last executing test programs:

1.435713177s ago: executing program 0 (id=1069):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000006060104fffffffffffffff00a000005050001000700000005000100070000000900020073797a310000000009000300737d7a310000000005000100070000005b191ce4393d4a9a4c70dc4243f5829560dbbf7d6d7ecbede4baee49427f97b8b03cacb853f0c633668b39538c78e2c7ab59c95ff8411d286110adcb5b32f06b14"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x4040000)

1.359510806s ago: executing program 0 (id=1071):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000ae0000000a00000000950000000000000047fb0612c22b4f1b666ee54b82b1844ebbf917bdfa575e676bb1f23d20ee1eac3181552021b11e7c101a9bd95edcc6abbc9d6bfe78da1f69bca7a8530afae8d40d7c3c10625bfd9eb8428a0c9d7c9eb68104f7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES64=r0, @ANYRES8=r0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r0, r1}, 0xc) (async, rerun: 32)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="7c0000800e0601020005000000000000030000090900020073797a31000000000900020073797a30000000004900020073797a32000000000900020073797a3000000000000000000900020073797a32000000000900020073797a31000000000900020073797a30000000000500010007000000000000000000e2ff409813fdf5debf7d7799267497263592d38167465cb59b5afa61c22d03c733732c01d86a86b1690a252b7fc32100b3686f93e5cc8ffe1332579468de2b721be4c7357c8fa5fdfac5a7633353fb5b2c8af0134814b9843963ad85520d44024bf2e22afde38122273f14e3e9af699a8e14fddc58782194df8c55"], 0x7c}, 0x1, 0x0, 0x0, 0x4841}, 0x80) (async, rerun: 32)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) (async, rerun: 32)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x100) (async, rerun: 32)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async, rerun: 32)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/252, 0xfc}, {&(0x7f0000001500)=""/159, 0x9f}, {&(0x7f0000000180)=""/229, 0xe5}, {&(0x7f0000003ac0)=""/4110, 0x100e}, {&(0x7f0000000c80)=""/193, 0xc1}, {&(0x7f00000004c0)=""/187, 0xbb}, {&(0x7f0000000600)=""/53, 0x35}, {&(0x7f0000000640)=""/283, 0x11b}], 0x8}, 0x20) (async, rerun: 32)
write$cgroup_subtree(r3, &(0x7f0000000bc0)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="ff4282bc3b64e912dbff649ac5bd78fdb147ea052b767581b3acd1f7d177e7c0bb15269a2dbc48ed036dacd2068958b86a6ee6d6eeed3299d77e8b413fe9666179306353f5b155a554fa4bc48300df3c026339b7165b475d0b83f9455bfaf1351a284330c7bf524dbc63019ba8b941aa06f3543bd349001007196eaa51bf0ce807609060003ff5b97c0d27433543", @ANYRESDEC=r2], 0xfe33) (async, rerun: 32)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES64=r2], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)='%+9llu \x00'}, 0x20) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) (async, rerun: 32)
socket$kcm(0x29, 0x5, 0x0) (rerun: 32)
r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000009c0), 0x4}, 0x15200, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r7=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
socket$kcm(0x15, 0x5, 0x0) (async, rerun: 64)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010003300010000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa00000000000000000300060000000000"], 0x80}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x327021c}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x1, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_PAYLOAD={0x1c, 0xa, "cc99180b5abfb190df976d8f1573d26023a1610186cb3d19"}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000000}, 0x44010) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0xd, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)

1.359149191s ago: executing program 1 (id=1072):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x11220, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x11220, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, 0x0, 0x25, 0x3, @val=@tracing={0xffffffffffffffff, 0x4}}, 0x20)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000000000048000000000000000000000000000000bce1ab8e5a7dec514ff78455298ad6f9255d4c08f3cec1abdb9dcc26b945"], 0x50)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r2}, 0x18) (async)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r2}, 0x18)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x11, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800e7ff8a93344a11750200ca40e6a1f08a03b6f90c3362a385a25ada3fd78f98a30084f646668ab791f8fbb6429e844662472ed8707bf269dfd723c3ae79a7912bec61cf88fe112e2147ae08ca2259169078506debcfac924e010738be30bfc7c37ce22b46fe1bd681352bfa0e443f27d7aec783ee19246ead185be08cca49b605dd5650f41e2e29d30a80bd9d3d0ce4a7da52ab76d6d38faa41447f37cd8e34f3669c376618f52b6489899a7d5b7b0fcdc594e795a6a5c0f2b6d8fa32033dc2041772a9da787c6950584cd81569921f1fc49e5090fc0a30e9619e3e18dfcced678b129ff763d13572", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018100000", @ANYRES32=r3, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$kcm(0x2, 0x5, 0x84)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0xe, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r7=>0x0}, 0x40)
r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300), 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r0, r4, 0x3, 0x2018, 0x0, @value=r8, @void, @void, @void, r7}, 0x20) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r0, r4, 0x3, 0x2018, 0x0, @value=r8, @void, @void, @void, r7}, 0x20)

1.299670489s ago: executing program 0 (id=1073):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x1, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5f31, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x20f91cb2d94e1c1e}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b70800e7ff0000007b8af8ff00000000aa080000000000007b8af0ff00000000bfa100000000000007010000f8d1e222e8215affffffbfa4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000007c0)}, 0x40)
setsockopt$sock_attach_bpf(r1, 0x1, 0x23, &(0x7f0000000000), 0x4)
recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20)
close(r0)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000540)=ANY=[@ANYRESOCT=r3, @ANYRES64=0x0, @ANYRESHEX=r2, @ANYRESDEC], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.sectors_recursive\x00', 0x26e1, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
setsockopt$sock_attach_bpf(r5, 0x6, 0x5, &(0x7f0000000040)=r6, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000007c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x50)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@deltclass={0xffffffffffffff25, 0x29, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0xb}, {0x2, 0x2}, {0xe, 0xfff1}}, [@tclass_kind_options=@c_fq_codel]}, 0x2c}, 0x1, 0x0, 0x0, 0x4090}, 0xc800)
sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r10 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r10, 0x84, 0x85, &(0x7f0000000ac0), 0x90)
sendmsg$inet(r10, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0xe0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000e6fbffffff0000000080000000850000009300000095000000000000007d86808c29e8f3334f0df29d2d4a3566db49809937e8c21a8922797cf0104d055affa6e49c231be1f487c68a6ecd73761bf2690a819677b2bd3900faf98975bc0717a65303b9c668ed048e6c417ff727fdaa06008de405627b234219e3c6bf25226714ece8e6fe8eab74db8d0ea936ee00ea4fee8cc777326c39347ea1526864196a423a91e676672b62a8259c880500eda240d9"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94)

859.868034ms ago: executing program 1 (id=1074):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000400)=0xffffffffffffffff, 0x11)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}, {0x95, 0x0, 0x0, 0x301}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x6, 0x8, 0x80000000, 0x44, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50)
close(r2)

679.288778ms ago: executing program 1 (id=1075):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x6, 0x0, 0x0, 0xa10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x2, @perf_bp={0x0, 0xb}, 0x100500, 0x0, 0x1000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1}, 0x0, 0x200000000000000, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYRESOCT=r2], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
socket$kcm(0x2, 0x1, 0x84)
syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00')
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0xaa20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x48}, 0x100)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/242, 0xf2}], 0x2}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x541b, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000daee85eee0201ea89d00"/37], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00')
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)

570.479025ms ago: executing program 2 (id=1076):
r0 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x44051)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d805000100fec04d1b34ca3b808de2abea6c110000983cfcce7657581d5f602f3a000000080005007a010401a80016002000034011000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbae5dc92b7f9f15284bd38d150e2ce8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f4e278d8016a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9a", 0xd8}], 0x1}, 0x20008854)
close(r1)
r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = gettid()
perf_event_open(0x0, r4, 0xb, r3, 0xa)
syz_open_procfs$namespace(r4, &(0x7f0000000140)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000015006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r6 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r6, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, 0x80, 0x0}, 0x0)
close(r6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8931, &(0x7f0000000000)={'netdevsim0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000a060101e38f7db6e3532870b3670000000000090000000000000000094000080005263e9ee7babfa6d30f7a2499b3add2058bb04fbdc7f0ef8fecc4afbc155f50c2a39970ddbdda4e7f46fb251128180fe054a633232a46319d100d8de7327166aace7d05413ac530e54458d70b4b11b80e340345d84c6e3037ed57d4290c440b827e95b710781cb2fcbe2a756177bcbc3e9770029def4359d753c38aa1719bfdca86021854a8735611e17de0427ecfd76876a07e576d5f3db6ec0c4e342baaf6090bb70c3a21820faaed2e82b5df7f9670ead437a1eb17a8aeacf007e43aaa12337026f40c8bb74e6b"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004090)
sendmsg$inet(r0, &(0x7f0000003900)={0x0, 0x0, 0x0}, 0x80)

420.431128ms ago: executing program 1 (id=1077):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c0000007b089500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x15, 0x5, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000003c0007010060000000000000017c00001c00fc80180008800e0031002a27262d2e2b2a7b2e0000000400a7800c00018006000600800a0000080002800400158008000700", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040)

