last executing test programs: 1m44.63063264s ago: executing program 0 (id=6096): perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x200, 0x5}, 0x8037, 0x1a3, 0x2, 0x7, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x20000800) r1 = socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b20, &(0x7f0000000540)={'wlan1\x00', @random="000038c400"}) setsockopt$sock_attach_bpf(r1, 0x29, 0x18, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) 1m44.281497238s ago: executing program 0 (id=6099): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x301002, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)=""/248, 0x200105d0}], 0x1}, 0x1f00) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6623, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x14}, 0x400, 0x1fe, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x40086602, 0x110e22fff2) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040004000000000000020000000900010073797a30000000002c000000030a21040040000000000000020000000900010073797a30000000000900030073797a30000000de90000000060a01240000000000000000020000000900010073797a30000020000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064000000746573745f6c6162656c"], 0x104}}, 0x0) 1m43.927936619s ago: executing program 2 (id=6103): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x1, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r0, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x0, 0x27, 0x15, 0x2}], 0x10, 0xffffffff}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414"], 0xfdef) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200, 0x1, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bd", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x0, 0xc}, 0xf08, 0x0, 0x0, 0x8, 0x80000000003fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) 1m43.624887794s ago: executing program 4 (id=6105): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) close(0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000e00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r1, r2, 0x0, r0}, 0xa) 1m42.665704592s ago: executing program 2 (id=6106): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0x800000d, 0x6489}, 0x104901, 0x4, 0x0, 0x7, 0x77fe, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x1ff, 0x8, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x101, 0x5c441, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x2098, 0x3, 0x5, 0x8, 0x10, 0x2, 0xc007, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80), 0x0, 0xfffffffffffffffe}, 0x0) close(r1) 1m42.663742099s ago: executing program 4 (id=6108): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x14, 0x29, 0x301, 0x70bd2b, 0x25dfdbfd, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x404c896}, 0x840) 1m42.352163201s ago: executing program 0 (id=6109): perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x200, 0x5}, 0x8037, 0x1a3, 0x2, 0x7, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x20000800) r1 = socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b20, &(0x7f0000000540)={'wlan1\x00', @random="000038c400"}) setsockopt$sock_attach_bpf(r1, 0x29, 0x18, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) 1m42.340126603s ago: executing program 4 (id=6110): socket$kcm(0xa, 0x3, 0x3a) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000003a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x1, 0x2}, 0x1302, 0x2, 0xfffffffe, 0x8, 0x2, 0x3, 0x873f, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0xf08, 0x0, 0x0, 0x8, 0x80000000003fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8b}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m42.188781543s ago: executing program 2 (id=6111): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x18, 0x301, 0x70bd2a, 0x25dfdbfa, {0x41}}, 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x40000) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0xc}, 0x100850, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0xa, 0x73) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x14, 0x3a, 0x1, 0x70bd26, 0x25dfdbff, {0xe}}, 0x45}, 0x1, 0x0, 0x0, 0x44891}, 0x0) 1m41.928305201s ago: executing program 0 (id=6113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x8280, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44) socket$kcm(0xa, 0x2, 0x0) r1 = getpid() socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x3, 0x6, 0x0, 0xff, 0x0, 0x3, 0x4803, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000008, 0x2, @perf_config_ext={0x7, 0x6}, 0xce6b9b20411c7df5, 0xfffffffffffffffe, 0x0, 0x6, 0x8, 0x2, 0x2a, 0x0, 0x20000, 0x0, 0x3}, r1, 0xe, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x5, 0x84) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x24008010) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair(0x26, 0x0, 0x100, &(0x7f0000000340)) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2, 0xc}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x4008010) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c0000001e00010325bd7000feffffff01000000180001801400c000ff0100000000000000000000000000018769fe4aa751bb0dc079096a614c"], 0x2c}, 0x1, 0x0, 0x0, 0x20040091}, 0x4004000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xc0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x42, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x2}, 0x100, 0xffffffffffffffff, 0x0, 0x8, 0x2, 0x7fffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0xa) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x44094) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0xf08, 0x0, 0x0, 0x8, 0x80000000003fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002100090308000000ffdbdf2501000000080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040) 1m41.745799751s ago: executing program 3 (id=6114): r0 = getpid() r1 = perf_event_open(&(0x7f0000000f80)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x5, 0x5, &(0x7f00000010c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000001100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000001140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0x10, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[], 0x158}, 0x1, 0x0, 0x0, 0x200480c5}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYRESDEC], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000014c0)={r3, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000001500), 0x0, 0x100000000000000, 0x0, 0x1}}, 0x40) close(0xffffffffffffffff) socket$kcm(0xa, 0x1, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x14040001}, 0x24000840) 1m41.481903976s ago: executing program 0 (id=6115): r0 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000fcffffff850000007100000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m41.422844586s ago: executing program 2 (id=6116): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0xa4, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x56, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xb]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xa4}}, 0x0) 1m41.399931768s ago: executing program 3 (id=6117): perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x5, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x20000, &(0x7f0000000380), 0x0, &(0x7f00000003c0), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0xf, 0x0, &(0x7f00000002c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2400c080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x98}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[], 0x1c}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018090000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) socket$kcm(0x2b, 0x1, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x114, 0x14, 0x601, 0x70bd27, 0x0, {0x2b, 0xfa}, [@INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "1158881f4693099aa63337f2eaa93c31862b6aefe4efe785d9d4b93384b52e2b08e8016338c014162809579dbd9d6c27ecf0093dbc95cf25c1a94c48b0735a53a508d464978324fbebfc60fd729edbe07c8c22d0389190a1ac70dbcd12a7e3bbad0e1084777bdc4ea44394c55a2219a0fef4d1429f81f68960b100bb3a4b3c9cb2c499c927104276e8419d6977138e3850f602e83dc465fb3c116a7aa8b37f9f969e6ca1214152dbd1612714b56dc1d47bf6bc4412bf2a1969eb6cd664959125b5536195dfbbc4a7c98992af19250c8050ef54d022d03eb3f7f7c754600724d1acf08d7d5252444a7c50e4b2679125b318e8ab1731e93f0a30"}]}, 0x114}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) recvmsg$can_bcm(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40000101) socket$kcm(0x2, 0x7, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/17, @ANYBLOB="3a9825caba4ebdf7b297e6c3edf617dff53b51ec7e9886eefe6e515ad7249ddd5a0129df833bc7bfde", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000470c9d9552c6c1b41681d499b533cbdfbaeb4417c3af71f26c8ad5d42598854049a5c3418188bf6e6f337120509bd36b38855ffdefa941ba4734af3b173dc3"], 0x48) 1m41.237614097s ago: executing program 4 (id=6118): perf_event_open(&(0x7f0000001b00)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x7}, 0x8, 0x0, 0x0, 0x5, 0x9, 0x4, 0x20, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r0}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffe4) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000003dc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x100002, 0x20000}, 0x112065, 0x0, 0x4, 0x3, 0x7, 0x1, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003e40)={0xffffffffffffffff, 0x2e0, 0xe40, 0x2b0, &(0x7f0000003ec0)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000006a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x1d, 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="180000000000000500000000000000ff85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2b}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="230000000b00000002000000ffff000005"], 0x48) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="e8000000120001002cbd7000fedbdf25647262675f70725f73686131000000000000000000000000000000eedb8e283c47de7f00003e9c41484db90c1a00000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002000000000000000000000080001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@newqdisc={0x54, 0x10, 0x1, 0x70bd27, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x13, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0, 0xed, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r2, &(0x7f0000003f80)={0xffffffffffffffff, 0x5b, 0x0}, 0x10000) 1m41.028842197s ago: executing program 0 (id=6119): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x14, 0x29, 0x301, 0x70bd2b, 0x25dfdbfd, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x404c896}, 0x840) 1m40.632940555s ago: executing program 2 (id=6120): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0x800000d, 0x6489}, 0x104901, 0x4, 0x0, 0x7, 0x77fe, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x1ff, 0x8, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x101, 0x5c441, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x2098, 0x3, 0x5, 0x8, 0x10, 0x2, 0xc007, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1, 0xfffffffffffffffe}, 0x0) close(r1) 1m34.967906691s ago: executing program 3 (id=6122): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x804) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0xa, 0x1, 0x106) recvmsg(r1, &(0x7f0000000600)={&(0x7f0000000640)=@ieee802154={0x24, @short}, 0xfef7, &(0x7f00000006c0), 0x0, 0x0, 0xfffffd25}, 0x40000100) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="01000000040000000800000000"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x4, 0x4, 0x2, 0x1, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1b, 0xb, &(0x7f0000000900)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x125f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c000000260001031dbd7002f7db451167"], 0x1c}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c80)={0x20, 0x140c, 0x20, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40001) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000d40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000dc0)={&(0x7f0000003340)=ANY=[@ANYBLOB="980200000102010400000000000000000300000a08000440000000079c00018006000340000300002c00018014000300fe8000000000000000000000000000aa140004000000000000000000000000000000000014000180080001007f000001080002007f0000010c000280050001003a00000006000340000400001400018008000100e000000208000200640101001400018008000100e0000002080002000a010100140001800800010064010101080002000a01010108000440000000028400018006000340000000000c00028005000100060000001400018008000100ffffffff08000200ac1414aa0c00028005000100840000001400304ce72fe341f8fe87d4018008000100ffffffff080002007f0000010c000280050001002f000000060003400002000014000180080001007f000001080002000a01010206000340000300000600034000040000280002800c000280050001003a0000000c00028005000100060000000c00028005000100000000003c0001800c00028005000100210000002c00018014000300fe8000000000000000000000000000bb14000400fc020000000000000000000000000000f00001801400018008000100ac1414bb08000200ffffffff0c000280050001008400000006000340000000000c000280050001000000000006000340000100002c000180140003000000000000000000000000000000000014000400fe80000000000000000000000000003b2c000180140003000000000000000000000000000000000114000400200100000000000000"], 0x298}, 0x1, 0x0, 0x0, 0x80}, 0x4050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003600)={&(0x7f0000003640)=@newqdisc={0x24, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000700)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xe, 0x4, 0x4, 0xfd, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x14, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m34.696476357s ago: executing program 4 (id=6123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000020000000800000040"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0xf08, 0x0, 0x0, 0x8, 0x80000000003fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m33.30853103s ago: executing program 3 (id=6124): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newsa={0x15c, 