netlink: 'syz.2.1444': attribute type 29 has an invalid length.
[  201.372718][T10784] netlink: 'syz.2.1444': attribute type 29 has an invalid length.
[  201.376512][T10784] netlink: 'syz.2.1444': attribute type 29 has an invalid length.
[  201.517353][T10802] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  201.520350][T10802] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.532273][T10802] __nla_validate_parse: 9 callbacks suppressed
[  201.532315][T10802] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1446'.
[  201.577112][T10804] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1447'.
[  201.598995][T10805] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1447'.
[  201.935761][T10820] netlink: 'syz.0.1453': attribute type 1 has an invalid length.
[  201.939202][T10820] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1453'.
[  201.961244][T10821] netlink: 'syz.0.1453': attribute type 1 has an invalid length.
[  201.967859][T10821] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1453'.
[  202.036281][T10827] netlink: 'syz.0.1454': attribute type 10 has an invalid length.
[  202.046261][T10827] team0: Device veth1_macvtap failed to register rx_handler
[  202.126110][T10776] delete_channel: no stack
[  202.143084][T10832] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1455'.
[  202.146255][T10829] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1455'.
[  202.149897][T10832] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1455'.
[  203.311823][T10864] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1465'.
[  204.106756][T10920] netlink: 'syz.2.1480': attribute type 21 has an invalid length.
[  204.160643][T10924] netlink: 'syz.2.1481': attribute type 6 has an invalid length.
[  204.178845][T10922] syzkaller0: entered promiscuous mode
[  204.181660][T10922] syzkaller0: entered allmulticast mode
[  205.543727][T10953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.570763][T10953] netlink: 'syz.2.1490': attribute type 10 has an invalid length.
[  205.575810][T10953] geneve0: entered promiscuous mode
[  205.618140][T10953] geneve0: entered allmulticast mode
[  205.622950][T10953] : (slave geneve0): Enslaving as an active interface with an up link
[  205.682569][T10958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'.
[  205.857360][T10970] netlink: 'syz.2.1494': attribute type 1 has an invalid length.
[  205.892050][T10975] netlink: 'syz.0.1495': attribute type 10 has an invalid length.
[  205.896355][T10975] team0: Device veth1_macvtap failed to register rx_handler
[  207.045818][T11014] netlink: 'syz.1.1505': attribute type 4 has an invalid length.
[  207.253071][T11024] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  207.255324][T11024] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  207.299250][T11031] __nla_validate_parse: 6 callbacks suppressed
[  207.299261][T11031] netlink: 440 bytes leftover after parsing attributes in process `syz.1.1509'.
[  207.435524][ T5861] Bluetooth: hci0: ISO packet for unknown connection handle 2622
[  207.788551][T11011] delete_channel: no stack
[  207.940949][T11043] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1515'.
[  208.063507][   T10] page_pool_release_retry() stalled pool shutdown: id 52, 1 inflight 60 sec
[  208.248504][T11057] netlink: 'syz.0.1517': attribute type 10 has an invalid length.
[  208.252588][T11057] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1517'.
[  208.526241][T11070] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1524'.
[  208.776162][T11077] openvswitch: netlink: Flow key attr not present in new flow.
[  208.861892][T11049] delete_channel: no stack
[  209.376542][T11092] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  209.440239][T11095] IPv6: Can't replace route, no match found
[  209.444698][T11098] netlink: 'syz.1.1533': attribute type 210 has an invalid length.
[  209.741179][T11109] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  210.846503][T11112] : entered promiscuous mode
[  210.848336][T11113] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1537'.
[  210.853458][T11113] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1537'.
[  210.856615][T11113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1537'.
[  210.922424][T11116] netlink: 'syz.1.1538': attribute type 3 has an invalid length.
[  210.925071][T11116] netlink: 'syz.1.1538': attribute type 4 has an invalid length.
[  211.065162][T11134] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1542'.
[  211.130220][T11131] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1541'.
[  211.151555][T11141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1544'.
[  211.187512][T11144] netlink: 'syz.2.1545': attribute type 10 has an invalid length.
[  211.729391][T11131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.743740][T11131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.755727][T11131] bond0 (unregistering): Released all slaves
[  211.937899][T11155] netlink: 'syz.2.1546': attribute type 10 has an invalid length.
[  212.070641][T11157] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.449135][T11169] __nla_validate_parse: 1 callbacks suppressed
[  212.449145][T11169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1552'.
[  212.455729][T11169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1552'.