320.38738ms ago: executing program 2 (id=1078):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfd6d}, 0x48)
close(r0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c0001"], 0x48) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@fallback=r2, r1, 0x0, 0x1000, r4, @void, @value=r1}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, 0x0}, 0x20) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (rerun: 32)

319.475826ms ago: executing program 0 (id=1079):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r1}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x6f, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
sendmsg$nl_route_sched_retired(r0, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9001001}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@newtclass={0x24, 0x28, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffe0, 0xe}, {0x7, 0xf}, {0xffe0, 0xfffa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

239.788767ms ago: executing program 2 (id=1080):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x100000000000000}, 0x0)

238.680553ms ago: executing program 0 (id=1081):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x93, 0xd, 0x0, 0x0, 0x0, 0x2, 0xa8118, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x14188, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)='.\x00\x00\x00', 0x4}], 0x1}, 0x0)

237.883806ms ago: executing program 1 (id=1082):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0, 0x2, 0x1, 0x1}, 0x50)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94)

190.312855ms ago: executing program 2 (id=1083):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000000606010400f00000000000000a000005050001000700000005000100070000000900020073797a310000000009000300737d7a310000000005000100070000005b191ce4393d4a9a4c70dc4243f5829560dbbf7d6d7ecbede4baee49427f97b8b03cacb853f0c633668b39538c78e2c7ab59c95ff8411d286110adcb5b32f06b14"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x4040000)

189.885979ms ago: executing program 1 (id=1084):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf040011"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2c267, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0000000711096000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x6)
sendmsg$netlink(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x1000001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94)
socket$nl_rdma(0x10, 0x3, 0x14)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r4)
socket$can_j1939(0x1d, 0x2, 0x7)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xbf\xe3?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\fr\xf1\xec\xd9CD\x80\xb4^\x8cw;\x87\xea\x8c\x8bJ\x9a\x0ej\x8f\x8e^\xe6\xa6\xaa\x910\fD\xabFU\xa0D;\xd6\xd1\xeer\x9d\x02\xd9\xf7d`\xbfv\x15.\xe4\x82|)K\x99\x98&?\xcd\xe5\xa8\xba~$;g\t\x02\x84+\x90\xab\x816$/\x92\"\xef\xf7\x18\xfaE\xfe\xf7\n\xb2\x7fC\xbb\xbdg#F\n\vu\xe2\xe9\b\xa2\xf1\x94Fb\x92\xc9\xddP\xf0m35+\xdd\xac3\x00\xdd\xfb\b\xc0\x95\xe8\xa5\xec\x9e\xbfA\x7f\xff\xb8\xe2\xe2HNy$\xd4\xc6\x9dd\t\xf6\xed\x10\x15%\r\x1aD\f>\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq')
ioctl$SIOCSIFHWADDR(r4, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000)

130.423231ms ago: executing program 2 (id=1085):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x0, 0x0, 0xa}, {0x0, 0x4, 0x10009, 0x1}], 0x10, 0xfffffff6}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c030002180000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d4, 0x3c}, 0x2, @in6=@remote, 0x3504, 0x2, 0x2, 0x6, 0x0, 0x1}]}]}, 0x16c}}, 0x0) (async)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00fe0000000071106c0000000000950000000000bd00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94)

130.037464ms ago: executing program 0 (id=1086):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$kcm(0x2, 0x200000000000001, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80092, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x2, 0x8001}, 0x6c, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140))
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x9b, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x0, 0x0, 0x2, 0x0, 0x5, 0x83501, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x2}, 0x944, 0x6, 0x0, 0x0, 0x6d1a, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)
r3 = socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x0, 0x26, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="140000002b000b6c69000000000000000a000000", 0x14}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e000000100081a4040f802f767457c536fd010031000000a37f02200000000000000e00c0fc1d757a9001278f04", 0x2e}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x122)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))