0x10, 0x1, 0x70bd2b, 0xfffffffd, {{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0xfffffffffffff801, 0x2, 0x0, 0x4000000, 0xffffffff}, {0x0, 0x0, 0x0, 0x2}, {0x4, 0xffffffff, 0x1}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x62}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0xfffffffb, 0xfffffffd, 0x0, 0x400004}}, @algo_auth={0x48, 0x1, {{'sha512-avx\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x0) sendmsg(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)="69a8e39bd4f7dbc0f5a72021fe8210bfb5a93cfe8cf1fabd0a590d96c0e528a9e0475d2ef0781d13c3fd594da1b9f19603a45d0e93628dff016f729588682a13c55eb9042a1f84c4e774667c723c631af20ae2a5137edbf487fd63310d3af96f2d9a51b1617abe2d35", 0x69}, {&(0x7f0000000500)="a7d89913956c17ad84c849bbd0919221645fb6c35d8653c6a17d2e81a8060d89b2c3aa84e5bd97b8b0439d73d19ba2aa630a4cf092bc84c65f933774eee7037454107a1601214bf1579dd58126ef1857051f7e9a6f0d0061711ba6c64cccea06ba413f581542cc46729d0ff1eab20af2a037f51267bb", 0x76}], 0x2}, 0x40000) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x6f}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x700) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 1m32.809859167s ago: executing program 2 (id=6126): r0 = getpid() r1 = perf_event_open(&(0x7f0000000f80)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x5, 0x5, &(0x7f00000010c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000001100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000001140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0x10, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[], 0x158}, 0x1, 0x0, 0x0, 0x200480c5}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYRESDEC], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000014c0)={r3, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000001500), 0x0, 0x100000000000000, 0x0, 0x1}}, 0x40) close(0xffffffffffffffff) socket$kcm(0xa, 0x1, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x14040001}, 0x24000840) 1m32.626999913s ago: executing program 3 (id=6127): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4010, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext={0x0, 0xc}, 0xf08, 0x0, 0x0, 0x8, 0x80000000003fe, 0x0, 0x9228}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000005c0)=ANY=[@ANYRES32=r0], 0x50) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x101000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) 1m32.389235239s ago: executing program 4 (id=6129): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x4005, 0xc3a}, 0x1bc, 0x8, 0x0, 0x8, 0x9, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xad2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xfffffffffffefffb}, 0x8, 0x80000001, 0x0, 0x7, 0x766e0b24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400200000000003a}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x5, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000840)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000880)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x54) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) 1m31.535452418s ago: executing program 3 (id=6131): perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x200, 0x5}, 0x8037, 0x1a3, 0x2, 0x7, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x20000800) r1 = socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b20, &(0x7f0000000540)={'wlan1\x00', @random="000038c400"}) setsockopt$sock_attach_bpf(r1, 0x29, 0x18, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) 1m14.230532436s ago: executing program 32 (id=6126): r0 = getpid() r1 = perf_event_open(&(0x7f0000000f80)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x5, 0x5, &(0x7f00000010c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000001100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000001140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0x10, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[], 0x158}, 0x1, 0x0, 0x0, 0x200480c5}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYRESDEC], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000014c0)={r3, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000001500), 0x0, 0x100000000000000, 0x0, 0x1}}, 0x40) close(0xffffffffffffffff) socket$kcm(0xa, 0x1, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x14040001}, 0x24000840) 1m11.216334664s ago: executing program 33 (id=6131): perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x200, 0x5}, 0x8037, 0x1a3, 0x2, 0x7, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x20000800) r1 = socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b20, &(0x7f0000000540)={'wlan1\x00', @random="000038c400"}) setsockopt$sock_attach_bpf(r1, 0x29, 0x18, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) 1m9.601509351s ago: executing program 34 (id=6129): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x4005, 0xc3a}, 0x1bc, 0x8, 0x0, 0x8, 0x9, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xad2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xfffffffffffefffb}, 0x8, 0x80000001, 0x0, 0x7, 0x766e0b24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400200000000003a}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x5, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000840)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000880)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x54) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) 9.300576869s ago: executing program 7 (id=6204): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x5, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x92, 0x0, 0xffffffffffffffff, 0x29011, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x3, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0xf, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 8.309968703s ago: executing program 1 (id=6205): getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) fstat(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x24000854}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000002300000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000013014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0xf4, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8.241775368s ago: executing program 1 (id=6206): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x1082, 0x0, 0x0, 0x8000, 0x4, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000900)={&(0x7f0000000940)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x4400, 0x2, 0x0, 0x7, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x15, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000020201"], 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x20000488) socket$rds(0x15, 0x5, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000015c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001600), 0xfffffedf, 0x10, &(0x7f0000001640), 0x0, 0x0, 0xffffffffffffffff, 0x16}, 0x48) perf_event_open(&(0x7f0000001680)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x5, 0x5, &(0x7f00000017c0)=ANY=[], &(0x7f0000001800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) close(r0) 7.478930637s ago: executing program 5 (id=6208): getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) fstat(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7.071616928s ago: executing program 7 (id=6210): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0xf, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000d80)={0x2, 0x80, 0xcb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000007}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x44, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0xf7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000000000824d0095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair(0x1, 0x5, 0x0, &(0x7f0000000300)) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES32=r4], 0x9a) 6.628559439s ago: executing program 5 (id=6212): openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000800)={0x0, 0xfffffffffffffe05, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000150001032e7ee828929c83470c000000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 6.577103318s ago: executing program 1 (id=6213): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe39, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x4f, 0x100}}], 0x18}, 0x24004804) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xfffffffffffefffb}, 0x8, 0x90000001, 0x0, 0x7, 0x766e0b24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400200000000003a}, 0x0, 0x7ffbffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x48, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1ff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x6}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0xfffffffd, 0x9}, {0x20002, 0x0, 0xf, 0x7}]}, 0x5d) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000)=r4, 0xc) 6.219191551s ago: executing program 5 (id=6214): r0 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x5, 0x5, 0x0, &(0x7f0000001140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000180), 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x13, &(0x7f00000001c0)=r2, 0x4) 6.182488111s ago: executing program 6 (id=6215): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xa, 0x1c, &(0x7f00000010c0)=ANY=[@ANYBLOB="18080000b0ff0011000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035080100000040009500000000000000b7020000000000007b9af8fd000000007509fdff030000007baaf0ff00000000bf2700000000000004080000fffdffffbfa400000000000007040000f0ffffff74020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000006e9800000000000056080000000000008500000005110000b70000000000000095"], &(0x7f00000011c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.751151099s ago: executing program 6 (id=6216): getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) fstat(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x24000854}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000002300000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000013014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0xf4, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.687240186s ago: executing program 6 (id=6217): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x44, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0xf7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x10, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f0000000680)='GPL\x00', 0x1}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000700)={r3, r4, 0x7, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000740)={r5, r2, 0x4, r3}, 0x10) 5.330154377s ago: executing program 5 (id=6218): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000040), 0x0}, 0x20) r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5a0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0x9}, 0x880, 0x1, 0x0, 0x1, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffdfffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 2.50033778s ago: executing program 1 (id=6219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000020000000800000040"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0xf08, 0x0, 0x0, 0x8, 0x80000000003fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.414039442s ago: executing program 7 (id=6220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x60}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) 1.888214794s ago: executing program 6 (id=6221): getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) fstat(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.886282821s ago: executing program 5 (id=6222): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4010, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext={0x0, 0xc}, 0xf08, 0x0, 0x0, 0x8, 0x80000000003fe, 0x0, 0x9228}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000005c0)=ANY=[@ANYRES32=r0], 0x50) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x101000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) 1.884196584s ago: executing program 7 (id=6223): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000000000824d0095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='devices.list\x00', 0x26e1, 0x0) close(r1) socketpair(0x1, 0x801, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000ac0)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000580)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0xf, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000d80)={0x2, 0x80, 0xcb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000007}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x44, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0xf7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000000000824d0095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair(0x1, 0x5, 0x0, &(0x7f0000000300)) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES32=r4], 0x9a) 0s ago: executing program 1 (id=6230): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x44, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0xf7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x10, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f0000000680)='GPL\x00', 0x1}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000700)={r3, r4, 0x7, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000740)={r5, r2, 0x4, r3}, 0x10) kernel console output (not intermixed with test programs): active [ 733.912057][T16173] hsr_slave_0: entered promiscuous mode [ 733.913876][T16173] hsr_slave_1: entered promiscuous mode [ 733.916962][T16392] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3022'. [ 733.935740][T16173] debugfs: 'hsr0' already exists in 'hsr' [ 733.935778][T16173] Cannot create hsr debugfs directory [ 734.665715][T16415] __nla_validate_parse: 3 callbacks suppressed [ 734.665744][T16415] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3028'. [ 734.665775][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3028'. [ 