[  212.461239][T11169] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1552'.
[  212.464407][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'.
[  212.617442][T11178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  212.666668][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1555'.
[  212.675842][T11151] delete_channel: no stack
[  212.852186][T11188] rdma_rxe: rxe_newlink: failed to add erspan0
[  213.160698][T11191] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1558'.
[  213.164118][T11190] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1558'.
[  213.167603][T11191] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1558'.
[  213.343241][T11193] netlink: 340 bytes leftover after parsing attributes in process `syz.2.1559'.
[  213.347830][T11193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1559'.
[  213.768103][T11218] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  214.108659][T11229] netlink: 'syz.1.1573': attribute type 3 has an invalid length.
[  214.112472][T11229] netlink: 'syz.1.1573': attribute type 1 has an invalid length.
[  214.556172][T11241] netlink: 'syz.1.1577': attribute type 7 has an invalid length.
[  214.559244][T11241] netlink: 'syz.1.1577': attribute type 7 has an invalid length.
[  214.563453][T11241] netlink: 'syz.1.1577': attribute type 7 has an invalid length.
[  214.566273][T11241] netlink: 'syz.1.1577': attribute type 7 has an invalid length.
[  215.952590][T11282] tmpfs: Bad value for 'uid'
[  215.954210][T11282] tmpfs: Bad value for 'uid'
[  216.542424][ T6580] wlan1: Trigger new scan to find an IBSS to join
[  217.096347][ T5861] Bluetooth: hci2: ISO packet for unknown connection handle 30
[  217.767351][T11331] __nla_validate_parse: 78 callbacks suppressed
[  217.767411][T11331] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1603'.
[  217.916965][T11348] validate_nla: 63 callbacks suppressed
[  217.917007][T11348] netlink: 'syz.2.1607': attribute type 13 has an invalid length.
[  217.923245][T11348] netlink: 14581 bytes leftover after parsing attributes in process `syz.2.1607'.
[  218.068276][T11350] netlink: 'syz.0.1608': attribute type 4 has an invalid length.
[  218.211392][T11352] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1609'.
[  218.456100][ T5861] Bluetooth: hci0: SCO packet too small
[  218.619085][T11380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1616'.
[  218.662118][T11382] netlink: 'syz.1.1617': attribute type 13 has an invalid length.
[  218.664814][T11382] netlink: 'syz.1.1617': attribute type 17 has an invalid length.
[  218.710188][T11382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  219.108604][T11410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1626'.
[  219.113654][T11410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1626'.
[  219.479652][T11425] netlink: 'syz.0.1631': attribute type 1 has an invalid length.
[  219.545115][T11436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1634'.
[  219.579758][ T6577] wlan1: Trigger new scan to find an IBSS to join
[  219.814202][T11461] vcan0 speed is unknown, defaulting to 1000
[  219.824822][T11461] vcan0 speed is unknown, defaulting to 1000
[  219.827924][T11461] vcan0 speed is unknown, defaulting to 1000
[  219.842158][T11464] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1642'.
[  219.982603][T11461] infiniband syz1: set active
[  219.985555][    T9] vcan0 speed is unknown, defaulting to 1000
[  219.987785][T11461] infiniband syz1: added vcan0
[  220.018667][T11461] RDS/IB: syz1: added
[  220.021167][T11461] smc: adding ib device syz1 with port count 1
[  220.023948][T11461] smc:    ib device syz1 port 1 has pnetid 
[  220.030107][    T9] vcan0 speed is unknown, defaulting to 1000
[  220.038301][T11461] vcan0 speed is unknown, defaulting to 1000
[  220.253002][T11507] netlink: 'syz.1.1649': attribute type 2 has an invalid length.
[  220.261958][T11507] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1649'.
[  220.277826][T11461] vcan0 speed is unknown, defaulting to 1000
[  220.285326][T11507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1649'.
[  220.408749][T11461] vcan0 speed is unknown, defaulting to 1000
[  220.513333][T11461] vcan0 speed is unknown, defaulting to 1000
[  221.344150][ T7817] wlan1: Creating new IBSS network, BSSID ca:5d:c4:2d:23:5f
[  221.732883][T11532] netlink: 'syz.0.1659': attribute type 3 has an invalid length.
[  221.735560][T11532] netlink: 'syz.0.1659': attribute type 16 has an invalid length.
[  221.957265][T11536] netlink: 'syz.0.1660': attribute type 11 has an invalid length.