0s ago: executing program 2 (id=1087):
r0 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x11b, 0x6, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x64}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2a, 0x0, &(0x7f0000000140)="06ff03076844babeb89e14f00806", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(r2) (async)
close(r2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000010401020000000000000000260400000500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x44801}, 0x4008804)
close(r6)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x6, 0xffff, 0x1000}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x6, 0xffff, 0x1000}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYBLOB="375f29c4"], 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000018000000080000004000000042"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r8}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r8, &(0x7f0000000340), 0x0}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=0x1, @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="22bbbda99e58b000"/30], 0x50) (async)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=0x1, @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="22bbbda99e58b000"/30], 0x50)
bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) (async)
bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000b6cad83a0000000006000000ff34af9698d24785c55bc5b5df18110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018000000ff0000000000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000b6cad83a0000000006000000ff34af9698d24785c55bc5b5df18110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018000000ff0000000000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:50844' (ED25519) to the list of known hosts.
syzkaller login: [   57.447660][ T5839] cgroup: Unknown subsys name 'net'
[   57.554150][ T5839] cgroup: Unknown subsys name 'cpuset'
[   57.559352][ T5839] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.172603][ T5839] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.601258][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.605776][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.609666][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.621917][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.625897][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.661168][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.665775][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.669598][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.676812][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.690135][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.696952][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.702206][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.746394][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.753491][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.757694][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.039601][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   64.085731][ T5860] chnl_net:caif_netlink_parms(): no params data found
[   64.104157][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   64.161695][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.164891][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.168346][ T5853] bridge_slave_0: entered allmulticast mode
[   64.172080][ T5853] bridge_slave_0: entered promiscuous mode
[   64.212478][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.214936][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.217645][ T5853] bridge_slave_1: entered allmulticast mode
[   64.221213][ T5853] bridge_slave_1: entered promiscuous mode
[   64.259103][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.270636][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.273328][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.276067][ T5860] bridge_slave_0: entered allmulticast mode
[   64.278904][ T5860] bridge_slave_0: entered promiscuous mode
[   64.282359][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.284741][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.287164][ T5860] bridge_slave_1: entered allmulticast mode
[   64.289934][ T5860] bridge_slave_1: entered promiscuous mode
[   64.295577][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.367166][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.372227][ T5853] team0: Port device team_slave_0 added
[   64.376166][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.379343][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.384393][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.387475][ T5858] bridge_slave_0: entered allmulticast mode
[   64.391609][ T5858] bridge_slave_0: entered promiscuous mode
[   64.396154][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.399181][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.403365][ T5858] bridge_slave_1: entered allmulticast mode
[   64.407259][ T5858] bridge_slave_1: entered promiscuous mode
[   64.411569][ T5853] team0: Port device team_slave_1 added
[   64.459893][ T5860] team0: Port device team_slave_0 added
[   64.466141][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.479184][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.482119][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.490775][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.496562][ T5860] team0: Port device team_slave_1 added
[   64.501821][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.506353][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.508750][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.517745][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.561064][ T5858] team0: Port device team_slave_0 added
[   64.573139][ T5858] team0: Port device team_slave_1 added
[   64.576238][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.578693][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.589000][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.594116][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.596471][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.605509][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.664030][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.667225][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.678974][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.687572][ T5853] hsr_slave_0: entered promiscuous mode
[   64.690175][ T5853] hsr_slave_1: entered promiscuous mode
[   64.701164][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.703755][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.714255][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.749700][ T5860] hsr_slave_0: entered promiscuous mode
[   64.753008][ T5860] hsr_slave_1: entered promiscuous mode
[   64.755983][ T5860] debugfs: 'hsr0' already exists in 'hsr'
[   64.758464][ T5860] Cannot create hsr debugfs directory
[   64.857862][ T5858] hsr_slave_0: entered promiscuous mode
[   64.861554][ T5858] hsr_slave_1: entered promiscuous mode
[   64.864588][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[   64.867088][ T5858] Cannot create hsr debugfs directory
[   65.165546][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.183381][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.205545][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.222501][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.272623][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.279951][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.295095][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.302916][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.369537][ T5858] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.378033][ T5858] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.392659][ T5858] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.404613][ T5858] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.532399][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.566246][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.584172][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   65.605134][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.608391][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.624569][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[   65.628535][  T710] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.631724][  T710] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.641323][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.661976][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   65.670964][  T710] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.674073][  T710] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.691601][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.694743][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.709548][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.712845][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.717230][ T5855] Bluetooth: hci0: command tx timeout
[   65.723435][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.726574][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.768463][ T5853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.772565][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.785752][ T5855] Bluetooth: hci2: command tx timeout
[   65.791055][ T5855] Bluetooth: hci1: command tx timeout
[   65.916187][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.965749][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.974999][ T5853] veth0_vlan: entered promiscuous mode
[   65.979600][ T5853] veth1_vlan: entered promiscuous mode
[   66.025943][ T5860] veth0_vlan: entered promiscuous mode
[   66.041607][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.045669][ T5860] veth1_vlan: entered promiscuous mode
[   66.057883][ T5853] veth0_macvtap: entered promiscuous mode
[   66.067367][ T5853] veth1_macvtap: entered promiscuous mode
[   66.083213][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.097344][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.114661][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.125967][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.144476][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.152913][ T5860] veth0_macvtap: entered promiscuous mode
[   66.159058][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.172378][ T5860] veth1_macvtap: entered promiscuous mode
[   66.180976][ T5858] veth0_vlan: entered promiscuous mode
[   66.193104][ T5858] veth1_vlan: entered promiscuous mode
[   66.213340][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.233900][ T5858] veth0_macvtap: entered promiscuous mode
[   66.240946][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.265489][ T5858] veth1_macvtap: entered promiscuous mode
[   66.274314][ T5883] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.281119][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.282783][ T5883] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.284399][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.287496][ T5883] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.295503][ T5883] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.316945][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.340098][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.350423][  T710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.353780][  T710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.367570][ T5866] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.378082][ T5866] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.386071][ T5866] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.389046][ T5866] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.423436][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.443721][  T710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.446725][  T710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.486217][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.488926][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.494059][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.510942][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.544371][ T1385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.547773][ T1385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.869436][ T5945] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9'.
[   66.873940][ T5945] unsupported nlmsg_type 40
[   67.067814][    C0] hrtimer: interrupt took 54216 ns
[   67.781880][ T5855] Bluetooth: hci0: command tx timeout
[   67.863613][ T5855] Bluetooth: hci1: command tx timeout
[   67.866759][ T5855] Bluetooth: hci2: command tx timeout
[   68.247273][ T5966] netlink: 'syz.2.16': attribute type 12 has an invalid length.
[   68.255060][ T5966] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.16'.
[   68.396104][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.400171][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.411898][ T5972] bridge0: entered allmulticast mode
[   68.436320][ T5972] bridge_slave_1: left allmulticast mode