735.978315][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 736.338934][T16434] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3033'. [ 736.391320][T16434] netlink: 'syz.3.3033': attribute type 10 has an invalid length. [ 736.391907][T16434] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3033'. [ 736.468198][T16439] nft_compat: unsupported protocol 0 [ 736.904939][T16446] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3034'. [ 737.371886][T16173] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 737.408273][T16173] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 737.411270][T16173] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 737.448249][T16173] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 737.461418][T16173] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 737.500842][T16173] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 737.501906][T16173] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 737.522898][T16173] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 737.998365][T16173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.026584][T16488] netlink: 'syz.2.3044': attribute type 3 has an invalid length. [ 738.026622][T16488] netlink: 'syz.2.3044': attribute type 153 has an invalid length. [ 738.082364][T16173] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.113916][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.114074][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.165836][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.165975][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.825854][T16504] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3047'. [ 739.246151][T16511] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3048'. [ 740.818572][T16548] netlink: 'syz.3.3055': attribute type 1 has an invalid length. [ 740.818600][T16548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3055'. [ 740.889656][T16529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3052'. [ 741.019066][T16173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.172498][T16555] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3056'. [ 741.412100][T16173] veth0_vlan: entered promiscuous mode [ 741.456549][T16173] veth1_vlan: entered promiscuous mode [ 741.484223][T16563] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 741.484267][T16563] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 741.484314][T16563] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 741.692166][T16173] veth0_macvtap: entered promiscuous mode [ 741.755742][T16173] veth1_macvtap: entered promiscuous mode [ 741.815235][T16570] netlink: 'syz.2.3060': attribute type 4 has an invalid length. [ 741.882595][T16173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.967323][T16173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.053241][ T1158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.053300][ T1158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.053340][ T1158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.053379][ T1158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.369994][ T63] smbdirect: ib_dev[syz2] removed [ 742.389923][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.389947][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.585077][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.585104][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.796984][T16594] netlink: 'syz.2.3067': attribute type 3 has an invalid length. [ 742.797021][T16594] netlink: 'syz.2.3067': attribute type 153 has an invalid length. [ 742.851433][T16596] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3068'. [ 743.504043][T16613] netlink: 'syz.1.2983': attribute type 1 has an invalid length. [ 743.504072][T16613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2983'. [ 744.260063][T15765] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 744.270847][T15765] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 744.279551][T15765] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 744.281102][T15765] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 744.281770][T15765] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 744.457549][T16623] macsec0: entered promiscuous mode [ 744.457986][T16623] macsec0: entered allmulticast mode [ 744.458005][T16623] veth1_macvtap: entered allmulticast mode [ 744.581721][T16627] netlink: 'syz.0.3075': attribute type 10 has an invalid length. [ 744.626397][T16629] netlink: 'syz.2.3076': attribute type 1 has an invalid length. [ 744.626422][T16629] netlink: 'syz.2.3076': attribute type 2 has an invalid length. [ 745.173609][T16648] tmpfs: Unknown parameter '‡ZÔ8,9' [ 745.207229][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.560818][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.644332][T16619] rxe_eth0 speed is unknown, defaulting to 1000 [ 745.737987][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.957758][T16670] netlink: zone id is out of range [ 745.957800][T16670] netlink: zone id is out of range [ 745.957852][T16670] netlink: zone id is out of range [ 745.957863][T16670] netlink: zone id is out of range [ 745.957895][T16670] netlink: zone id is out of range [ 745.957906][T16670] netlink: zone id is out of range [ 745.957916][T16670] netlink: zone id is out of range [ 745.957926][T16670] netlink: zone id is out of range [ 745.957957][T16670] netlink: zone id is out of range [ 745.957967][T16670] netlink: zone id is out of range [ 746.065332][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.383157][ T5644] Bluetooth: hci3: command tx timeout [ 746.428366][T16675] netlink: 'syz.0.3091': attribute type 1 has an invalid length. [ 746.428405][T16675] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3091'. [ 746.428480][T16675] netlink: 'syz.0.3091': attribute type 1 has an invalid length. [ 746.428497][T16675] netlink: 'syz.0.3091': attribute type 2 has an invalid length. [ 746.738911][ T31] dummy0: left allmulticast mode [ 746.746420][ T31] dummy0: left promiscuous mode [ 746.746763][ T31] bridge0: port 3(dummy0) entered disabled state [ 746.778732][ T31] bridge_slave_1: left allmulticast mode [ 746.778782][ T31] bridge_slave_1: left promiscuous mode [ 746.779011][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.810357][ T31] bridge_slave_0: left allmulticast mode [ 746.810388][ T31] bridge_slave_0: left promiscuous mode [ 746.810605][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.446527][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.446603][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.451052][ T31] team0: Port device geneve0 removed [ 747.504586][ T31] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 747.695516][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.068905][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.159678][ T31] bond0 (unregistering): Released all slaves [ 748.311313][T16689] bridge_slave_0 (unregistering): left allmulticast mode [ 748.311804][T16689] bridge_slave_0 (unregistering): left promiscuous mode [ 748.311908][T16689] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.463049][ T5644] Bluetooth: hci3: command tx timeout [ 749.168354][T16619] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.173202][T16619] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.173584][T16619] bridge_slave_0: entered allmulticast mode [ 749.207285][T16619] bridge_slave_0: entered promiscuous mode [ 749.228607][T16619] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.229159][T16619] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.229510][T16619] bridge_slave_1: entered allmulticast mode [ 749.257498][T16619] bridge_slave_1: entered promiscuous mode [ 749.445007][T16739] netlink: 'syz.4.3112': attribute type 4 has an invalid length. [ 749.445054][T16739] netlink: 'syz.4.3112': attribute type 1 has an invalid length. [ 749.445730][T16739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.606708][T16619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.819450][T16619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.114975][T16619] team0: Port device team_slave_0 added [ 750.262165][T16619] team0: Port device team_slave_1 added [ 750.531848][T16760] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.547219][ T5644] Bluetooth: hci3: command tx timeout [ 750.632671][T16765] netlink: 'syz.2.3116': attribute type 21 has an invalid length. [ 750.632703][T16765] netlink: 'syz.2.3116': attribute type 20 has an invalid length. [ 750.893081][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 751.045178][T16619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.045199][T16619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.045231][T16619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.100074][T16619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.100095][T16619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.100126][T16619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.340543][T16780] netlink: 'syz.0.3122': attribute type 2 has an invalid length. [ 751.612189][ T31] veth1_macvtap: left promiscuous mode [ 751.612240][ T31] veth0_macvtap: left promiscuous mode [ 752.380745][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3127'. [ 752.680230][ T5644] Bluetooth: hci3: command tx timeout [ 753.407119][ T31] team0 (unregistering): Port device team_slave_1 removed [ 753.483696][ T31] team0 (unregistering): Port device team_slave_0 removed [ 754.271915][T16619] hsr_slave_0: entered promiscuous mode [ 754.275621][T16619] hsr_slave_1: entered promiscuous mode [ 754.277788][T16619] debugfs: 'hsr0' already exists in 'hsr' [ 754.277854][T16619] Cannot create hsr debugfs directory [ 754.336502][T16805] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.3129'. [ 754.400549][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 754.707193][T16831] ksmbd: Unknown IPC event: 6, ignore. [ 755.006646][T16838] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3137'. [ 756.019418][T16864] : entered promiscuous mode [ 756.637098][T16619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 756.672028][T16619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 756.677899][T16619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 756.728017][T16619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 756.737225][T16619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 756.776720][T16619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 756.790097][T16619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 756.816713][T16619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 756.868414][T16888] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3151'. [ 757.327054][T16619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.413241][T16619] 8021q: adding VLAN 0 to HW filter on device team0 [ 757.454651][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.454769][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.535477][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.535602][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.068729][T16922] : entered promiscuous mode [ 759.084536][ T5296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 759.330996][T16963] net_ratelimit: 2 callbacks suppressed [ 759.331049][T16963] netlink: del zone limit has 8 unknown bytes [ 759.388372][T16619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.488100][T16619] veth0_vlan: entered promiscuous mode [ 759.538805][T16619] veth1_vlan: entered promiscuous mode [ 759.738996][T16619] veth0_macvtap: entered promiscuous mode [ 759.771677][T16619] veth1_macvtap: entered promiscuous mode [ 759.868382][T16619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.912346][T16619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.993922][ T1158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.994019][ T1158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.994061][ T1158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.994102][ T1158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.411989][ T9701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.412016][ T9701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.536744][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.536769][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.855908][T16999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3174'. [ 761.291337][T17021] netlink: 'syz.2.3178': attribute type 4 has an invalid length. [ 761.535236][T17032] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3180'. [ 762.278523][T15765] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 762.281557][T15765] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 762.282507][T15765] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 762.294513][T15765] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 762.301909][T15765] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 762.366061][T17059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3188'. [ 762.723184][T17071] netlink: 'syz.3.3191': attribute type 4 has an invalid length. [ 762.742512][T17070] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 763.659745][T17089] netlink: 'syz.1.3196': attribute type 10 has an invalid length. [ 763.659954][T17089] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3196'. [ 763.660508][T17089] veth1_virt_wifi: entered promiscuous mode [ 763.781713][T17089] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 763.801385][T17089] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 763.801585][T17089] veth1_virt_wifi: entered allmulticast mode [ 763.804188][T17089] veth1_virt_wifi: left allmulticast mode [ 764.021708][T17057] rxe_eth0 speed is unknown, defaulting to 1000 [ 764.383252][ T5644] Bluetooth: hci0: command tx timeout [ 764.928650][T17136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3206'. [ 