[  222.504561][T11556] netlink: 'syz.1.1665': attribute type 10 has an invalid length.
[  222.557668][ T5861] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  222.914846][T11571] __nla_validate_parse: 6 callbacks suppressed
[  222.914855][T11571] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1672'.
[  223.790507][T11592] validate_nla: 1 callbacks suppressed
[  223.790570][T11592] netlink: 'syz.0.1677': attribute type 210 has an invalid length.
[  223.961850][T11592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1677'.
[  224.099256][T11608] netlink: 'syz.1.1683': attribute type 1 has an invalid length.
[  224.102740][T11608] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1683'.
[  224.217640][T11614] netlink: 'syz.2.1686': attribute type 10 has an invalid length.
[  224.227998][T11614] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1686'.
[  224.432755][T11628] netlink: 'syz.2.1691': attribute type 2 has an invalid length.
[  224.466881][T11632] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1692'.
[  224.476048][T11632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1692'.
[  224.701456][ T5238] Bluetooth: hci0: command tx timeout
[  225.073814][T11655] netlink: 'syz.2.1698': attribute type 39 has an invalid length.
[  225.207147][T11660] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1700'.
[  225.232728][T11660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1700'.
[  226.231212][T11687] netlink: 'syz.2.1708': attribute type 10 has an invalid length.
[  226.233818][T11687] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1708'.
[  226.287984][T11691] syzkaller0: entered promiscuous mode
[  226.299393][T11691] syzkaller0: entered allmulticast mode
[  226.421688][T11695] netlink: 'syz.2.1710': attribute type 13 has an invalid length.
[  226.425339][T11695] netlink: 'syz.2.1710': attribute type 17 has an invalid length.
[  226.473217][T11696] netlink: 'syz.2.1710': attribute type 8 has an invalid length.
[  226.476914][T11697] netlink: 'syz.2.1710': attribute type 8 has an invalid length.
[  227.820890][T11695] bridge0: port 3() entered blocking state
[  227.823917][T11695] bridge0: port 3() entered forwarding state
[  227.828586][T11695] 8021q: adding VLAN 0 to HW filter on device 
[  227.879857][T11709] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  227.905128][T11695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  227.911718][T11700] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1711'.
[  228.148991][T11715] nft_compat: unsupported protocol 5
[  228.235990][T11713] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1715'.
[  228.259200][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1715'.
[  228.381834][   T33] audit: type=1107 audit(1757442414.594:3): pid=11728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  228.497315][T11731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  228.822283][T11747] netlink: 872 bytes leftover after parsing attributes in process `syz.2.1728'.
[  228.825324][T11747] netlink: 872 bytes leftover after parsing attributes in process `syz.2.1728'.
[  229.176175][ T5238] Bluetooth: hci2: SCO packet too small
[  229.257762][T11774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1737'.
[  229.491327][T11782] validate_nla: 2 callbacks suppressed
[  229.491343][T11782] netlink: 'syz.0.1740': attribute type 1 has an invalid length.
[  229.497167][T11782] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1740'.
[  229.521025][T11787] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1741'.
[  229.862775][T11798] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1744'.
[  229.969280][T11798] IPv6: Can't replace route, no match found
[  229.974244][T11799] IPv6: Can't replace route, no match found
[  234.105553][T11870] nft_compat: unsupported protocol 205
[  234.257030][T11883] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1768'.
[  234.493232][T11892] netlink: 'syz.1.1771': attribute type 29 has an invalid length.
[  234.506861][T11892] netlink: 'syz.1.1771': attribute type 29 has an invalid length.
[  234.520777][T11892] netlink: 'syz.1.1771': attribute type 29 has an invalid length.
[  234.533864][T11894] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1772'.
[  234.645378][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1775'.
[  234.665103][T11904] lo speed is unknown, defaulting to 1000
[  234.668271][T11904] vcan0 speed is unknown, defaulting to 1000
[  235.012663][T11913] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1777'.
[  235.016041][T11913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1777'.
[  235.065707][T11913] : renamed from hsr0 (while UP)
[  235.225965][T11916] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.1778'.
[  235.285672][T11920] netlink: 'syz.1.1780': attribute type 11 has an invalid length.
[  235.288415][T11920] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1780'.
[  235.488991][T11929] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1783'.
[  235.864642][T11946] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1788'.
[  235.869949][T11946] netlink: 6264 bytes leftover after parsing attributes in process `syz.1.1788'.