[   68.439105][ T5972] bridge_slave_1: left promiscuous mode
[   68.452839][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.467510][ T5972] bridge_slave_0: left allmulticast mode
[   68.482770][ T5972] bridge_slave_0: left promiscuous mode
[   68.486252][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.226645][ T5994] Zero length message leads to an empty skb
[   69.256897][ T5994] raw_sendmsg: syz.1.27 forgot to set AF_INET. Fix it!
[   69.782557][ T6029] syz.1.41 (6029) used greatest stack depth: 19952 bytes left
[   69.875049][ T5862] Bluetooth: hci0: command tx timeout
[   69.924786][ T6033] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.932643][ T6033] =======================================================
[   69.932643][ T6033] WARNING: The mand mount option has been deprecated and
[   69.932643][ T6033]          and is ignored by this kernel. Remove the mand
[   69.932643][ T6033]          option from the mount to silence this warning.
[   69.932643][ T6033] =======================================================
[   69.961528][ T5862] Bluetooth: hci2: command tx timeout
[   69.964465][ T5862] Bluetooth: hci1: command tx timeout
[   70.601328][ T6036] netlink: 'syz.0.43': attribute type 1 has an invalid length.
[   70.605177][ T6038] netlink: 'syz.0.43': attribute type 13 has an invalid length.
[   70.608424][ T6038] netlink: 160 bytes leftover after parsing attributes in process `syz.0.43'.
[   70.621292][ T6038] erspan0: refused to change device tx_queue_len
[   70.628287][ T6038] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   70.865675][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'.
[   71.066452][ T6056] syzkaller0: entered promiscuous mode
[   71.068539][ T6056] syzkaller0: entered allmulticast mode
[   71.182850][ T6071] netlink: 68 bytes leftover after parsing attributes in process `syz.2.54'.
[   71.189787][ T6074] netlink: 'syz.2.54': attribute type 10 has an invalid length.
[   71.307080][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.309409][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.838910][ T6083] netlink: 'syz.1.58': attribute type 39 has an invalid length.
[   71.962218][ T5855] Bluetooth: hci0: command tx timeout
[   72.022253][ T5855] Bluetooth: hci1: command tx timeout
[   72.024534][ T5855] Bluetooth: hci2: command tx timeout
[   72.174590][ T6098] netlink: 'syz.0.64': attribute type 11 has an invalid length.
[   72.177606][ T6098] netlink: 176 bytes leftover after parsing attributes in process `syz.0.64'.
[   72.322035][ T6096] : entered promiscuous mode
[   72.425104][ T6101] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.66'.
[   72.433678][ T6103] netlink: 'syz.0.65': attribute type 22 has an invalid length.
[   72.438435][ T6103] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.65'.
[   72.443639][ T6103] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &!=@Vgc!\㻚	΁
[   72.474870][ T6101] netlink: 'syz.2.66': attribute type 4 has an invalid length.
[   72.759222][ T6114] netlink: 'syz.0.70': attribute type 15 has an invalid length.
[   72.786082][ T6110] netlink: 'syz.2.66': attribute type 10 has an invalid length.
[   72.798869][ T6114] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.70'.
[   72.803385][ T6114] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   72.913834][ T6110] team0: Port device dummy0 added
[   73.005412][ T6110] syz.2.66 (6110) used greatest stack depth: 17640 bytes left
[   73.040962][ T6123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.74'.
[   73.044685][ T6123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.74'.
[   73.048114][ T6123] netlink: 32 bytes leftover after parsing attributes in process `syz.0.74'.
[   73.247327][ T6130] delete_channel: no stack
[   73.466704][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'.
[   74.539095][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'.
[   74.550139][ T6168] : entered promiscuous mode
[   74.892661][ T6187] validate_nla: 1 callbacks suppressed
[   74.892679][ T6187] netlink: 'syz.2.98': attribute type 5 has an invalid length.
[   75.145871][ T6200] IPv6: NLM_F_CREATE should be specified when creating new route
[   75.375262][ T6213] netlink: 56 bytes leftover after parsing attributes in process `syz.2.107'.
[   75.884475][ T6222] syz.1.110 uses obsolete (PF_INET,SOCK_PACKET)
[   76.393174][ T6242] netlink: 'syz.2.117': attribute type 8 has an invalid length.
[   76.517444][ T6251] netlink: 'syz.2.119': attribute type 1 has an invalid length.
[   76.713255][ T6257] warning: `syz.1.122' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.765739][ T5862] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[   77.114589][ T6264] netlink: 'syz.1.125': attribute type 8 has an invalid length.
[   77.179218][ T6266] netlink: 'syz.0.126': attribute type 21 has an invalid length.
[   77.182855][ T6266] __nla_validate_parse: 2 callbacks suppressed
[   77.182870][ T6266] netlink: 168 bytes leftover after parsing attributes in process `syz.0.126'.
[   77.327532][ T6270] openvswitch: netlink: Tunnel attr 72 out of range max 16
[   77.396908][ T6274] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.130'.
[   77.464880][ T6279] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.131'.
[   77.718211][ T6288] netlink: 'syz.2.134': attribute type 8 has an invalid length.
[   78.145346][   T24] cfg80211: failed to load regulatory.db
[   78.200868][ T6304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.139'.
[   78.296349][ T6311] : entered promiscuous mode
[   78.725331][ T6315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.141'.
[   78.729407][ T6315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.141'.
[   79.073224][ T6322] netlink: 'syz.1.143': attribute type 2 has an invalid length.
[   79.377469][ T6337] netlink: 'syz.2.150': attribute type 7 has an invalid length.
[   79.397784][ T6339] syzkaller0: entered promiscuous mode
[   79.401365][ T6339] syzkaller0: entered allmulticast mode
[   79.709990][ T6365] netlink: 'syz.0.160': attribute type 8 has an invalid length.
[   79.729754][ T6360] netlink: 'syz.2.158': attribute type 1 has an invalid length.
[   80.005260][ T6378] xt_socket: unknown flags 0x40
[   80.151922][ T6385] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   81.421435][ T6412] netlink: 84 bytes leftover after parsing attributes in process `syz.1.176'.
[   83.041516][ T6435] netlink: 52 bytes leftover after parsing attributes in process `syz.1.184'.
[   83.054197][ T6435] netlink: 124 bytes leftover after parsing attributes in process `syz.1.184'.
[   84.480848][ T6482] netlink: 'syz.2.198': attribute type 1 has an invalid length.
[   85.402929][ T6492] netlink: 830 bytes leftover after parsing attributes in process `syz.2.200'.
[   85.822291][   T12] tipc: Subscription rejected, illegal request
[   86.267159][ T6527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'.
[   87.070483][ T6551] dummy0: mtu less than device minimum
[   89.792091][ T6594] netlink: 168 bytes leftover after parsing attributes in process `syz.1.236'.
[   90.924005][ T6637] vxcan1: entered allmulticast mode
[   91.015556][ T6644] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.251'.
[   91.574939][ T6669] netlink: 'syz.0.260': attribute type 10 has an invalid length.
[   91.578263][ T6669] netlink: 40 bytes leftover after parsing attributes in process `syz.0.260'.
[   92.392477][ T6680] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   92.438746][ T6687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.264'.
[   93.019989][ T6714] netlink: 277 bytes leftover after parsing attributes in process `syz.1.275'.
[   93.026613][ T6719] netlink: 'syz.2.278': attribute type 12 has an invalid length.
[   93.029687][ T6719] netlink: 132 bytes leftover after parsing attributes in process `syz.2.278'.
[   93.185668][ T6722] delete_channel: no stack
[   93.295299][ T6731] netlink: 188 bytes leftover after parsing attributes in process `syz.2.282'.
[   93.477135][ T6741] netlink: 60 bytes leftover after parsing attributes in process `syz.2.285'.
[   93.483099][ T6741] netlink: 60 bytes leftover after parsing attributes in process `syz.2.285'.
[   93.487800][ T6741] netlink: 60 bytes leftover after parsing attributes in process `syz.2.285'.
[   94.788718][ T6779] netlink: 'syz.1.298': attribute type 13 has an invalid length.
[   94.793476][ T6779] netlink: 'syz.1.298': attribute type 17 has an invalid length.
[   94.882409][ T6779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.265886][ T6805] netlink: 'syz.1.307': attribute type 25 has an invalid length.
[   96.978084][ T6826] nft_compat: unsupported protocol 5
[   97.050901][ T6830] __nla_validate_parse: 1 callbacks suppressed
[   97.050916][ T6830] netlink: 220 bytes leftover after parsing attributes in process `syz.0.311'.
[   97.788620][ T6851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.318'.
[   97.867194][ T6855] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.320'.
[   98.951236][ T6900] netlink: 'syz.1.335': attribute type 1 has an invalid length.
[   99.675174][ T6914] netlink: 88 bytes leftover after parsing attributes in process `syz.2.340'.
[   99.688077][ T6914] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   99.691076][ T6914] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   99.729124][ T6924] netlink: 14 bytes leftover after parsing attributes in process `syz.0.344'.
[   99.874105][ T6927] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.345'.
[   99.973549][ T6928] netlink: 'syz.0.344': attribute type 10 has an invalid length.
[  100.005529][ T6928] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.032608][ T6928] team0: Port device bond0 added
[  101.131074][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'.
[  101.775477][ T6946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.350'.
[  102.179159][ T6973] TCP: TCP_TX_DELAY enabled
[  102.207137][ T6976] wg2: entered promiscuous mode
[  102.208817][ T6976] wg2: entered allmulticast mode
[  102.455304][ T6988] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.363'.
[  102.754270][ T6997] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  102.759005][ T6997] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  102.826662][ T6966] delete_channel: no stack
[  103.090027][ T5862] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6
[  103.580559][ T7022] netlink: 360 bytes leftover after parsing attributes in process `syz.0.376'.
[  103.816480][ T7033] netlink: 'syz.1.380': attribute type 22 has an invalid length.
[  103.827563][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'.
[  103.909094][ T7034] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.380'.
[  103.915893][ T7033] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.380'.
[  103.927412][ T7034] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.380'.
[  104.245632][ T7045] netlink: 'syz.0.384': attribute type 10 has an invalid length.
[  104.249674][ T7045] netlink: 'syz.0.384': attribute type 19 has an invalid length.
[  104.259569][ T7045] netlink: 156 bytes leftover after parsing attributes in process `syz.0.384'.
[  104.719133][ T7062] netlink: 144 bytes leftover after parsing attributes in process `syz.0.391'.
[  104.813360][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.393'.
[  106.066054][ T5862] Bluetooth: hci0: ISO packet too small
[  106.249565][ T7128] syzkaller0: entered promiscuous mode
[  106.252365][ T7128] syzkaller0: entered allmulticast mode
[  106.383340][ T7132] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.414'.
[  107.493607][ T7146] syzkaller0: entered promiscuous mode
[  107.496151][ T7146] syzkaller0: entered allmulticast mode
[  108.497614][ T7161] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.425'.
[  108.570763][ T7165] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.428'.
[  108.621143][ T7178] netlink: 'syz.1.430': attribute type 21 has an invalid length.
[  108.623993][ T7178] netlink: 132 bytes leftover after parsing attributes in process `syz.1.430'.
[  108.760566][ T7190] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.433'.
[  108.765240][ T7186] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.433'.
[  108.803260][ T7190] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.433'.
[  108.972405][ T7186] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.433'.
[  109.377804][ T7198] netlink: 60 bytes leftover after parsing attributes in process `syz.2.434'.
[  109.389751][ T7199] netlink: 60 bytes leftover after parsing attributes in process `syz.2.434'.
[  110.173797][ T7218] netlink: 'syz.2.442': attribute type 10 has an invalid length.
[  110.236885][ T7218] team0: Device hsr_slave_0 failed to register rx_handler
[  110.251021][ T7216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'.
[  110.370354][ T7224] bond0: (slave ): Enslaving as an active interface with an up link
[  110.829574][ T7248] netlink: 'syz.0.453': attribute type 11 has an invalid length.
[  110.830038][ T7249] netlink: 'syz.0.453': attribute type 11 has an invalid length.