765.837438][T17057] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.837763][T17057] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.837944][T17057] bridge_slave_0: entered allmulticast mode [ 765.839820][T17057] bridge_slave_0: entered promiscuous mode [ 765.843038][T17057] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.843226][T17057] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.843544][T17057] bridge_slave_1: entered allmulticast mode [ 765.845437][T17057] bridge_slave_1: entered promiscuous mode [ 765.988002][T17057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.992097][T17057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.042946][T17057] team0: Port device team_slave_0 added [ 766.045222][T17169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3214'. [ 766.046175][T17057] team0: Port device team_slave_1 added [ 766.101825][T17057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.101846][T17057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.101876][T17057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.150555][T17057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.150575][T17057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.150605][T17057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.441750][T17057] hsr_slave_0: entered promiscuous mode [ 766.443040][T17057] hsr_slave_1: entered promiscuous mode [ 766.453153][T17175] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 766.453259][T17175] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 766.453379][T17175] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 766.470018][T17057] debugfs: 'hsr0' already exists in 'hsr' [ 766.470089][T17057] Cannot create hsr debugfs directory [ 766.471839][ T5644] Bluetooth: hci0: command tx timeout [ 767.292346][T17057] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.408752][T17057] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.616601][T17057] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.736402][T17057] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.079581][T17057] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 768.112080][T17057] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 768.118794][T17057] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 768.146607][T17057] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 768.149993][T17057] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 768.172375][T17057] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 768.181602][T17057] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 768.197284][T17057] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 768.384770][T17057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.416053][T17057] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.444599][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.444732][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.484440][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.484558][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.546292][ T5644] Bluetooth: hci0: command tx timeout [ 769.758996][T17057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.847511][T17057] veth0_vlan: entered promiscuous mode [ 769.865875][T17057] veth1_vlan: entered promiscuous mode [ 769.920832][T17057] veth0_macvtap: entered promiscuous mode [ 769.938383][T17057] veth1_macvtap: entered promiscuous mode [ 769.970983][T17057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.997445][T17057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 770.089459][ T1171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.198208][ T9701] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.229967][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.229992][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.273411][ T1171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.274355][ T1171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.390055][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.390081][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.623111][ T5644] Bluetooth: hci0: command tx timeout [ 771.543746][T15765] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 771.547142][T15765] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 771.547947][T15765] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 771.548930][T15765] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 771.549656][T15765] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 771.699229][T17306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3261'. [ 771.699259][T17306] openvswitch: netlink: Flow actions attr not present in new flow. [ 772.654572][ T9701] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.720700][T17327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3268'. [ 772.720736][T17327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3268'. [ 772.747472][T17334] pimreg1: tun_chr_ioctl cmd 1074025677 [ 772.747602][T17334] pimreg1: linktype set to 773 [ 772.749007][T17334] pimreg1: tun_chr_ioctl cmd 1074025675 [ 772.749028][T17334] pimreg1: persist enabled [ 772.899382][ T9701] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.975686][T17300] rxe_eth0 speed is unknown, defaulting to 1000 [ 773.114586][T17351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3273'. [ 773.114614][T17351] openvswitch: netlink: Flow actions attr not present in new flow. [ 773.146950][ T9701] netdevsim netdevsim2 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.606087][T15765] Bluetooth: hci2: command tx timeout [ 773.863454][ T9701] bridge0: port 3(batadv0) entered disabled state [ 773.872739][ T9701] bridge_slave_1: left allmulticast mode [ 773.872769][ T9701] bridge_slave_1: left promiscuous mode [ 773.881962][ T9701] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.557599][ T9701] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 774.582040][ T9701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.594664][ T9701] bond0 (unregistering): Released all slaves [ 774.658004][T17391] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3289'. [ 774.662108][ T9701] : left promiscuous mode [ 775.663684][T15765] Bluetooth: hci2: command tx timeout [ 776.117842][T17300] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.126724][T17300] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.126939][T17300] bridge_slave_0: entered allmulticast mode [ 776.179053][T17300] bridge_slave_0: entered promiscuous mode [ 776.194156][T17300] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.194289][T17300] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.194472][T17300] bridge_slave_1: entered allmulticast mode [ 776.224159][T17300] bridge_slave_1: entered promiscuous mode [ 776.543677][ T9701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.544074][ T9701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.553225][ T9701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.553254][ T9701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 777.078134][T17476] bpf: Bad value for 'uid' [ 777.083202][T17476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3318'. [ 777.083280][T17476] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 777.438271][T17300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.468881][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 777.489273][T17300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.554757][T17300] team0: Port device team_slave_0 added [ 777.571519][T17300] team0: Port device team_slave_1 added [ 777.754141][T15765] Bluetooth: hci2: command tx timeout [ 777.826290][T17300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.826311][T17300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.826343][T17300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.831036][T17300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.831056][T17300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.831086][T17300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.835569][T17491] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 778.026509][T17300] hsr_slave_0: entered promiscuous mode [ 778.027606][T17300] hsr_slave_1: entered promiscuous mode [ 778.028364][T17300] debugfs: 'hsr0' already exists in 'hsr' [ 778.028386][T17300] Cannot create hsr debugfs directory [ 779.329370][T17550] : entered promiscuous mode [ 779.424154][T17300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 779.493684][T17300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 779.494712][T17300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 779.823244][T15765] Bluetooth: hci2: command tx timeout [ 780.300166][T17300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 780.312689][T17300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 780.339175][T17300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 780.352429][T17300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 780.373475][T17300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 780.524713][T17300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.572169][T17300] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.589575][ T9701] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.589691][ T9701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.622155][ T9701] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.622294][ T9701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.331285][T17300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.392414][T17630] sch_tbf: burst 65537 is lower than device lo mtu (65550) ! [ 782.559132][T17300] veth0_vlan: entered promiscuous mode [ 782.599899][T17300] veth1_vlan: entered promiscuous mode [ 782.777335][T17300] veth0_macvtap: entered promiscuous mode [ 782.804905][T17300] veth1_macvtap: entered promiscuous mode [ 782.936077][T17300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.978454][T17300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.021232][T17655] netlink: 'syz.4.3378': attribute type 10 has an invalid length. [ 783.021291][T17655] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3378'. [ 783.077539][T17659] netlink: 440 bytes leftover after parsing attributes in process `syz.3.3377'. [ 783.350613][T17655] team0: Port device geneve1 added [ 783.379385][ T1158] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.379481][ T1158] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.379523][ T1158] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.384933][ T1158] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.440419][T17655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3378'. [ 783.596730][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.596754][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.653992][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.654019][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.331358][T17696] netlink: 440 bytes leftover after parsing attributes in process `syz.0.3389'. [ 785.141289][T17715] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3397'. [ 785.545741][T17738] netlink: 440 bytes leftover after parsing attributes in process `syz.1.3404'. [ 786.417901][T17768] netlink: 'syz.4.3417': attribute type 10 has an invalid length. [ 786.417980][T17768] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3417'. [ 786.603654][T17768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3417'. [ 786.717605][T17784] netlink: 'syz.1.3423': attribute type 12 has an invalid length. [ 786.740108][ T1158] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.740345][ T1158] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.740416][ T1158] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.755328][ T50] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.781004][T17784] netlink: 'syz.1.3423': attribute type 63 has an invalid length. [ 786.962790][T17782] netlink: 'syz.0.3422': attribute type 29 has an invalid length. [ 787.565579][T17782] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3422'. [ 787.594847][T17798] bpf: Bad value for 'uid' [ 787.595432][T17798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3429'. [ 787.595467][T17798] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 789.201803][T17836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3444'. [ 789.201841][T17836] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 791.776037][T17903] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3471'. [ 791.821697][T17903] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3471'. [ 792.261572][T17924] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3481'. [ 793.526909][T17964] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3497'. [ 793.813704][T17973] netlink: 'syz.2.3501': attribute type 3 has an invalid length. [ 793.835829][T17973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3501'. [ 794.091918][T17990] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3509'. [ 795.215222][T18008] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3514'. [ 795.216295][T18011] openvswitch: netlink: Missing key (keys=40, expected=100) [ 796.274823][T18039] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3529'. [ 797.049543][T18071] netlink: 'syz.2.3543': attribute type 1 has an invalid length. [ 797.049584][T18071] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3543'. [ 797.191755][T18074] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3544'. [ 798.028237][T18104] netlink: 'syz.4.3557': attribute type 1 has an invalid length. [ 798.028263][T18104] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.3557'. [ 798.220928][T18107] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3559'. [ 799.176980][T18144] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3574'. [ 801.534336][T18194] xt_nfacct: accounting object `syz0' does not exist [ 801.789928][T18202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3599'. [ 801.821516][T18199] xt_LOG: level 115 >= 8 [ 803.225022][T18227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3608'. [ 803.225056][T18227] openvswitch: netlink: Flow actions attr not present in new flow. [ 803.443528][T18237] netlink: 'syz.4.3613': attribute type 2 has an invalid length. [ 803.443558][T18237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3613'. [ 804.695525][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3622'. [ 804.695554][T18260] openvswitch: netlink: Flow actions attr not present in new flow. [ 804.741491][T18264] netlink: 'syz.1.3623': attribute type 1 has an invalid length. [ 804.741515][T18264] netlink: 'syz.1.3623': attribute type 2 has an invalid length. [ 805.275808][T18291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3636'. [ 805.275843][T18291] openvswitch: netlink: Flow actions attr not present in new flow. [ 805.788011][T18309] netlink: 'syz.0.3645': attribute type 2 has an invalid length. [ 805.788039][T18309] netlink: 65043 bytes leftover after parsing attributes in process `syz.0.3645'. [ 806.497458][T18344] netlink: 'syz.2.3660': attribute type 2 has an invalid length. [ 806.497487][T18344] netlink: 65043 bytes leftover after parsing attributes in process `syz.2.3660'. [ 807.078698][T18350] netlink: 'syz.3.3664': attribute type 4 has an invalid length. [ 807.078767][T18350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3664'. [ 807.401822][T18370] netlink: 'syz.2.3673': attribute type 2 has an invalid length. [ 807.401849][T18370] netlink: 65043 bytes leftover after parsing attributes in process `syz.2.3673'. [ 808.431295][T18408] netlink: 'syz.2.3687': attribute type 2 has an invalid length. [ 808.431326][T18408] netlink: 65043 bytes leftover after parsing attributes in process `syz.2.3687'. [ 808.864407][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.864471][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.200919][T18431] netlink: 'syz.0.3696': attribute type 4 has an invalid length. [ 811.200953][T18431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3696'. [ 811.538434][T18443] netlink: 'syz.4.3702': attribute type 2 has an invalid length. [ 811.538462][T18443] netlink: 65043 bytes leftover after parsing attributes in process `syz.4.3702'. [ 811.585596][T18441] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3700'. [ 812.208211][T18471] netlink: 'syz.3.3715': attribute type 2 has an invalid length. [ 812.208237][T18471] netlink: 65043 bytes leftover after parsing attributes in process `syz.3.3715'. [ 812.431007][T18475] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3718'. [ 812.601380][T18490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3724'. [ 812.601409][T18490] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 812.950696][T18495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3727'. [ 812.975750][T18495] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3727'. [ 813.026271][T18495] netlink: 'syz.3.3727': attribute type 10 has an invalid length. [ 813.026323][T18495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.027023][T18495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.058961][T18505] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 813.061203][T18495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.061298][T18495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.172709][T18509] netlink: 'syz.2.3732': attribute type 2 has an invalid length. [ 813.172736][T18509] netlink: 65043 bytes leftover after parsing attributes in process `syz.2.3732'. [ 813.406965][T18516] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3735'. [ 813.693818][T18524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3739'. [ 813.693851][T18524] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 813.889270][T18528] netlink: 'syz.0.3741': attribute type 10 has an invalid length. [ 813.889422][T18528] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3741'. [ 814.024696][T18536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3741'. [ 814.066336][T18538] netlink: 'syz.4.3745': attribute type 2 has an invalid length. [ 814.078708][T18528] team0: Port device geneve1 added [ 814.328292][T18551] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 814.662173][T18565] netlink: 'syz.3.3758': attribute type 10 has an invalid length. [ 814.742489][T18567] netlink: 'syz.1.3759': attribute type 2 has an invalid length. [ 814.777755][T18565] team0: Port device geneve1 added [ 814.977825][T18576] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 815.418999][T18597] netlink: 'syz.0.3773': attribute type 2 has an invalid length. [ 815.628487][T18601] team0: Port device geneve1 added [ 815.647459][T18606] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 816.223977][T18625] validate_nla: 2 callbacks suppressed [ 816.224002][T18625] netlink: 'syz.0.3787': attribute type 2 has an invalid length. [ 816.293661][T18629] tipc: Enabling of bearer rejected, media not registered [ 816.504985][T18643] netlink: 'syz.3.3795': attribute type 1 has an invalid length. [ 817.244333][T18678] netlink: 'syz.1.3811': attribute type 1 has an invalid length. [ 818.711036][T18724] netlink: 'syz.4.3830': attribute type 3 has an invalid length. [ 818.711061][T18724] __nla_validate_parse: 12 callbacks suppressed [ 818.711086][T18724] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3830'. [ 819.456999][ T158] bridge0: port 4(batadv0) entered disabled state [ 819.477158][ T158] team0: left allmulticast mode [ 819.477185][ T158] team_slave_0: left allmulticast mode [ 819.477205][ T158] team_slave_1: left allmulticast mode [ 819.477223][ T158] geneve0: left allmulticast mode [ 819.482474][ T158] team0: left promiscuous mode [ 819.482498][ T158] team_slave_0: left promiscuous mode [ 819.482706][ T158] team_slave_1: left promiscuous mode [ 819.482977][ T158] geneve0: left promiscuous mode [ 819.507547][ T158] bridge0: port 3(team0) entered disabled state [ 819.538620][ T158] bridge_slave_1: left allmulticast mode [ 819.538651][ T158] bridge_slave_1: left promiscuous mode [ 819.538909][ T158] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.570218][ T158] bridge_slave_0: left allmulticast mode [ 819.570249][ T158] bridge_slave_0: left promiscuous mode [ 819.570561][ T158] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.853891][ T158] team0: Port device geneve0 removed [ 819.878003][T18735] lo speed is unknown, defaulting to 1000 [ 820.009982][T18735] lo speed is unknown, defaulting to 1000 [ 820.088966][T18735] lo speed is unknown, defaulting to 1000 [ 820.585543][T18775] netlink: 'syz.3.3851': attribute type 3 has an invalid length. [ 820.585568][T18775] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3851'. [ 820.803810][T18735] infiniband sz1: set active [ 820.803835][T18735] infiniband sz1: added lo [ 820.806487][ T5744] lo speed is unknown, defaulting to 1000 [ 820.839532][T18735] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 820.878609][T18735] infiniband sz1: Couldn't open port 1 [ 820.885338][T18735] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 820.885443][T18735] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 820.885552][T18735] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 821.026747][T18735] RDS/IB: sz1: added [ 821.026828][T18735] smc: adding ib device sz1 with port count 1 [ 821.026852][T18735] smc: ib device sz1 port 1 has no pnetid [ 821.027815][ T5779] lo speed is unknown, defaulting to 1000 [ 821.059829][T18735] lo speed is unknown, defaulting to 1000 [ 822.227066][T18802] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 822.727685][T18735] lo speed is unknown, defaulting to 1000 [ 822.838146][T18826] netlink: 'syz.4.3869': attribute type 3 has an invalid length. [ 822.838171][T18826] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3869'. [ 823.486597][ T158] hsr_slave_0: left promiscuous mode [ 823.491354][ T158] hsr_slave_1: left promiscuous mode [ 823.494186][ T158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.494212][ T158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.516841][ T158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 823.517312][ T158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.564500][ T158] veth1_macvtap: left promiscuous mode [ 823.564542][ T158] veth0_macvtap: left promiscuous mode [ 823.564683][ T158] veth1_vlan: left promiscuous mode [ 823.564775][ T158] veth0_vlan: left promiscuous mode [ 824.885744][ T158] team0 (unregistering): Port device team_slave_1 removed [ 824.919380][ T158] team0 (unregistering): Port device team_slave_0 removed [ 825.121922][T18735] lo speed is unknown, defaulting to 1000 [ 825.405803][T18881] netlink: 'syz.4.3893': attribute type 21 has an invalid length. [ 825.452021][T18882] netlink: 'syz.2.3894': attribute type 3 has an invalid length. [ 825.452046][T18882] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3894'. [ 825.710184][T18735] lo speed is unknown, defaulting to 1000 [ 825.806160][T18891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3898'. [ 825.806188][T18891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3898'. [ 826.076200][ T9701] wlan1: Trigger new scan to find an IBSS to join [ 826.306667][ T5644] Bluetooth: hci5: command 0x0406 tx timeout [ 826.597496][T18735] lo speed is unknown, defaulting to 1000 [ 827.226821][T18937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3916'. [ 827.226852][T18937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3916'. [ 828.355267][T18967] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3928'. [ 828.605474][T18979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3933'. [ 828.605505][T18979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3933'. [ 829.153526][ T50] wlan1: Trigger new scan to find an IBSS to join [ 829.488828][T18999] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3941'. [ 829.806364][T19011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3943'. [ 830.227368][ T1158] wlan1: Creating new IBSS network, BSSID 3a:cc:8a:05:5f:83 [ 830.823773][T19047] __nla_validate_parse: 1 callbacks suppressed [ 830.823795][T19047] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3964'. [ 831.178996][T19060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3967'. [ 831.865519][T19077] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3976'. [ 832.058423][T19085] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3978'. [ 832.483861][T19109] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3991'. [ 832.579036][T19110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3987'. [ 833.239197][T19138] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 2216 [ 833.435509][T19145] openvswitch: netlink: IP tunnel dst address not specified [ 833.728806][T19163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4012'. [ 833.926792][T19168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4018'. [ 833.926843][T19168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4018'. [ 834.289142][T19178] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 835.408592][T19209] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 836.209453][T19239] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 836.470122][T19244] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4049'. [ 837.148368][T19270] openvswitch: netlink: Flow key attr not present in new flow. [ 837.977076][T19299] openvswitch: netlink: Flow key attr not present in new flow. [ 838.319894][T19308] netlink: 'syz.0.4078': attribute type 3 has an invalid length. [ 838.632047][T19321] siw: device registration error -23 [ 838.805805][T19329] openvswitch: netlink: Flow key attr not present in new flow. [ 839.899581][T19365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4102'. [ 839.899611][T19365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4102'. [ 840.428521][T19383] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4109'. [ 841.828922][T19411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4119'. [ 841.828951][T19411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4119'. [ 842.198990][T19418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 842.278124][T19426] netlink: 'syz.1.4126': attribute type 29 has an invalid length. [ 842.288142][T19426] netlink: 'syz.1.4126': attribute type 29 has an invalid length. [ 842.310256][T19426] netlink: 'syz.1.4126': attribute type 29 has an invalid length. [ 842.448940][T19433] netlink: 'syz.3.4130': attribute type 1 has an invalid length. [ 844.172736][T19469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4140'. [ 844.737370][T19485] netlink: 'syz.4.4145': attribute type 1 has an invalid length. [ 845.210351][T19496] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4151'. [ 846.687903][T19568] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4182'. [ 846.787941][T15765] Bluetooth: hci1: command 0x0406 tx timeout [ 848.019832][T19590] netlink: 'syz.3.4191': attribute type 10 has an invalid length. [ 848.019914][T19590] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4191'. [ 848.327711][T19597] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4193'. [ 848.597650][T19603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4195'. [ 848.597680][T19603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4195'. [ 850.417518][T19668] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4222'. [ 851.156423][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4232'. [ 851.209098][T19694] xt_nfacct: accounting object `syz0' does not exist [ 851.657750][T19716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4243'. [ 851.657775][T19716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4243'. [ 851.725999][T19719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4244'. [ 852.219637][T19728] xt_nfacct: accounting object `syz0' does not exist [ 852.650373][T19745] netlink: 'syz.2.4255': attribute type 3 has an invalid length. [ 