[  238.085218][T12022] bridge0: port 1(ip6gretap0) entered blocking state
[  238.091502][T12022] bridge0: port 1(ip6gretap0) entered disabled state
[  238.098639][T12022] ip6gretap0: entered allmulticast mode
[  238.106076][T12022] ip6gretap0: entered promiscuous mode
[  238.112907][T12022] bridge0: port 1(ip6gretap0) entered blocking state
[  238.115310][T12022] bridge0: port 1(ip6gretap0) entered forwarding state
[  238.133183][T12022] netlink: 'syz.2.1810': attribute type 23 has an invalid length.
[  238.173351][T12024] lo speed is unknown, defaulting to 1000
[  238.191369][T12024] vcan0 speed is unknown, defaulting to 1000
[  239.411613][T12065] lo speed is unknown, defaulting to 1000
[  239.414320][T12065] vcan0 speed is unknown, defaulting to 1000
[  239.458721][T12068] lo speed is unknown, defaulting to 1000
[  239.583018][T12068] vcan0 speed is unknown, defaulting to 1000
[  240.653694][ T5919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  240.661173][ T5919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  240.666003][ T5919] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  240.673184][ T5919] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  240.681111][ T5919] bond0 (unregistering): Released all slaves
[  241.130856][T12085] syzkaller0: entered promiscuous mode
[  241.133463][T12085] syzkaller0: entered allmulticast mode
[  241.637193][ T5919] hsr_slave_0: left promiscuous mode
[  241.640709][ T5919] hsr_slave_1: left promiscuous mode
[  241.643487][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  241.647372][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  241.670659][ T5919] veth1_macvtap: left promiscuous mode
[  241.672648][ T5919] veth0_macvtap: left promiscuous mode
[  242.537865][T12113] __nla_validate_parse: 4 callbacks suppressed
[  242.537942][T12113] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1838'.
[  242.850783][T12120] IPv6: Can't replace route, no match found
[  242.928067][ T5919] team0 (unregistering): Port device team_slave_1 removed
[  242.970384][ T5919] team0 (unregistering): Port device C removed
[  243.177079][T12125] netlink: 'syz.1.1841': attribute type 21 has an invalid length.
[  243.186715][T12125] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1841'.
[  243.683720][T12133] netlink: 'syz.1.1843': attribute type 10 has an invalid length.
[  243.687313][T12133] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1843'.
[  243.693496][T12135] netlink: 'syz.2.1844': attribute type 29 has an invalid length.
[  243.725443][T12135] netlink: 'syz.2.1844': attribute type 1 has an invalid length.
[  243.728480][T12135] netlink: 'syz.2.1844': attribute type 2 has an invalid length.
[  243.734255][T12135] netlink: 'syz.2.1844': attribute type 7 has an invalid length.
[  243.737708][T12135] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1844'.
[  243.744777][T12135] netlink: 101636 bytes leftover after parsing attributes in process `syz.2.1844'.
[  243.749171][T12135] netlink: 'syz.2.1844': attribute type 1 has an invalid length.
[  243.756040][T12135] netlink: 'syz.2.1844': attribute type 2 has an invalid length.
[  243.759170][T12135] netlink: 'syz.2.1844': attribute type 7 has an invalid length.
[  243.762488][T12135] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1844'.
[  243.866884][T12141] netlink: 'syz.2.1846': attribute type 10 has an invalid length.
[  243.876860][T12141] netlink: 3515 bytes leftover after parsing attributes in process `syz.2.1846'.
[  243.893283][T12142] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1846'.
[  243.897728][T12141] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1846'.
[  243.954452][T12144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1847'.