[  112.029121][ T7294] netlink: 'syz.1.468': attribute type 29 has an invalid length.
[  112.041844][ T7298] netlink: 'syz.1.468': attribute type 29 has an invalid length.
[  112.055388][ T7294] netlink: 'syz.1.468': attribute type 29 has an invalid length.
[  112.072442][ T7294] netlink: 'syz.1.468': attribute type 29 has an invalid length.
[  114.077637][ T7362] __nla_validate_parse: 2 callbacks suppressed
[  114.077654][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'.
[  114.169365][ T7363] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  114.252828][ T7363] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  114.475377][ T7376] netlink: 830 bytes leftover after parsing attributes in process `syz.2.495'.
[  115.067162][ T7407] netlink: 'syz.2.507': attribute type 1 has an invalid length.
[  115.070054][ T7407] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.507'.
[  115.083658][ T7409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.508'.
[  115.096127][ T7409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.508'.
[  115.103208][ T7409] netlink: 'syz.0.508': attribute type 39 has an invalid length.
[  115.113365][ T7411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.509'.
[  115.162969][ T7422] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.512'.
[  115.209947][ T7424] netlink: 328 bytes leftover after parsing attributes in process `syz.1.513'.
[  115.918778][ T7447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  116.048080][ T7449] netlink: 822 bytes leftover after parsing attributes in process `syz.1.520'.
[  116.147214][ T7451] bond0: (slave ): Enslaving as an active interface with an up link
[  116.539498][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'.
[  116.757915][ T7491] netlink: 'syz.1.534': attribute type 46 has an invalid length.
[  117.753002][ T7507] netlink: 'syz.1.540': attribute type 10 has an invalid length.
[  117.765596][ T7507] batman_adv: batadv0: Adding interface: virt_wifi0
[  117.768545][ T7507] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.779569][ T7507] batman_adv: batadv0: Interface activated: virt_wifi0
[  117.975399][ T7525] netlink: 'syz.2.544': attribute type 1 has an invalid length.
[  117.980036][ T7525] netlink: 'syz.2.544': attribute type 2 has an invalid length.
[  118.874150][ T7537] netlink: 'syz.2.548': attribute type 4 has an invalid length.
[  118.923762][ T5862] Bluetooth: hci1: ISO packet too small
[  119.033432][ T7554] openvswitch: netlink: Geneve opt len 95 is not a multiple of 4.
[  119.127417][ T7566] __nla_validate_parse: 6 callbacks suppressed
[  119.127439][ T7566] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.560'.
[  119.189777][ T5862] Bluetooth: hci0: ISO packet too small
[  119.340976][ T7589] netlink: 72 bytes leftover after parsing attributes in process `syz.2.567'.
[  119.478229][ T7602] netlink: 'syz.1.568': attribute type 39 has an invalid length.
[  119.548269][ T7607] netlink: 60 bytes leftover after parsing attributes in process `syz.2.573'.
[  119.560187][ T7607] netlink: 60 bytes leftover after parsing attributes in process `syz.2.573'.
[  119.819375][ T5862] Bluetooth: hci1: unexpected event 0x16 length: 151 > 6
[  120.599933][ T7628] netlink: 'syz.1.582': attribute type 2 has an invalid length.
[  120.609561][ T7628] netlink: 'syz.1.582': attribute type 8 has an invalid length.
[  120.613173][ T7628] netlink: 132 bytes leftover after parsing attributes in process `syz.1.582'.
[  120.734523][ T7647] netlink: 'syz.0.589': attribute type 21 has an invalid length.
[  120.737126][ T7647] netlink: 'syz.0.589': attribute type 1 has an invalid length.
[  121.048613][ T5862] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6
[  121.196250][ T7670] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.598'.
[  121.423355][ T7690] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.606'.
[  122.208336][ T7712] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.614'.
[  122.361628][ T7716] xt_limit: Overflow, try lower: 271964/0
[  122.615516][ T7721] netlink: 48 bytes leftover after parsing attributes in process `syz.0.617'.
[  123.096395][ T7754] netlink: 830 bytes leftover after parsing attributes in process `syz.1.630'.
[  123.372697][ T7770] netlink: 'syz.2.636': attribute type 1 has an invalid length.
[  123.529159][ T7778] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.197466][ T7781] __nla_validate_parse: 4 callbacks suppressed
[  124.197477][ T7781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.638'.
[  124.269344][ T7781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.638'.
[  124.276193][ T7789] veth1_macvtap: left promiscuous mode
[  124.278777][ T7789] macsec0: entered allmulticast mode
[  124.289373][ T7787] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.640'.
[  124.298064][ T7789] veth1_macvtap: entered promiscuous mode
[  124.299998][ T7789] veth1_macvtap: entered allmulticast mode
[  124.311069][ T7789] macsec0: entered promiscuous mode
[  124.777278][ T7808] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  124.882444][ T7814] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.648'.
[  124.919633][ T7816] bond0: (slave ): Error: Device is in use and cannot be enslaved
[  124.963694][ T7821] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.652'.
[  125.509849][ T7837] netlink: 'syz.0.653': attribute type 12 has an invalid length.
[  125.517573][ T7837] netlink: 132 bytes leftover after parsing attributes in process `syz.0.653'.
[  125.556846][ T7839] bond0: (slave ): Error: Device is in use and cannot be enslaved
[  125.614569][ T7841] netlink: 'syz.2.660': attribute type 21 has an invalid length.
[  125.618034][ T7841] netlink: 168 bytes leftover after parsing attributes in process `syz.2.660'.
[  125.625298][ T7841] netlink: 'syz.2.660': attribute type 10 has an invalid length.
[  125.630404][ T7841] netlink: 152 bytes leftover after parsing attributes in process `syz.2.660'.
[  125.644708][ T7841] team0: Port device dummy0 removed
[  125.647488][ T7841] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  126.395188][ T7879] netlink: 'syz.2.676': attribute type 1 has an invalid length.
[  126.812727][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  127.015234][ T7920] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.688'.
[  127.018956][ T7917] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.688'.
[  127.061363][ T7919] netlink: 'syz.1.689': attribute type 1 has an invalid length.
[  128.203229][ T5862] Bluetooth: hci1: Malformed HCI Event
[  128.691295][ T5862] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6
[  129.139659][ T5862] Bluetooth: hci1: Malformed HCI Event
[  129.567146][ T8013] __nla_validate_parse: 4 callbacks suppressed
[  129.567159][ T8013] netlink: 60 bytes leftover after parsing attributes in process `syz.2.718'.
[  129.580972][ T8011] netlink: 60 bytes leftover after parsing attributes in process `syz.2.718'.
[  129.584835][ T8011] netlink: 60 bytes leftover after parsing attributes in process `syz.2.718'.
[  129.815677][ T8015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.719'.
[  129.900109][ T8015] netlink: 'syz.0.719': attribute type 21 has an invalid length.
[  129.908987][ T8015] netlink: 'syz.0.719': attribute type 4 has an invalid length.
[  130.360648][ T8045] C: renamed from team_slave_0 (while UP)
[  130.371612][ T8045] netlink: 'syz.0.728': attribute type 8 has an invalid length.
[  130.374790][ T8045] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  130.471041][ T8052] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.731'.
[  130.563477][ T8063] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.733'.
[  130.820562][ T8078] openvswitch: netlink: IPv4 tunnel dst address is zero
[  131.209949][ T8078] netlink: 48 bytes leftover after parsing attributes in process `syz.0.739'.
[  131.309428][ T8081] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.740'.
[  132.187314][ T8110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'.
[  132.259072][ T8110] netlink: 40 bytes leftover after parsing attributes in process `syz.0.750'.
[  132.278117][ T8110] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.322993][ T8110] bridge_slave_0 (unregistering): left allmulticast mode
[  132.328286][ T8110] bridge_slave_0 (unregistering): left promiscuous mode
[  132.337653][ T8110] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.743880][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.746196][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.108230][ T8152] openvswitch: netlink: IP tunnel TTL not specified.
[  133.668015][ T8198] netlink: 'syz.0.778': attribute type 3 has an invalid length.
[  133.673532][ T8198] netlink: 'syz.0.778': attribute type 1 has an invalid length.
[  133.676420][ T8198] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  133.746333][ T8202] netlink: 'syz.0.778': attribute type 3 has an invalid length.
[  133.970164][ T8215] netlink: 'syz.2.783': attribute type 10 has an invalid length.
[  134.080184][ T8215] team0 (unregistering): Port device team_slave_0 removed
[  134.089793][ T8215] team0 (unregistering): Port device team_slave_1 removed
[  134.091519][ T8223] netlink: 'syz.1.786': attribute type 10 has an invalid length.
[  134.099758][ T5862] Bluetooth: hci2: ISO packet too small
[  134.385807][ T8234] netlink: 'syz.2.791': attribute type 2 has an invalid length.
[  134.386011][ T8237] netlink: 'syz.2.791': attribute type 2 has an invalid length.
[  134.621805][ T8242] __nla_validate_parse: 11 callbacks suppressed
[  134.621816][ T8242] netlink: 44 bytes leftover after parsing attributes in process `syz.1.793'.
[  134.628725][ T8242] netlink: 43 bytes leftover after parsing attributes in process `syz.1.793'.
[  134.632448][ T8242] netlink: 43 bytes leftover after parsing attributes in process `syz.1.793'.
[  134.845045][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'.
[  135.434221][ T8261] netlink: 56 bytes leftover after parsing attributes in process `syz.0.799'.
[  135.439980][ T8261] validate_nla: 1 callbacks suppressed
[  135.439990][ T8261] netlink: 'syz.0.799': attribute type 2 has an invalid length.
[  135.447502][ T8261] netlink: 'syz.0.799': attribute type 3 has an invalid length.
[  135.451066][ T8261] netlink: 132 bytes leftover after parsing attributes in process `syz.0.799'.
[  135.564417][ T8264] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.800'.
[  135.618611][ T8265] syzkaller0: entered promiscuous mode
[  135.621161][ T8265] syzkaller0: entered allmulticast mode
[  136.578085][ T8299] netlink: 36 bytes leftover after parsing attributes in process `syz.2.812'.
[  136.998311][ T8296] netlink: 56 bytes leftover after parsing attributes in process `syz.2.812'.
[  137.006513][ T8299] bond0: (slave ): Error: Device is in use and cannot be enslaved
[  137.021751][ T8297] netlink: 56 bytes leftover after parsing attributes in process `syz.2.812'.
[  137.122282][ T8301] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  137.643220][ T8332] netlink: 'syz.1.822': attribute type 1 has an invalid length.
[  139.634492][ T8385] __nla_validate_parse: 8 callbacks suppressed
[  139.634509][ T8385] netlink: 84 bytes leftover after parsing attributes in process `syz.1.835'.
[  139.783844][ T8391] netlink: 'syz.1.836': attribute type 1 has an invalid length.
[  139.787257][ T8391] netlink: 'syz.1.836': attribute type 4 has an invalid length.
[  139.791880][ T8390] netlink: 'syz.1.836': attribute type 1 has an invalid length.
[  139.795120][ T8390] netlink: 'syz.1.836': attribute type 4 has an invalid length.
[  139.798428][ T8390] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.836'.
[  139.804652][ T8391] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.836'.
[  140.237590][ T5862] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6
[  140.585111][ T8416] netlink: 'syz.2.846': attribute type 10 has an invalid length.
[  140.591923][ T8416] netlink: 2 bytes leftover after parsing attributes in process `syz.2.846'.
[  140.596505][ T8416] bond0: entered promiscuous mode
[  140.598773][ T8416] bond_slave_0: entered promiscuous mode
[  140.602949][ T8416] bond_slave_1: entered promiscuous mode
[  140.609731][ T8418] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.847'.
[  140.617173][ T8419] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.847'.
[  140.780443][ T8421] netlink: 'syz.1.848': attribute type 7 has an invalid length.
[  140.792554][ T8421] openvswitch: netlink: IP tunnel dst address not specified
[  141.119022][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.850'.
[  141.123767][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'.
[  142.672737][ T8404] syz.0.841: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  142.678583][ T8404] CPU: 1 UID: 0 PID: 8404 Comm: syz.0.841 Not tainted syzkaller #0 PREEMPT(full) 
[  142.678594][ T8404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  142.678599][ T8404] Call Trace:
[  142.678603][ T8404]  <TASK>
[  142.678607][ T8404]  dump_stack_lvl+0x189/0x250
[  142.678621][ T8404]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.678629][ T8404]  ? __pfx__printk+0x10/0x10