852.750582][T19748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4257'. [ 853.014393][T19756] xt_nfacct: accounting object `syz0' does not exist [ 853.347371][T19755] netlink: 'syz.2.4259': attribute type 4 has an invalid length. [ 853.347440][T19755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4259'. [ 853.584489][T19780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4271'. [ 853.820487][T19784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4274'. [ 854.181454][T19799] netlink: 'syz.4.4280': attribute type 3 has an invalid length. [ 854.926452][T19840] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4299'. [ 854.945953][T19836] netlink: 'syz.3.4298': attribute type 3 has an invalid length. [ 857.417156][T19896] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4325'. [ 857.809268][T19912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4323'. [ 858.486187][T19944] xt_nfacct: accounting object `syz0' does not exist [ 858.717857][T19955] veth1_macvtap: left promiscuous mode [ 858.902152][T19963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4349'. [ 859.153618][T19967] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4351'. [ 859.366036][T19979] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4355'. [ 859.875736][T19997] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4365'. [ 860.021180][T20003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4363'. [ 860.302078][T20008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4370'. [ 861.443350][T20028] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4379'. [ 861.787636][T20040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4385'. [ 862.288723][T20063] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4396'. [ 862.327484][T20064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4395'. [ 863.196174][T20082] xt_nfacct: accounting object `syz0' does not exist [ 864.333669][T20123] xt_nfacct: accounting object `syz0' does not exist [ 864.961467][T20154] xt_nfacct: accounting object `syz0' does not exist [ 864.975936][T20153] __nla_validate_parse: 2 callbacks suppressed [ 864.975966][T20153] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4435'. [ 867.191728][T20196] xt_nfacct: accounting object `syz0' does not exist [ 867.263956][T15765] Bluetooth: hci3: command 0x0406 tx timeout [ 867.542565][T20208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4458'. [ 868.557750][T20256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4481'. [ 869.314175][T20278] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4491'. [ 870.130315][T20313] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4505'. [ 870.305355][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.305419][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.547050][T20326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4512'. [ 871.355662][T20365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4527'. [ 871.500162][T20372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4530'. [ 872.854106][T20400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4542'. [ 873.425382][T20413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4548'. [ 873.853866][T20431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4556'. [ 874.792836][T20463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4570'. [ 877.191380][T20501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4585'. [ 878.285593][T20537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4600'. [ 881.128907][T20573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4615'. [ 882.041341][T20606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4628'. [ 882.735166][T20628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4637'. [ 882.981475][T20637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4640'. [ 883.510854][T20654] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4650'. [ 883.611389][T20668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4654'. [ 884.005269][T20673] veth1_macvtap: left allmulticast mode [ 884.005960][T20673] veth1_macvtap: left promiscuous mode [ 884.420981][T20696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4668'. [ 885.502321][T20724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4681'. [ 886.388381][T20749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4691'. [ 886.664174][T20764] xt_nfacct: accounting object `syz0' does not exist [ 887.228419][T20777] netlink: 'syz.2.4703': attribute type 2 has an invalid length. [ 887.228451][T20777] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.4703'. [ 887.743218][ T5644] Bluetooth: hci0: command 0x0406 tx timeout [ 887.786172][T20788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4709'. [ 888.048838][T20805] netlink: 'syz.1.4715': attribute type 2 has an invalid length. [ 888.048871][T20805] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.4715'. [ 888.078108][T20803] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4714'. [ 888.675140][T20827] netlink: 'syz.3.4725': attribute type 2 has an invalid length. [ 888.776211][T20831] netlink: 'syz.2.4729': attribute type 2 has an invalid length. [ 888.776247][T20831] netlink: 61203 bytes leftover after parsing attributes in process `syz.2.4729'. [ 889.481490][T20863] netlink: 'syz.0.4742': attribute type 2 has an invalid length. [ 889.481516][T20863] netlink: 61203 bytes leftover after parsing attributes in process `syz.0.4742'. [ 889.605689][T20867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4743'. [ 889.656914][T20867] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4743'. [ 889.756824][T20869] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4745'. [ 890.384401][T20902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4760'. [ 890.437111][T20902] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4760'. [ 892.829594][T20985] __nla_validate_parse: 2 callbacks suppressed [ 892.829624][T20985] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4792'. [ 897.983357][ T5644] Bluetooth: hci2: command 0x0406 tx timeout [ 899.760005][T21075] netlink: 'syz.2.4826': attribute type 9 has an invalid length. [ 902.460486][T21104] netlink: 'syz.0.4839': attribute type 2 has an invalid length. [ 903.082385][T21114] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4845'. [ 903.271061][T21127] sch_tbf: peakrate 6 is lower than or equals to rate 3604916063403629709 ! [ 903.339463][T21129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4851'. [ 903.625680][T21133] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4852'. [ 904.160332][T21157] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4862'. [ 904.282320][T21160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4864'. [ 904.369918][T21164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4865'. [ 904.515770][T21169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4868'. [ 904.596365][T21169] netlink: 'syz.4.4868': attribute type 11 has an invalid length. [ 904.596465][T21169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4868'. [ 904.932977][T15765] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 904.933030][T15765] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:10:41 sid 0x00 [ 905.017068][T21188] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4877'. [ 905.763030][T21215] netlink: 'syz.4.4885': attribute type 10 has an invalid length. [ 905.922792][T21212] xt_connbytes: Forcing CT accounting to be enabled [ 906.639168][T21216] veth1_macvtap: left promiscuous mode [ 906.736950][T21215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 907.354785][T21243] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4901'. [ 908.383984][T21278] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4917'. [ 908.845651][T21292] veth1_macvtap: left promiscuous mode [ 909.202141][T21310] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4932'. [ 911.067738][T21343] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4946'. [ 911.411418][T21351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4949'. [ 911.906666][T21369] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4958'. [ 912.049437][T21378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4962'. [ 912.768383][T21405] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4973'. [ 912.902326][T21409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4974'. [ 913.073209][T21411] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4977'. [ 913.581567][T21435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4988'. [ 913.789269][T21437] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4990'. [ 914.135358][T21452] netlink: 'syz.1.4995': attribute type 2 has an invalid length. [ 915.758616][T21498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5014'. [ 915.942882][T21500] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5016'. [ 917.190136][T21538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5032'. [ 919.352965][T21576] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5047'. [ 919.577922][T21581] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5048'. [ 919.807276][T21588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5050'. [ 919.988818][T21600] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5057'. [ 920.995028][T21647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5076'. [ 921.658194][T21641] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5074'. [ 922.266244][T21680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5089'. [ 922.311887][T21684] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5091'. [ 923.198897][T21696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5093'. [ 923.751581][T21720] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5103'. [ 924.855472][T21734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5110'. [ 929.440891][T21749] netlink: 'syz.1.5116': attribute type 3 has an invalid length. [ 929.478498][T21749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5116'. [ 929.645606][T21754] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5117'. [ 929.729271][T21761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5121'. [ 929.754520][T21764] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5123'. [ 930.239290][T21784] netlink: 'syz.0.5130': attribute type 19 has an invalid length. [ 930.630532][T21797] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5134'. [ 930.884898][T21810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5136'. [ 931.746228][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.746303][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.661128][T21826] netlink: 'syz.2.5146': attribute type 3 has an invalid length. [ 932.902395][T21827] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5148'. [ 933.759501][T21855] netlink: 'syz.2.5160': attribute type 3 has an invalid length. [ 933.794393][T21853] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5159'. [ 933.824364][T21853] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5159'. [ 934.224134][T21874] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5169'. [ 934.224214][T21874] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5169'. [ 934.527759][T21885] netlink: 'syz.3.5173': attribute type 3 has an invalid length. [ 934.718618][T21891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5176'. [ 934.742929][T21891] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5176'. [ 934.814338][T21896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5178'. [ 935.456891][T21915] netlink: 'syz.1.5187': attribute type 3 has an invalid length. [ 935.639752][T21925] __nla_validate_parse: 3 callbacks suppressed [ 935.639781][T21925] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5192'. [ 936.151569][T21950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5204'. [ 936.198946][T21942] netlink: 'syz.4.5200': attribute type 4 has an invalid length. [ 936.211421][T21942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5200'. [ 936.358217][T21961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5208'. [ 936.376075][T21961] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5208'. [ 936.557848][T21966] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5211'. [ 936.557880][T21966] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 936.911301][T21981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5219'. [ 936.938411][T21978] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5217'. [ 937.137138][T21991] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5224'. [ 937.137169][T21991] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 937.184570][T21988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5221'. [ 937.739657][T22019] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 939.051888][T22067] netlink: 'syz.4.5257': attribute type 19 has an invalid length. [ 940.087958][T22101] netlink: 'syz.4.5270': attribute type 19 has an invalid length. [ 941.025143][T22140] __nla_validate_parse: 8 callbacks suppressed [ 941.025183][T22140] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5286'. [ 941.197977][T22151] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5290'. [ 941.317914][T22150] netlink: 'syz.4.5291': attribute type 4 has an invalid length. [ 941.317946][T22150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5291'. [ 941.364482][T22157] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5293'. [ 941.551765][T22165] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5299'. [ 941.692826][T22176] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5303'. [ 941.896526][T22182] netlink: 'syz.1.5307': attribute type 4 has an invalid length. [ 941.896551][T22182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5307'. [ 941.975066][T22186] xt_nfacct: accounting object `sy' does not exist [ 942.084561][T22192] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5312'. [ 