[  244.389229][T12131] delete_channel: no stack
[  245.190413][T12175] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  246.545579][T12201] x_tables: ip6_tables: CONNSECMARK.0 target: invalid size 8 (kernel) != (user) 48
[  248.215452][    C1] ==================================================================
[  248.219078][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  248.222581][    C1] Write of size 8 at addr ffff88803b6a1b30 by task syz.0.1876/12248
[  248.227009][    C1] 
[  248.228097][    C1] CPU: 1 UID: 0 PID: 12248 Comm: syz.0.1876 Not tainted syzkaller #0 PREEMPT(full) 
[  248.228111][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  248.228119][    C1] Call Trace:
[  248.228126][    C1]  <IRQ>
[  248.228134][    C1]  dump_stack_lvl+0x189/0x250
[  248.228154][    C1]  ? rcu_is_watching+0x15/0xb0
[  248.228165][    C1]  ? __kasan_check_byte+0x12/0x40
[  248.228186][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  248.228200][    C1]  ? rcu_is_watching+0x15/0xb0
[  248.228210][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  248.228227][    C1]  ? lock_release+0x4b/0x3e0
[  248.228255][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  248.228271][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  248.228292][    C1]  print_report+0xca/0x240
[  248.228308][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  248.228324][    C1]  kasan_report+0x118/0x150
[  248.228356][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  248.228389][    C1]  __xfrm_state_delete+0x696/0xca0
[  248.228432][    C1]  xfrm_timer_handler+0x18f/0xa00
[  248.228450][    C1]  ? __hrtimer_run_queues+0x408/0xc60
[  248.228477][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  248.228492][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  248.228510][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  248.228529][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  248.228546][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  248.228573][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  248.228592][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  248.228609][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  248.228660][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  248.228676][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  248.228706][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  248.228729][    C1]  handle_softirqs+0x286/0x870
[  248.228752][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  248.228778][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  248.228802][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  248.228825][    C1]  __irq_exit_rcu+0xca/0x1f0
[  248.228840][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  248.228873][    C1]  irq_exit_rcu+0x9/0x30
[  248.228884][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  248.228927][    C1]  </IRQ>
[  248.228930][    C1]  <TASK>
[  248.228939][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  248.228952][    C1] RIP: 0010:finish_task_switch+0x26b/0x950
[  248.228969][    C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 2f c7 ea 09 e8 5a 3f 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  248.228978][    C1] RSP: 0018:ffffc90007c27938 EFLAGS: 00000282
[  248.228990][    C1] RAX: 32c66655099d9300 RBX: 0000000000000000 RCX: 32c66655099d9300
[  248.228999][    C1] RDX: 0000000000000000 RSI: ffffffff8d9b6ad4 RDI: ffffffff8be33300
[  248.229006][    C1] RBP: ffffc90007c27990 R08: ffffffff8fa38137 R09: 1ffffffff1f47026
[  248.229015][    C1] R10: dffffc0000000000 R11: fffffbfff1f47027 R12: ffff888026019cc0
[  248.229022][    C1] R13: dffffc0000000000 R14: ffff888105791cc0 R15: ffff88813663ab58
[  248.229064][    C1]  ? finish_task_switch+0x266/0x950
[  248.229098][    C1]  __schedule+0x17a0/0x4cc0
[  248.229147][    C1]  ? perf_trace_lock+0x2f8/0x3b0
[  248.229175][    C1]  ? __pfx___schedule+0x10/0x10
[  248.229209][    C1]  ? schedule+0x91/0x360
[  248.229237][    C1]  ? schedule+0x91/0x360
[  248.229263][    C1]  schedule+0x165/0x360
[  248.229286][    C1]  do_nanosleep+0x1c7/0x600
[  248.229312][    C1]  ? do_nanosleep+0x7f/0x600
[  248.229340][    C1]  ? __pfx_do_nanosleep+0x10/0x10
[  248.229362][    C1]  ? __hrtimer_setup+0x187/0x210
[  248.229375][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  248.229395][    C1]  hrtimer_nanosleep+0x169/0x360
[  248.229417][    C1]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  248.229438][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  248.229455][    C1]  ? __pfx_get_timespec64+0x10/0x10
[  248.229471][    C1]  ? blkcg_maybe_throttle_current+0x1ab/0xb40
[  248.229510][    C1]  __se_sys_clock_nanosleep+0x2f1/0x380