[  142.678639][ T8404]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  142.678648][ T8404]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  142.678656][ T8404]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  142.678664][ T8404]  warn_alloc+0x214/0x310
[  142.678675][ T8404]  ? __pfx_warn_alloc+0x10/0x10
[  142.678685][ T8404]  ? __get_vm_area_node+0x28f/0x300
[  142.678692][ T8404]  ? hash_netportnet_create+0x354/0xf90
[  142.678704][ T8404]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  142.678721][ T8404]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  142.678728][ T8404]  ? hash_netportnet_create+0x354/0xf90
[  142.678737][ T8404]  ? __get_vm_area_node+0x28f/0x300
[  142.678743][ T8404]  ? hash_netportnet_create+0x354/0xf90
[  142.678752][ T8404]  __vmalloc_node_range_noprof+0x56a/0x12f0
[  142.678758][ T8404]  ? hash_netportnet_create+0x354/0xf90
[  142.678777][ T8404]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  142.678786][ T8404]  ? rcu_is_watching+0x15/0xb0
[  142.678794][ T8404]  ? hash_netportnet_create+0x354/0xf90
[  142.678801][ T8404]  ? hash_netportnet_create+0x354/0xf90
[  142.678809][ T8404]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  142.678816][ T8404]  ? hash_netportnet_create+0x354/0xf90
[  142.678824][ T8404]  ? hash_netportnet_create+0x2fa/0xf90
[  142.678834][ T8404]  hash_netportnet_create+0x354/0xf90
[  142.678845][ T8404]  ? __nla_parse+0x40/0x60
[  142.678854][ T8404]  ? __pfx_hash_netportnet_create+0x10/0x10
[  142.678863][ T8404]  ip_set_create+0xa97/0x1940
[  142.678872][ T8404]  ? ip_set_create+0x4a2/0x1940
[  142.678888][ T8404]  ? __pfx_ip_set_create+0x10/0x10
[  142.678939][ T8404]  nfnetlink_rcv_msg+0xb4d/0x1130
[  142.678953][ T8404]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  142.678976][ T8404]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  142.678987][ T8404]  ? kasan_save_free_info+0x46/0x50
[  142.679029][ T8404]  netlink_rcv_skb+0x208/0x470
[  142.679043][ T8404]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  142.679054][ T8404]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  142.679073][ T8404]  ? bpf_lsm_capable+0x9/0x20
[  142.679082][ T8404]  ? security_capable+0x7e/0x2e0
[  142.679099][ T8404]  nfnetlink_rcv+0x26a/0x2520
[  142.679119][ T8404]  ? __dev_queue_xmit+0x1d79/0x3b50
[  142.679135][ T8404]  ? __dev_queue_xmit+0x27b/0x3b50
[  142.679151][ T8404]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  142.679163][ T8404]  ? __pfx___dev_queue_xmit+0x10/0x10
[  142.679182][ T8404]  ? ref_tracker_free+0x63a/0x7d0
[  142.679195][ T8404]  ? __asan_memcpy+0x40/0x70
[  142.679208][ T8404]  ? __pfx_ref_tracker_free+0x10/0x10
[  142.679218][ T8404]  ? __skb_clone+0x63/0x7a0
[  142.679236][ T8404]  ? __skb_clone+0x483/0x7a0
[  142.679255][ T8404]  ? skb_clone+0x246/0x3a0
[  142.679266][ T8404]  ? __netlink_deliver_tap+0x807/0x850
[  142.679278][ T8404]  ? netlink_deliver_tap+0x2e/0x1b0
[  142.679295][ T8404]  ? netlink_deliver_tap+0x2e/0x1b0
[  142.679309][ T8404]  netlink_unicast+0x82f/0x9e0
[  142.679328][ T8404]  ? __pfx_netlink_unicast+0x10/0x10
[  142.679341][ T8404]  ? netlink_sendmsg+0x642/0xb30
[  142.679353][ T8404]  ? skb_put+0x11b/0x210
[  142.679369][ T8404]  netlink_sendmsg+0x805/0xb30
[  142.679390][ T8404]  ? __pfx_netlink_sendmsg+0x10/0x10
[  142.679403][ T8404]  ? aa_sock_msg_perm+0xf1/0x1d0
[  142.679417][ T8404]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  142.679431][ T8404]  ? __pfx_netlink_sendmsg+0x10/0x10
[  142.679446][ T8404]  __sock_sendmsg+0x21c/0x270
[  142.679461][ T8404]  ____sys_sendmsg+0x505/0x830
[  142.679481][ T8404]  ? __pfx_____sys_sendmsg+0x10/0x10
[  142.679504][ T8404]  ? import_iovec+0x74/0xa0
[  142.679523][ T8404]  ___sys_sendmsg+0x21f/0x2a0
[  142.679540][ T8404]  ? __pfx____sys_sendmsg+0x10/0x10
[  142.679580][ T8404]  ? __fget_files+0x2a/0x420
[  142.679593][ T8404]  ? __fget_files+0x3a0/0x420
[  142.679613][ T8404]  __x64_sys_sendmsg+0x19b/0x260
[  142.679632][ T8404]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  142.679656][ T8404]  ? rcu_is_watching+0x15/0xb0
[  142.679672][ T8404]  ? do_syscall_64+0xbe/0x3b0
[  142.679691][ T8404]  do_syscall_64+0xfa/0x3b0
[  142.679704][ T8404]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.679718][ T8404]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.679729][ T8404]  ? exc_page_fault+0x9f/0xf0
[  142.679744][ T8404]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.679755][ T8404] RIP: 0033:0x7f1deaf8ec29
[  142.679768][ T8404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.679777][ T8404] RSP: 002b:00007f1debdac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  142.679790][ T8404] RAX: ffffffffffffffda RBX: 00007f1deb1d5fa0 RCX: 00007f1deaf8ec29
[  142.679798][ T8404] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  142.679805][ T8404] RBP: 00007f1deb011e41 R08: 0000000000000000 R09: 0000000000000000
[  142.679812][ T8404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  142.679819][ T8404] R13: 00007f1deb1d6038 R14: 00007f1deb1d5fa0 R15: 00007ffc0821ebf8
[  142.679839][ T8404]  </TASK>
[  142.679844][ T8404] Mem-Info:
[  142.882220][ T8404] active_anon:12456 inactive_anon:0 isolated_anon:0
[  142.882220][ T8404]  active_file:12771 inactive_file:38273 isolated_file:0
[  142.882220][ T8404]  unevictable:1768 dirty:19 writeback:0
[  142.882220][ T8404]  slab_reclaimable:10286 slab_unreclaimable:69260
[  142.882220][ T8404]  mapped:18067 shmem:2443 pagetables:970
[  142.882220][ T8404]  sec_pagetables:0 bounce:0
[  142.882220][ T8404]  kernel_misc_reclaimable:0
[  142.882220][ T8404]  free:224400 free_pcp:25123 free_cma:0
[  142.901063][ T8404] Node 0 active_anon:18024kB inactive_anon:0kB active_file:23708kB inactive_file:134376kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39060kB dirty:32kB writeback:0kB shmem:4908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5968kB pagetables:2184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  142.913951][ T8404] Node 1 active_anon:31800kB inactive_anon:0kB active_file:27376kB inactive_file:18716kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33208kB dirty:44kB writeback:0kB shmem:4864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5328kB pagetables:1696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  142.926380][ T8404] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  142.936608][ T8404] lowmem_reserve[]: 0 811 811 811 811
[  142.938480][ T8404] Node 0 DMA32 free:164656kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18024kB inactive_anon:0kB active_file:23708kB inactive_file:134376kB unevictable:3536kB writepending:32kB present:1556484kB managed:830840kB mlocked:0kB bounce:0kB free_pcp:53352kB local_pcp:18480kB free_cma:0kB
[  142.950020][ T8404] lowmem_reserve[]: 0 0 0 0 0
[  142.951818][ T8404] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  142.962055][ T8404] lowmem_reserve[]: 0 0 854 854 854
[  142.963846][ T8404] Node 1 Normal free:258924kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31800kB inactive_anon:0kB active_file:27376kB inactive_file:18716kB unevictable:3536kB writepending:44kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:47360kB local_pcp:31292kB free_cma:0kB
[  142.974841][ T8404] lowmem_reserve[]: 0 0 0 0 0
[  142.976589][ T8404] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  142.981341][ T8404] Node 0 DMA32: 1248*4kB (UM) 274*8kB (UME) 276*16kB (UM) 262*32kB (UME) 228*64kB (UME) 64*128kB (ME) 16*256kB (M) 16*512kB (UME) 3*1024kB (UME) 10*2048kB (UM) 21*4096kB (UM) = 164624kB
[  142.987934][ T8404] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  142.993855][ T8404] Node 1 Normal: 245*4kB (M) 177*8kB (UME) 139*16kB (UME) 97*32kB (UME) 89*64kB (UME) 46*128kB (ME) 22*256kB (UME) 19*512kB (UME) 9*1024kB (UME) 7*2048kB (ME) 49*4096kB (UM) = 258924kB
[  143.000863][ T8404] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  143.004155][ T8404] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  143.007542][ T8404] 53503 total pagecache pages
[  143.009504][ T8404] 16 pages in swap cache
[  143.011153][ T8404] Free swap  = 124772kB
[  143.012645][ T8404] Total swap = 124996kB
[  143.014247][ T8404] 786301 pages RAM
[  143.015765][ T8404] 0 pages HighMem/MovableOnly
[  143.017737][ T8404] 241359 pages reserved
[  143.019492][ T8404] 0 pages cma reserved
[  143.214022][ T8404] syz.0.841 (8404) used greatest stack depth: 15376 bytes left
[  145.380420][   T95] page_pool_release_retry() stalled pool shutdown: id 17, 1 inflight 60 sec
[  146.359364][   T33] audit: type=1107 audit(1759351567.198:2): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='mxr^Fa{E#OH2=/OwS`epKxahyòe=XJa|uHά$>xP;V_0[:{*T!f9D+fHn!ˀ`F2UIMG'
[  146.663287][ T8481] xt_HMARK: spi-set and port-set can't be combined
[  146.666899][ T8481] netlink: 388 bytes leftover after parsing attributes in process `syz.0.868'.
[  147.018101][ T8496] netlink: 'syz.1.872': attribute type 21 has an invalid length.
[  147.023317][ T8496] netlink: 164 bytes leftover after parsing attributes in process `syz.1.872'.
[  147.397603][ T8508] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.876'.
[  147.608149][ T8522] netlink: 'syz.1.879': attribute type 1 has an invalid length.
[  147.611715][ T8522] netlink: 'syz.1.879': attribute type 2 has an invalid length.
[  148.376691][ T8535] netlink: 16 bytes leftover after parsing attributes in process `syz.1.884'.
[  148.389470][ T8535] netlink: 'syz.1.884': attribute type 39 has an invalid length.
[  149.024771][ T8550] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.890'.
[  149.065882][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'.
[  149.290169][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.895'.
[  149.297110][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.895'.
[  149.331478][ T8573] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.897'.
[  149.439629][ T8575] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.898'.
[  149.606752][ T8584] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.162427][ T8611] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  150.178518][ T8611] syzkaller0: entered promiscuous mode
[  150.182243][ T8611] syzkaller0: entered allmulticast mode
[  150.259215][ T5862] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  150.854514][ T8631] netlink: 'syz.1.917': attribute type 21 has an invalid length.
[  150.854620][ T5862] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[  151.737665][ T8637] netlink: 'syz.0.919': attribute type 1 has an invalid length.
[  151.745319][ T8637] __nla_validate_parse: 3 callbacks suppressed
[  151.745397][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.919'.
[  151.756585][ T5862] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  151.822834][ T8637] netlink: 72 bytes leftover after parsing attributes in process `syz.0.919'.
[  151.925343][ T8646] netlink: 176 bytes leftover after parsing attributes in process `syz.2.921'.
[  152.450949][ T8674] netlink: 168 bytes leftover after parsing attributes in process `syz.2.930'.
[  153.474528][ T8697] netlink: 36 bytes leftover after parsing attributes in process `syz.2.936'.
[  154.721965][ T8752] netlink: 4272 bytes leftover after parsing attributes in process `syz.0.956'.
[  155.028700][ T8771] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.964'.
[  155.334555][ T8782] netlink: 188 bytes leftover after parsing attributes in process `syz.2.966'.
[  155.485319][ T8783] netlink: 798 bytes leftover after parsing attributes in process `syz.1.965'.
[  156.459073][ T8799] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.968'.
[  157.539694][ T8817] __nla_validate_parse: 1 callbacks suppressed
[  157.539711][ T8817] netlink: 5 bytes leftover after parsing attributes in process `syz.2.976'.
[  157.646903][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'.
[  157.775574][ T8825] openvswitch: netlink: Message has 4 unknown bytes.
[  157.798812][ T8828] netlink: 11903 bytes leftover after parsing attributes in process `syz.1.978'.
[  158.170415][ T8831] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.981'.
[  158.201832][ T8832] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.980'.
[  158.511710][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.987'.
[  158.612809][ T8863] netlink: 56 bytes leftover after parsing attributes in process `syz.0.990'.
[  159.077796][ T8888] netlink: 324 bytes leftover after parsing attributes in process `syz.0.997'.
[  159.547596][ T8934] netlink: 'syz.0.1013': attribute type 11 has an invalid length.
[  159.668087][ T5862] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  160.074377][ T8953] netlink: 'syz.0.1019': attribute type 10 has an invalid length.
[  160.075762][ T8954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1019'.
[  160.081586][ T8953] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  160.088338][ T8953] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  160.093286][ T8953] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  160.122952][ T8958] netlink: 'syz.0.1020': attribute type 21 has an invalid length.