[  248.229535][    C1]  ? __pfx___se_sys_clock_nanosleep+0x10/0x10
[  248.229552][    C1]  ? rcu_is_watching+0x15/0xb0
[  248.229576][    C1]  ? do_syscall_64+0xbe/0x3b0
[  248.229604][    C1]  do_syscall_64+0xfa/0x3b0
[  248.229619][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  248.229636][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.229650][    C1]  ? exc_page_fault+0x9f/0xf0
[  248.229673][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.229684][    C1] RIP: 0033:0x7f3282fc14a5
[  248.229699][    C1] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8
[  248.229708][    C1] RSP: 002b:00007ffe7e5b1eb0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  248.229720][    C1] RAX: ffffffffffffffda RBX: 00007f32831c5fa0 RCX: 00007f3282fc14a5
[  248.229728][    C1] RDX: 00007ffe7e5b1ef0 RSI: 0000000000000000 RDI: 0000000000000000
[  248.229734][    C1] RBP: 00007f32831c7da0 R08: 0000000000000000 R09: 7fffffffffffffff
[  248.229742][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000003cafb
[  248.229749][    C1] R13: 00007f32831c6090 R14: ffffffffffffffff R15: 00007ffe7e5b2030
[  248.229790][    C1]  </TASK>
[  248.229794][    C1] 
[  248.445514][    C1] Allocated by task 10778:
[  248.447477][    C1]  kasan_save_track+0x3e/0x80
[  248.449508][    C1]  __kasan_slab_alloc+0x6c/0x80
[  248.451646][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  248.454012][    C1]  xfrm_state_alloc+0x24/0x2f0
[  248.456104][    C1]  __find_acq_core+0x8a7/0x1c00
[  248.458236][    C1]  xfrm_find_acq+0x78/0xa0
[  248.460261][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  248.462473][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  248.464700][    C1]  netlink_rcv_skb+0x208/0x470
[  248.466826][    C1]  xfrm_netlink_rcv+0x79/0x90
[  248.468877][    C1]  netlink_unicast+0x82f/0x9e0
[  248.471007][    C1]  netlink_sendmsg+0x805/0xb30
[  248.473116][    C1]  __sock_sendmsg+0x21c/0x270
[  248.475219][    C1]  ____sys_sendmsg+0x505/0x830
[  248.477343][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  248.479400][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  248.481575][    C1]  do_syscall_64+0xfa/0x3b0
[  248.483584][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.486337][    C1] 
[  248.487436][    C1] Freed by task 10:
[  248.489108][    C1]  kasan_save_track+0x3e/0x80
[  248.491204][    C1]  kasan_save_free_info+0x46/0x50
[  248.493418][    C1]  __kasan_slab_free+0x5b/0x80
[  248.495554][    C1]  kmem_cache_free+0x18f/0x400
[  248.497635][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  248.499807][    C1]  process_scheduled_works+0xae1/0x17b0
[  248.502243][    C1]  worker_thread+0x8a0/0xda0
[  248.504265][    C1]  kthread+0x711/0x8a0
[  248.506096][    C1]  ret_from_fork+0x3fc/0x770
[  248.508037][    C1]  ret_from_fork_asm+0x1a/0x30
[  248.510137][    C1] 
[  248.511211][    C1] The buggy address belongs to the object at ffff88803b6a1b00
[  248.511211][    C1]  which belongs to the cache xfrm_state of size 928
[  248.517104][    C1] The buggy address is located 48 bytes inside of
[  248.517104][    C1]  freed 928-byte region [ffff88803b6a1b00, ffff88803b6a1ea0)
[  248.523038][    C1] 
[  248.524115][    C1] The buggy address belongs to the physical page:
[  248.526881][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803b6a2880 pfn:0x3b6a0
[  248.531270][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  248.534922][    C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  248.538213][    C1] page_type: f5(slab)
[  248.539993][    C1] raw: 00fff00000000040 ffff88801afdc780 dead000000000122 0000000000000000
[  248.543720][    C1] raw: ffff88803b6a2880 00000000800e000a 00000000f5000000 0000000000000000
[  248.547440][    C1] head: 00fff00000000040 ffff88801afdc780 dead000000000122 0000000000000000
[  248.551207][    C1] head: ffff88803b6a2880 00000000800e000a 00000000f5000000 0000000000000000
[  248.554938][    C1] head: 00fff00000000002 ffffea0000eda801 00000000ffffffff 00000000ffffffff
[  248.558650][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  248.562358][    C1] page dumped because: kasan: bad access detected
[  248.565163][    C1] page_owner tracks the page as allocated
[  248.567637][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6387, tgid 6386 (syz.0.144), ts 71225390931, free_ts 63549350396
[  248.575591][    C1]  post_alloc_hook+0x240/0x2a0
[  248.577769][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  248.580235][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  248.582784][    C1]  alloc_pages_mpol+0x232/0x4a0
[  248.584918][    C1]  allocate_slab+0x8a/0x370
[  248.586914][    C1]  ___slab_alloc+0xbeb/0x1410
[  248.589040][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  248.591455][    C1]  xfrm_state_alloc+0x24/0x2f0