[  160.126195][ T8958] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1020'.
[  161.563440][ T9015] netlink: 'syz.0.1035': attribute type 10 has an invalid length.
[  161.619001][ T9015] macvlan0: entered allmulticast mode
[  161.713849][ T9015] veth1_vlan: entered allmulticast mode
[  161.758826][ T9015] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  162.175572][ T9034] netlink: 'syz.2.1041': attribute type 1 has an invalid length.
[  162.423675][ T9063] tQ6\bY4: renamed from lo (while UP)
[  162.436413][ T9065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.698362][ T9083] __nla_validate_parse: 2 callbacks suppressed
[  162.698377][ T9083] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1057'.
[  162.706644][ T9083] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1057'.
[  162.919323][ T5862] Bluetooth: hci1: ISO packet too small
[  163.188631][ T9106] netlink: 'syz.1.1067': attribute type 2 has an invalid length.
[  164.072261][ T9134] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1076'.
[  164.158786][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'.
[  164.303144][ T9143] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.1078'.
[  164.489683][ T9157] netlink: 'syz.2.1085': attribute type 3 has an invalid length.
[  164.495618][ T9157] netlink: 'syz.2.1085': attribute type 1 has an invalid length.
[  164.500187][ T9157] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1085'.
[  269.640231][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  269.642611][    C1] rcu: 	0-...!: (1 GPs behind) idle=689c/1/0x4000000000000000 softirq=28660/28661 fqs=2
[  269.648348][    C1] rcu: 	(detected by 1, t=10506 jiffies, g=22397, q=134 ncpus=2)
[  269.651474][    C1] Sending NMI from CPU 1 to CPUs 0:
[  269.651543][    C0] NMI backtrace for cpu 0
[  269.651568][    C0] CPU: 0 UID: 0 PID: 9155 Comm: syz.1.1084 Not tainted syzkaller #0 PREEMPT(full) 
[  269.651581][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  269.651588][    C0] RIP: 0010:__kasan_check_byte+0xa/0x40
[  269.651606][    C0] Code: ff 48 ff c8 49 89 c4 e9 cf fe ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 41 56 53 48 89 f3 <49> 89 fe e8 5e 14 00 00 84 c0 75 16 be 01 00 00 00 4c 89 f7 31 d2
[  269.651615][    C0] RSP: 0018:ffffc900000077c8 EFLAGS: 00000002
[  269.651625][    C0] RAX: 0000000000000001 RBX: ffffffff8b7dabf7 RCX: 6de3728793d28600
[  269.651633][    C0] RDX: 0000000000000000 RSI: ffffffff8b7dabf7 RDI: ffff88804b027a98
[  269.651639][    C0] RBP: ffffffff81adabcb R08: 0000000000000001 R09: 0000000000000000
[  269.651646][    C0] R10: dffffc0000000000 R11: ffffed1009604f51 R12: 0000000000000000
[  269.651653][    C0] R13: ffff88804b027a98 R14: 0000000000000000 R15: 0000000000000001
[  269.651659][    C0] FS:  00007f23011cb6c0(0000) GS:ffff8880b8611000(0000) knlGS:0000000000000000
[  269.651668][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  269.651674][    C0] CR2: 000000110c3528f0 CR3: 0000000022426000 CR4: 00000000000006f0
[  269.651707][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  269.651714][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  269.651720][    C0] Call Trace:
[  269.651728][    C0]  <IRQ>
[  269.651735][    C0]  lock_acquire+0x8d/0x360
[  269.651756][    C0]  _raw_spin_lock_irqsave+0xa7/0xf0
[  269.651770][    C0]  ? hrtimer_try_to_cancel+0x22b/0x420
[  269.651781][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  269.651792][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  269.651803][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  269.651816][    C0]  hrtimer_try_to_cancel+0x22b/0x420
[  269.651828][    C0]  hrtimer_cancel+0x3b/0x50
[  269.651837][    C0]  cpu_clock_event_stop+0xd9/0x130
[  269.651850][    C0]  __perf_event_overflow+0x580/0xe40
[  269.651866][    C0]  ? __pfx___perf_event_overflow+0x10/0x10
[  269.651877][    C0]  ? __pfx_cpu_clock_event_update+0x10/0x10
[  269.651890][    C0]  perf_swevent_hrtimer+0x3c5/0x550
[  269.651903][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  269.651912][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  269.651931][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  269.651943][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  269.651955][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  269.651966][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  269.651974][    C0]  __hrtimer_run_queues+0x4e0/0xc60
[  269.651990][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  269.652003][    C0]  hrtimer_interrupt+0x45b/0xaa0
[  269.652022][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  269.652036][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  269.652049][    C0]  </IRQ>
[  269.652052][    C0]  <TASK>
[  269.652057][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  269.652068][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[  269.652081][    C0] Code: 74 05 e8 6b c0 49 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 23 65 12 f6 65 8b 05 6c 41 23 07 85 c0 74 40 48 c7 04 24 0e 36
[  269.652126][    C0] RSP: 0018:ffffc9000266faa0 EFLAGS: 00000206
[  269.652136][    C0] RAX: 6de3728793d28600 RBX: 0000000000000a02 RCX: 6de3728793d28600
[  269.652144][    C0] RDX: 0000000000000000 RSI: ffffffff8d9baf27 RDI: 0000000000000001
[  269.652150][    C0] RBP: ffffc9000266fb28 R08: ffffffff8fa3b537 R09: 1ffffffff1f476a6
[  269.652156][    C0] R10: dffffc0000000000 R11: fffffbfff1f476a7 R12: dffffc0000000000
[  269.652164][    C0] R13: 1ffff110096075be R14: ffff888025fc6050 R15: 1ffff920004cdf54
[  269.652177][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  269.652191][    C0]  try_to_wake_up+0x7b7/0x12b0
[  269.652208][    C0]  wake_up_q+0x85/0xd0
[  269.652219][    C0]  futex_wake+0x4a0/0x560
[  269.652236][    C0]  ? __pfx_futex_wake+0x10/0x10
[  269.652250][    C0]  ? ktime_get+0x3e/0x1f0
[  269.652263][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  269.652276][    C0]  do_futex+0x395/0x420
[  269.652290][    C0]  ? __pfx_do_futex+0x10/0x10
[  269.652302][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  269.652312][    C0]  ? sched_clock_cpu+0x74/0x430
[  269.652324][    C0]  __se_sys_futex+0x36f/0x400
[  269.652339][    C0]  ? __pfx___se_sys_futex+0x10/0x10
[  269.652353][    C0]  ? __x64_sys_futex+0x21/0xf0
[  269.652367][    C0]  do_syscall_64+0xfa/0x3b0
[  269.652380][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.652388][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  269.652401][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.652411][    C0] RIP: 0033:0x7f230038ec29
[  269.652421][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  269.652428][    C0] RSP: 002b:00007f23011cb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  269.652439][    C0] RAX: ffffffffffffffda RBX: 00007f23005d5fa8 RCX: 00007f230038ec29
[  269.652445][    C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f23005d5fac
[  269.652451][    C0] RBP: 00007f23005d5fa0 R08: 7fffffffffffffff R09: 0000000000000000
[  269.652459][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  269.652464][    C0] R13: 00007f23005d6038 R14: 00007ffdce3d5160 R15: 00007ffdce3d5248
[  269.652477][    C0]  </TASK>
[  269.652514][    C1] rcu: rcu_preempt kthread starved for 10495 jiffies! g22397 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  269.871886][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  269.876141][    C1] rcu: RCU grace-period kthread stack dump:
[  269.878679][    C1] task:rcu_preempt     state:R  running task     stack:26792 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  269.884350][    C1] Call Trace:
[  269.885818][    C1]  <TASK>
[  269.887125][    C1]  __schedule+0x1798/0x4cc0
[  269.889127][    C1]  ? __lock_acquire+0xab9/0xd20
[  269.891284][    C1]  ? __pfx___schedule+0x10/0x10
[  269.893393][    C1]  ? schedule+0x91/0x360
[  269.895281][    C1]  schedule+0x165/0x360
[  269.897129][    C1]  schedule_timeout+0x12b/0x270
[  269.899249][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  269.901569][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  269.904147][    C1]  ? __pfx_process_timeout+0x10/0x10
[  269.906436][    C1]  ? prepare_to_swait_event+0x341/0x380
[  269.908843][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[  269.910916][    C1]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  269.913466][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  269.915785][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  269.918050][    C1]  ? finish_swait+0xcd/0x1f0
[  269.919997][    C1]  rcu_gp_kthread+0x99/0x390
[  269.921920][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  269.924024][    C1]  ? __kthread_parkme+0x7b/0x200
[  269.926056][    C1]  ? __kthread_parkme+0x1a1/0x200
[  269.928213][    C1]  kthread+0x711/0x8a0
[  269.930044][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  269.932313][    C1]  ? __pfx_kthread+0x10/0x10
[  269.934333][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  269.936464][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  269.938528][    C1]  ? __pfx_kthread+0x10/0x10
[  269.940411][    C1]  ret_from_fork+0x439/0x7d0
[  269.942266][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  269.944169][    C1]  ? __switch_to_asm+0x39/0x70
[  269.946129][    C1]  ? __switch_to_asm+0x33/0x70
[  269.948082][    C1]  ? __pfx_kthread+0x10/0x10
[  269.949933][    C1]  ret_from_fork_asm+0x1a/0x30
[  269.951908][    C1]  </TASK>
[  269.953262][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  269.955989][    C1] CPU: 1 UID: 0 PID: 9161 Comm: syz.0.1086 Not tainted syzkaller #0 PREEMPT(full) 
[  269.959973][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  269.964267][    C1] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0
[  269.967241][    C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 b6 63 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 61 5f 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 45 5f
[  269.975413][    C1] RSP: 0018:ffffc9000659f540 EFLAGS: 00000246
[  269.978081][    C1] RAX: ffffffff81b4665b RBX: 1ffff11009608341 RCX: 0000000000080000
[  269.981484][    C1] RDX: ffffc90003651000 RSI: 000000000007ffff RDI: 0000000000080000
[  269.984876][    C1] RBP: ffffc9000659f6c0 R08: ffffffff8fa3b537 R09: 1ffffffff1f476a6
[  269.988277][    C1] R10: dffffc0000000000 R11: fffffbfff1f476a7 R12: ffff88804b041a08
[  269.991509][    C1] R13: dffffc0000000000 R14: ffff88813663b1c0 R15: 0000000000000000
[  269.994694][    C1] FS:  00007f1debdac6c0(0000) GS:ffff8881a3c11000(0000) knlGS:0000000000000000
[  269.998425][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  270.001110][    C1] CR2: 00007fdde55e5d58 CR3: 0000000106360000 CR4: 00000000000006f0
[  270.004399][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  270.007771][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  270.011082][    C1] Call Trace:
[  270.012509][    C1]  <TASK>
[  270.013776][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[  270.015906][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  270.018510][    C1]  ? ldt_dup_context+0x336/0x3e0
[  270.020540][    C1]  ? rcu_is_watching+0x15/0xb0
[  270.022493][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[  270.024555][    C1]  on_each_cpu_cond_mask+0x3f/0x80
[  270.026787][    C1]  flush_tlb_mm_range+0x6b1/0x12d0
[  270.028995][    C1]  ? __pfx_flush_tlb_mm_range+0x10/0x10
[  270.031304][    C1]  ? up_write+0x1c4/0x420
[  270.033122][    C1]  dup_mmap+0x15a0/0x1ac0
[  270.034960][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  270.037012][    C1]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  270.039563][    C1]  ? mm_init+0xcc3/0xef0
[  270.041419][    C1]  copy_mm+0x13c/0x4b0
[  270.043193][    C1]  copy_process+0x1706/0x3c00
[  270.045238][    C1]  ? copy_process+0x97f/0x3c00
[  270.047337][    C1]  ? __pfx_copy_process+0x10/0x10
[  270.049533][    C1]  kernel_clone+0x21e/0x840
[  270.051519][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  270.053720][    C1]  __x64_sys_clone+0x18b/0x1e0
[  270.055814][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  270.058132][    C1]  do_syscall_64+0xfa/0x3b0
[  270.060131][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.062737][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  270.065429][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.068002][    C1] RIP: 0033:0x7f1deaf8ec29
[  270.069975][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.078322][    C1] RSP: 002b:00007f1debdabfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  270.081911][    C1] RAX: ffffffffffffffda RBX: 00007f1deb1d5fa0 RCX: 00007f1deaf8ec29
[  270.085243][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  270.088581][    C1] RBP: 00007f1deb011e41 R08: 0000000000000000 R09: 0000000000000000
[  270.092014][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  270.095412][    C1] R13: 00007f1deb1d6038 R14: 00007f1deb1d5fa0 R15: 00007ffc0821ebf8
[  270.098822][    C1]  </TASK>