[  248.593574][    C1]  pfkey_add+0x6e4/0x2e00
[  248.595448][    C1]  pfkey_sendmsg+0xbfe/0x1090
[  248.597512][    C1]  __sock_sendmsg+0x21c/0x270
[  248.599571][    C1]  ____sys_sendmsg+0x505/0x830
[  248.601661][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  248.603725][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  248.605933][    C1]  do_syscall_64+0xfa/0x3b0
[  248.607928][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.610469][    C1] page last free pid 5297 tgid 5297 stack trace:
[  248.613229][    C1]  __free_frozen_pages+0xbc4/0xd30
[  248.615451][    C1]  __put_partials+0x156/0x1a0
[  248.617461][    C1]  put_cpu_partial+0x17c/0x250
[  248.619551][    C1]  __slab_free+0x2d5/0x3c0
[  248.621505][    C1]  qlist_free_all+0x97/0x140
[  248.623507][    C1]  kasan_quarantine_reduce+0x148/0x160
[  248.625916][    C1]  __kasan_slab_alloc+0x22/0x80
[  248.628013][    C1]  __kvmalloc_node_noprof+0x2b0/0x5f0
[  248.630321][    C1]  seq_read_iter+0x1fd/0xe10
[  248.632341][    C1]  vfs_read+0x55a/0xa30
[  248.634150][    C1]  ksys_read+0x145/0x250
[  248.636047][    C1]  do_syscall_64+0xfa/0x3b0
[  248.638094][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.640598][    C1] 
[  248.641680][    C1] Memory state around the buggy address:
[  248.644120][    C1]  ffff88803b6a1a00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  248.647639][    C1]  ffff88803b6a1a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  248.651088][    C1] >ffff88803b6a1b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  248.654544][    C1]                                      ^
[  248.656976][    C1]  ffff88803b6a1b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  248.660485][    C1]  ffff88803b6a1c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  248.663936][    C1] ==================================================================
[  248.667915][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  248.671027][    C1] CPU: 1 UID: 0 PID: 12248 Comm: syz.0.1876 Not tainted syzkaller #0 PREEMPT(full) 
[  248.675052][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  248.679563][    C1] Call Trace:
[  248.681229][    C1]  <IRQ>
[  248.682574][    C1]  dump_stack_lvl+0x99/0x250
[  248.684654][    C1]  ? __asan_memcpy+0x40/0x70
[  248.686689][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  248.689042][    C1]  ? __pfx__printk+0x10/0x10
[  248.691114][    C1]  vpanic+0x281/0x750
[  248.692852][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  248.695144][    C1]  ? __pfx_vpanic+0x10/0x10
[  248.697152][    C1]  ? irqentry_exit+0x74/0x90
[  248.699223][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  248.701668][    C1]  panic+0xb9/0xc0
[  248.703420][    C1]  ? __pfx_panic+0x10/0x10
[  248.705287][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  248.707516][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  248.709945][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  248.711848][    C1]  check_panic_on_warn+0x89/0xb0
[  248.713731][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  248.715759][    C1]  end_report+0x78/0x160
[  248.717486][    C1]  kasan_report+0x129/0x150
[  248.719325][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  248.721423][    C1]  __xfrm_state_delete+0x696/0xca0
[  248.723162][    C1]  xfrm_timer_handler+0x18f/0xa00
[  248.724852][    C1]  ? __hrtimer_run_queues+0x408/0xc60
[  248.726725][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  248.728652][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  248.730605][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  248.732290][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  248.734172][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  248.736241][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  248.738093][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  248.740050][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  248.741950][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  248.744265][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  248.746533][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  248.748406][    C1]  handle_softirqs+0x286/0x870
[  248.750202][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  248.752156][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  248.754245][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  248.756145][    C1]  __irq_exit_rcu+0xca/0x1f0
[  248.757654][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  248.759377][    C1]  irq_exit_rcu+0x9/0x30
[  248.760789][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  248.762655][    C1]  </IRQ>
[  248.763613][    C1]  <TASK>
[  248.764614][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  248.766601][    C1] RIP: 0010:finish_task_switch+0x26b/0x950
[  248.768562][    C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 2f c7 ea 09 e8 5a 3f 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  248.774751][    C1] RSP: 0018:ffffc90007c27938 EFLAGS: 00000282
[  248.776939][    C1] RAX: 32c66655099d9300 RBX: 0000000000000000 RCX: 32c66655099d9300
[  248.779540][    C1] RDX: 0000000000000000 RSI: ffffffff8d9b6ad4 RDI: ffffffff8be33300
[  248.782182][    C1] RBP: ffffc90007c27990 R08: ffffffff8fa38137 R09: 1ffffffff1f47026
[  248.784799][    C1] R10: dffffc0000000000 R11: fffffbfff1f47027 R12: ffff888026019cc0
[  248.787484][    C1] R13: dffffc0000000000 R14: ffff888105791cc0 R15: ffff88813663ab58
[  248.790140][    C1]  ? finish_task_switch+0x266/0x950
[  248.791970][    C1]  __schedule+0x17a0/0x4cc0
[  248.793640][    C1]  ? perf_trace_lock+0x2f8/0x3b0
[  248.795614][    C1]  ? __pfx___schedule+0x10/0x10
[  248.797693][    C1]  ? schedule+0x91/0x360
[  248.799518][    C1]  ? schedule+0x91/0x360
[  248.801307][    C1]  schedule+0x165/0x360
[  248.803084][    C1]  do_nanosleep+0x1c7/0x600
[  248.805094][    C1]  ? do_nanosleep+0x7f/0x600
[  248.807111][    C1]  ? __pfx_do_nanosleep+0x10/0x10
[  248.809318][    C1]  ? __hrtimer_setup+0x187/0x210
[  248.811439][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  248.813614][    C1]  hrtimer_nanosleep+0x169/0x360
[  248.815751][    C1]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  248.818038][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  248.820286][    C1]  ? __pfx_get_timespec64+0x10/0x10
[  248.822516][    C1]  ? blkcg_maybe_throttle_current+0x1ab/0xb40
[  248.825173][    C1]  __se_sys_clock_nanosleep+0x2f1/0x380
[  248.827515][    C1]  ? __pfx___se_sys_clock_nanosleep+0x10/0x10
[  248.830135][    C1]  ? rcu_is_watching+0x15/0xb0
[  248.832189][    C1]  ? do_syscall_64+0xbe/0x3b0
[  248.834148][    C1]  do_syscall_64+0xfa/0x3b0
[  248.836036][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  248.838205][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.840725][    C1]  ? exc_page_fault+0x9f/0xf0
[  248.842702][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.845168][    C1] RIP: 0033:0x7f3282fc14a5
[  248.847045][    C1] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8
[  248.854928][    C1] RSP: 002b:00007ffe7e5b1eb0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  248.858510][    C1] RAX: ffffffffffffffda RBX: 00007f32831c5fa0 RCX: 00007f3282fc14a5
[  248.861753][    C1] RDX: 00007ffe7e5b1ef0 RSI: 0000000000000000 RDI: 0000000000000000
[  248.864957][    C1] RBP: 00007f32831c7da0 R08: 0000000000000000 R09: 7fffffffffffffff
[  248.868314][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000003cafb
[  248.871699][    C1] R13: 00007f32831c6090 R14: ffffffffffffffff R15: 00007ffe7e5b2030
[  248.874949][    C1]  </TASK>
[  248.876956][    C1] Kernel Offset: disabled
[  248.878794][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:27:14  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000ce3 RBX=ffff88804b023900 RCX=0000000000000838 RDX=0000000000000000
RSI=0000000000000ce3 RDI=0000000000000838 RBP=0000000000000001 RSP=ffffc90000007e50
R8 =0000000000000000 R9 =ffffffff81cb03c7 R10=3e2d735f5f5f5f26 R11=ffffffff81703490
R12=000000000fffebde R13=dffffc0000000000 R14=0000000000000ce3 R15=0000000000000020
RIP=ffffffff81716179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007feb733da6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007feb733b8fc8 CR3=000000012b286000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=9500000007000000 850000002c000000 XMM03=8500000000000000 00fffffffa000002
XMM04=00007feb732fd100 00007feb72797460 XMM05=00007feb72797478 00007feb727974c0
XMM06=00007feb727974b8 00007feb727974b0 XMM07=00007feb727974a8 00007feb727974a0
XMM08=0000000000000000 00007feb72612ee7 XMM09=0000000000000000 00007feb72612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e03b0
R8 =ffff88801f840237 R9 =1ffff11003f08046 R10=dffffc0000000000 R11=ffffffff854f0870
R12=dffffc0000000000 R13=ffffffff99af98fe R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f08ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555579af2500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007feb733dad58 CR3=00000000388f0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f3283197498 00007f3283197470 XMM03=00007f32831974a8 00007f32831974a0
XMM04=00007f3283cfd100 00007f3283197460 XMM05=00007f3283197478 00007f32831974c0
XMM06=00007f32831974b8 00007f32831974b0 XMM07=00007f32831974a8 00007f32831974a0
XMM08=0000000000000000 00007f3283012ee7 XMM09=0000000000000000 00007f3283012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