VM DIAGNOSIS:
20:48:10  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81adb021 RBX=ffff88803deb0168 RCX=ffff8880261bb980 RDX=0000000000010000
RSI=0000000000000004 RDI=00000000ffffffff RBP=00000000ffffffff RSP=ffffc90000007990
R8 =ffff88804b027a83 R9 =1ffff11009604f50 R10=dffffc0000000000 R11=ffffed1009604f51
R12=ffff88803deb0210 R13=dffffc0000000000 R14=ffff88803deb0168 R15=fffffffffffea874
RIP=ffffffff81adb023 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f23011cb6c0 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3528f0 CR3=0000000022426000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f23005a7498 00007f23005a7470 XMM03=00007f23005a74a8 00007f23005a74a0
XMM04=00007f230110d100 00007f23005a7460 XMM05=00007f23005a7478 00007f23005a74c0
XMM06=00007f23005a74b8 00007f23005a74b0 XMM07=00007f23005a74a8 00007f23005a74a0
XMM08=0000000000000000 00007f2300412f0f XMM09=0000000000000000 00007f2300412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006c RBX=000000000000006c RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e02b0
R8 =ffff8880200b8237 R9 =1ffff11004017046 R10=dffffc0000000000 R11=ffffffff85504bc0
R12=dffffc0000000000 R13=ffffffff99b048f7 R14=ffffffff99df9420 R15=0000000000000000
RIP=ffffffff85504c3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1debdac6c0 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fdde55e5d58 CR3=0000000106360000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=0000000000000000 00007f1deb012f0f XMM09=0000000000000000 00007f1deb012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