942.217635][T22195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5310'. [ 942.324158][T22199] netlink: 'syz.2.5313': attribute type 2 has an invalid length. [ 942.347040][T22202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5315'. [ 942.863548][T22218] xt_nfacct: accounting object `s' does not exist [ 942.929471][T22214] netlink: 'syz.0.5321': attribute type 4 has an invalid length. [ 943.439493][T22245] xt_nfacct: accounting object `s' does not exist [ 943.592675][T22251] netlink: 'syz.0.5339': attribute type 4 has an invalid length. [ 944.062150][T22275] xt_nfacct: accounting object `s' does not exist [ 944.356209][T22286] netlink: 'syz.1.5355': attribute type 4 has an invalid length. [ 945.274069][T22333] netlink: 'syz.2.5376': attribute type 10 has an invalid length. [ 945.275493][T22333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 948.290726][T22343] __nla_validate_parse: 10 callbacks suppressed [ 948.290928][T22343] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5381'. [ 948.390303][T22347] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5384'. [ 949.216665][T22371] netlink: 'syz.3.5391': attribute type 10 has an invalid length. [ 950.034017][T22371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 950.034306][T22377] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5394'. [ 950.318568][T22383] netlink: 'syz.4.5397': attribute type 29 has an invalid length. [ 950.940597][T22416] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5407'. [ 951.069369][T22420] netlink: 'syz.4.5408': attribute type 19 has an invalid length. [ 951.336975][T22431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 951.339833][T22431] netlink: 'syz.0.5413': attribute type 29 has an invalid length. [ 952.748702][T22461] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5424'. [ 953.269887][T22476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 953.310400][T22476] netlink: 'syz.2.5433': attribute type 29 has an invalid length. [ 953.388148][T22484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5437'. [ 953.501352][T22486] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5439'. [ 953.538238][T22490] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5440'. [ 954.432594][T22513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5449'. [ 954.655846][T22524] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5454'. [ 954.697418][T22518] netlink: 'syz.0.5451': attribute type 61 has an invalid length. [ 954.698430][T22518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5451'. [ 955.389431][T22544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5462'. [ 955.592534][T22546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 955.700303][T22546] netlink: 'syz.1.5461': attribute type 29 has an invalid length. [ 958.425518][T22581] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5468'. [ 959.145311][T15765] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 959.145352][T15765] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:10:41 sid 0x00 [ 959.636243][T22636] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5493'. [ 959.791930][T22632] netlink: 'syz.1.5492': attribute type 29 has an invalid length. [ 960.062569][T22647] netlink: 'syz.2.5498': attribute type 4 has an invalid length. [ 960.062655][T22647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5498'. [ 960.922149][T22684] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 961.196210][T22694] syzkaller0: entered promiscuous mode [ 961.196240][T22694] syzkaller0: entered allmulticast mode [ 962.240106][T22708] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5523'. [ 965.195549][T22711] netlink: 'syz.2.5524': attribute type 2 has an invalid length. [ 966.814131][T22739] netlink: 'syz.4.5537': attribute type 2 has an invalid length. [ 968.701079][T22761] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5547'. [ 970.866791][T22776] netlink: 763 bytes leftover after parsing attributes in process `syz.0.5554'. [ 971.289595][T22815] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5573'. [ 971.393797][T22819] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5574'. [ 972.113050][T22852] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5589'. [ 972.285787][T22859] netlink: 340 bytes leftover after parsing attributes in process `syz.0.5592'. [ 972.285859][T22859] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5592'. [ 972.782022][T22881] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5604'. [ 974.350652][T22913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5617'. [ 974.569205][T22914] netlink: 'syz.3.5616': attribute type 4 has an invalid length. [ 974.569350][T22914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5616'. [ 975.746472][T22950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5632'. [ 975.997695][T22955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5633'. [ 976.107504][T22956] netlink: 'syz.3.5635': attribute type 29 has an invalid length. [ 976.246720][T22963] netlink: 'syz.4.5634': attribute type 19 has an invalid length. [ 976.308149][T22957] netlink: 'syz.2.5636': attribute type 4 has an invalid length. [ 976.314676][T22957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5636'. [ 977.444454][T22991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5647'. [ 980.793003][T23021] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5655'. [ 980.823568][T23019] netlink: 'syz.1.5653': attribute type 19 has an invalid length. [ 981.101300][T23035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5660'. [ 981.101364][T23035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5660'. [ 981.101390][T23035] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5660'. [ 981.120041][T23036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5662'. [ 981.142351][T23035] netlink: 'syz.0.5660': attribute type 2 has an invalid length. [ 981.142447][T23035] netlink: 'syz.0.5660': attribute type 1 has an invalid length. [ 981.142480][T23035] netlink: 58379 bytes leftover after parsing attributes in process `syz.0.5660'. [ 981.387625][T23043] netlink: 'syz.3.5664': attribute type 61 has an invalid length. [ 981.387658][T23043] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5664'. [ 985.237578][T23071] netlink: 'syz.3.5673': attribute type 19 has an invalid length. [ 985.512198][T23080] netlink: 'syz.0.5676': attribute type 61 has an invalid length. [ 985.512230][T23080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5676'. [ 986.751555][T23094] netlink: 'syz.2.5680': attribute type 4 has an invalid length. [ 986.751603][T23094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5680'. [ 988.389940][T23107] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5685'. [ 988.471482][T23109] netlink: 'syz.1.5687': attribute type 10 has an invalid length. [ 988.538417][T23109] netlink: 'syz.1.5687': attribute type 21 has an invalid length. [ 988.538805][T23109] netlink: 'syz.1.5687': attribute type 3 has an invalid length. [ 988.538833][T23109] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5687'. [ 988.675167][T23109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5687'. [ 988.676067][T23119] netlink: 'syz.3.5691': attribute type 19 has an invalid length. [ 989.590593][T23132] netlink: 'syz.3.5698': attribute type 4 has an invalid length. [ 989.590761][T23132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5698'. [ 992.248258][T23154] tmpfs: Bad value for 'gid' [ 992.248329][T23154] tmpfs: Bad value for 'gid' [ 992.815893][T23166] netlink: 'syz.1.5706': attribute type 19 has an invalid length. [ 993.186662][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.186748][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.092493][T23192] netlink: 'syz.1.5718': attribute type 3 has an invalid length. [ 994.121531][T23189] netlink: 'syz.2.5715': attribute type 4 has an invalid length. [ 994.121564][T23189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5715'. [ 994.516211][T23199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5721'. [ 994.516282][T23199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5721'. [ 994.516812][T23203] netlink: 'syz.2.5722': attribute type 61 has an invalid length. [ 994.516833][T23203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5722'. [ 994.573591][T23205] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5723'. [ 994.578029][T23204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5724'. [ 994.672513][T23204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5724'. [ 994.952432][T23214] netlink: 'syz.0.5727': attribute type 46 has an invalid length. [ 995.010066][T23219] netlink: 'syz.1.5730': attribute type 3 has an invalid length. [ 995.089418][T23223] netlink: 4520 bytes leftover after parsing attributes in process `syz.1.5732'. [ 995.089448][T23223] netlink: 4520 bytes leftover after parsing attributes in process `syz.1.5732'. [ 995.211648][T23225] netlink: 'syz.1.5735': attribute type 61 has an invalid length. [ 995.211680][T23225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5735'. [ 995.542867][T23227] netlink: 'syz.4.5733': attribute type 4 has an invalid length. [ 995.929552][T23246] netlink: 'syz.4.5742': attribute type 3 has an invalid length. [ 996.330622][T23255] netlink: 'syz.1.5746': attribute type 61 has an invalid length. [ 1000.894774][T23326] validate_nla: 2 callbacks suppressed [ 1000.894825][T23326] netlink: 'syz.4.5768': attribute type 4 has an invalid length. [ 1000.894960][T23326] __nla_validate_parse: 7 callbacks suppressed [ 1000.894993][T23326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5768'. [ 1000.940651][T23337] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5772'. [ 1001.060555][T23336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5773'. [ 1001.079634][T23341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5775'. [ 1001.242094][T23346] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5777'. [ 1001.390923][T23354] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5780'. [ 1001.679793][T23365] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5785'. [ 1001.751886][T23369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5788'. [ 1002.166664][T23366] netlink: 'syz.3.5787': attribute type 4 has an invalid length. [ 1002.166749][T23366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5787'. [ 1002.216898][T23379] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 1002.271037][T23381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5793'. [ 1003.157611][T23411] netlink: 'syz.3.5806': attribute type 4 has an invalid length. [ 1003.274222][T23413] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 1005.456570][T23450] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 1005.628039][T23447] netlink: 'syz.0.5821': attribute type 4 has an invalid length. [ 1006.227364][T23465] __nla_validate_parse: 11 callbacks suppressed [ 1006.227455][T23465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5829'. [ 1006.278810][T23468] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1006.297201][T23468] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1006.309780][T23468] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1006.329163][T23468] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1006.332694][T23468] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1008.140341][T23507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5842'. [ 1008.241430][ T1171] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.383337][T23468] Bluetooth: hci4: command tx timeout [ 1008.645975][T23515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5845'. [ 1008.682437][ T1171] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.850860][T23519] netlink: 'syz.2.5843': attribute type 19 has an invalid length. [ 1009.324513][T23466] rxe_eth0 speed is unknown, defaulting to 1000 [ 1009.539521][ T1171] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.924597][ T1171] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.215950][T23466] lo speed is unknown, defaulting to 1000 [ 1010.284915][T23540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5853'. [ 1010.463529][T23468] Bluetooth: hci4: command tx timeout [ 1010.686626][T23548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5854'. [ 1011.262336][ T1171] bridge0: port 3(batadv0) entered disabled state [ 1011.308733][ T1171] bridge_slave_1: left allmulticast mode [ 1011.308767][ T1171] bridge_slave_1: left promiscuous mode [ 1011.309016][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.369736][ T1171] bridge_slave_0: left allmulticast mode [ 1011.369774][ T1171] bridge_slave_0: left promiscuous mode [ 1011.387773][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.579677][T23565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5857'. [ 1011.966848][T23576] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5860'. [ 1012.237420][T23583] netlink: 'syz.2.5861': attribute type 19 has an invalid length. [ 1012.575379][T23468] Bluetooth: hci4: command tx timeout [ 1012.672168][ T1171] team0: Port device geneve1 removed [ 1012.764390][ T1171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1012.804714][ T158] smbdirect: ib_dev[syz1] removed [ 1012.843963][ T1171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1012.868521][ T1171] bond0 (unregistering): Released all slaves [ 1012.912480][T23594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5865'. [ 1013.655827][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1014.623878][T23468] Bluetooth: hci4: command tx timeout [ 1015.428153][T23466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.428328][T23466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.428511][T23466] bridge_slave_0: entered allmulticast mode [ 1015.431998][T23466] bridge_slave_0: entered promiscuous mode [ 1015.455494][T23466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.455956][T23466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.456533][T23466] bridge_slave_1: entered allmulticast mode [ 1015.477506][T23466] bridge_slave_1: entered promiscuous mode [ 1015.690975][T23643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5879'. [ 1015.720492][T23640] netlink: 'syz.2.5877': attribute type 19 has an invalid length. [ 1016.015624][T23466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.080504][T23466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.481133][T23466] team0: Port device team_slave_0 added [ 1016.499691][T23466] team0: Port device team_slave_1 added [ 1016.742260][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1016.780152][T23466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.780218][T23466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.780255][T23466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.848915][T23466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.848936][T23466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.848967][T23466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.309537][T23466] hsr_slave_0: entered promiscuous mode [ 1017.322242][T23466] hsr_slave_1: entered promiscuous mode [ 1017.335510][T23466] debugfs: 'hsr0' already exists in 'hsr' [ 1017.335545][T23466] Cannot create hsr debugfs directory [ 1017.392006][ T1171] hsr_slave_0: left promiscuous mode [ 1017.422417][ T1171] hsr_slave_1: left promiscuous mode [ 1017.435059][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1017.435097][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.462013][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1017.462045][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.521304][ T1171] veth0_macvtap: left promiscuous mode [ 1017.521646][ T1171] veth1_vlan: left promiscuous mode [ 1017.527377][ T1171] veth0_vlan: left promiscuous mode [ 1017.820375][T23696] netlink: 'syz.0.5892': attribute type 19 has an invalid length. [ 1018.534132][T23714] netlink: 'syz.1.5902': attribute type 1 has an invalid length. [ 1018.534289][T23714] netlink: 58379 bytes leftover after parsing attributes in process `syz.1.5902'. [ 1018.604644][ T1171] team0 (unregistering): Port device team_slave_1 removed [ 1018.642377][ T1171] team0 (unregistering): Port device team_slave_0 removed [ 1020.587531][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1021.571283][T23785] netlink: 'syz.0.5923': attribute type 19 has an invalid length. [ 1022.451190][T23466] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1022.479660][T23466] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1022.494022][T23466] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1022.530738][T23466] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1022.544395][T23466] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1022.579518][T23466] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1022.581567][T23466] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1022.907782][T23466] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1023.225306][T23466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.290355][T23849] netlink: 'syz.1.5940': attribute type 19 has an invalid length. [ 1023.310439][T23466] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.340484][T23846] lo speed is unknown, defaulting to 1000 [ 1023.438003][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.438146][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.478669][T23846] lo speed is unknown, defaulting to 1000 [ 1023.518954][T23853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5941'. [ 1023.519071][T23853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5941'. [ 1023.519107][T23853] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5941'. [ 1023.548857][T23846] lo speed is unknown, defaulting to 1000 [ 1023.590306][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.590435][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.682574][T23853] netlink: 'syz.3.5941': attribute type 2 has an invalid length. [ 1023.682692][T23853] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.5941'. [ 1024.775296][ T5779] lo speed is unknown, defaulting to 1000 [ 1024.783155][T23846] infiniband syz2: set active [ 1024.783180][T23846] infiniband syz2: added lo [ 1024.788573][T23846] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1024.791408][T23846] infiniband syz2: Couldn't open port 1 [ 1024.791666][T23846] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1024.791704][T23846] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1024.791761][T23846] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1024.902577][T23846] RDS/IB: syz2: added [ 1024.902645][T23846] smc: adding ib device syz2 with port count 1 [ 1024.902669][T23846] smc: ib device syz2 port 1 has no pnetid [ 1024.904038][T23846] lo speed is unknown, defaulting to 1000 [ 1024.927441][ T5779] lo speed is unknown, defaulting to 1000 [ 1025.061803][T23468] Bluetooth: hci1: unexpected event 0x10 length: 151 > 1 [ 1025.064286][T15765] Bluetooth: hci1: hardware error 0x00 [ 1025.622407][T23846] lo speed is unknown, defaulting to 1000 [ 1025.644506][T23911] netlink: 'syz.1.5953': attribute type 19 has an invalid length. [ 1025.707648][T23466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.731521][T23914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5954'. [ 1025.731558][T23914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5954'. [ 1025.731581][T23914] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5954'. [ 1025.877420][T23914] netlink: 'syz.0.5954': attribute type 2 has an invalid length. [ 1025.882413][T23914] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.5954'. [ 1026.015461][T23846] lo speed is unknown, defaulting to 1000 [ 1026.611232][T23846] lo speed is unknown, defaulting to 1000 [ 1026.836384][T23466] veth0_vlan: entered promiscuous mode [ 1026.869409][T23466] veth1_vlan: entered promiscuous mode [ 1026.884800][T23943] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5961'. [ 1026.955540][T23466] veth0_macvtap: entered promiscuous mode [ 1026.973520][T23466] veth1_macvtap: entered promiscuous mode [ 1027.017632][T23466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.067812][T23466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.119204][T23846] lo speed is unknown, defaulting to 1000 [ 1027.146368][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.151608][ T63] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.151744][ T63] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.151860][ T63] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.184300][T15765] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1027.465366][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.465391][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.561869][T23956] netlink: 'syz.3.5965': attribute type 19 has an invalid length. [ 1027.619038][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.619063][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.265956][T23977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.321975][T23968] netlink: 'syz.1.5967': attribute type 29 has an invalid length. [ 1028.738867][T23990] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5973'. [ 1028.802072][T23987] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.5972'. [ 1029.646708][T23468] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1029.653565][T23468] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1029.654570][T23468] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1029.656441][T23468] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1029.660262][T23468] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1030.043471][T24017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5978'. [ 1030.043507][T24017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5978'. [ 1030.043531][T24017] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5978'. [ 1030.182025][T24011] netlink: 'syz.0.5978': attribute type 2 has an invalid length. [ 1030.182103][T24011] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.5978'. [ 1030.305987][T24021] netlink: 'syz.4.5980': attribute type 19 has an invalid length. [ 1031.100780][ T1020] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1031.100822][ T1020] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.375516][ T1020] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1031.375560][ T1020] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.552919][T24058] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5988'. [ 1031.739811][ T1020] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1031.739854][ T1020] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.747884][T15765] Bluetooth: hci5: command tx timeout [ 1031.926348][ T1020] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1031.926392][ T1020] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.979136][T24070] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5991'. [ 1032.023431][T24007] rxe_eth0 speed is unknown, defaulting to 1000 [ 1032.229897][T24077] netlink: 'syz.3.5995': attribute type 19 has an invalid length. [ 1032.461857][ T1020] bridge_slave_1: left allmulticast mode [ 1032.461888][ T1020] bridge_slave_1: left promiscuous mode [ 1032.462188][ T1020] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.522692][ T1020] bridge_slave_0: left allmulticast mode [ 1032.532178][ T1020] bridge_slave_0: left promiscuous mode [ 1032.532433][ T1020] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.875023][T24095] netlink: 'syz.4.5999': attribute type 2 has an invalid length. [ 1032.875080][T24095] netlink: 'syz.4.5999': attribute type 1 has an invalid length. [ 1032.875115][T24095] netlink: 58379 bytes leftover after parsing attributes in process `syz.4.5999'. [ 1033.036978][T24098] netlink: 'syz.0.6000': attribute type 46 has an invalid length. [ 1033.177349][T24105] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6001'. [ 1033.336899][ T1020] team0: Port device geneve1 removed [ 1033.418267][ T1020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1033.440838][ T1020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1033.459029][ T1020] bond0 (unregistering): Released all slaves [ 1033.512055][T24007] lo speed is unknown, defaulting to 1000 [ 1033.583723][ T1020] : left promiscuous mode [ 1033.824097][T15765] Bluetooth: hci5: command tx timeout [ 1033.929335][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1034.010690][T24120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6005'. [ 1034.414986][T24007] lo speed is unknown, defaulting to 1000 [ 1035.915534][T15765] Bluetooth: hci5: command tx timeout [ 1036.890291][T24174] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6021'. [ 1037.537383][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1037.990113][T15765] Bluetooth: hci5: command tx timeout [ 1038.248408][T24007] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.248521][T24007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.248706][T24007] bridge_slave_0: entered allmulticast mode [ 1038.280103][T24007] bridge_slave_0: entered promiscuous mode [ 1038.301794][T24007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.303190][T24007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.303483][T24007] bridge_slave_1: entered allmulticast mode [ 1038.337156][T24007] bridge_slave_1: entered promiscuous mode [ 1038.633059][T24007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.660060][T24007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1038.958747][T24007] team0: Port device team_slave_0 added [ 1038.978531][T24007] team0: Port device team_slave_1 added [ 1039.451110][ T1020] hsr_slave_0: left promiscuous mode [ 1039.475179][ T1020] hsr_slave_1: left promiscuous mode [ 1039.476564][ T1020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1039.476589][ T1020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1039.530960][ T1020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1039.530989][ T1020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1039.604978][ T1020] veth0_macvtap: left promiscuous mode [ 1039.605150][ T1020] veth1_vlan: left promiscuous mode [ 1039.605189][ T1020] veth0_vlan: left promiscuous mode [ 1039.979712][T24223] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6034'. [ 1041.156631][ T1020] team0 (unregistering): Port device team_slave_1 removed [ 1041.186021][ T1020] team0 (unregistering): Port device team_slave_0 removed [ 1041.474862][T24258] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6046'. [ 1041.590250][ T63] smc: removing ib device sz1 [ 1041.651313][T24007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.651336][T24007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.651369][T24007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.709802][ T63] smbdirect: ib_dev[sz1] removed [ 1041.721942][T15398] infiniband sz1: ib_query_port failed (-19) [ 1041.725459][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1041.802531][T24007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.802553][T24007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.802583][T24007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.537424][T24007] hsr_slave_0: entered promiscuous mode [ 1042.541570][T24007] hsr_slave_1: entered promiscuous mode [ 1043.694066][T24301] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6058'. [ 1044.038332][T24305] netlink: 'syz.4.6059': attribute type 46 has an invalid length. [ 1044.350385][ T5296] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1045.189581][T24342] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6071'. [ 1045.621380][T24349] netlink: 'syz.0.6074': attribute type 46 has an invalid length. [ 1045.862218][T24358] netlink: 'syz.3.6072': attribute type 2 has an invalid length. [ 1045.862242][T24358] netlink: 65043 bytes leftover after parsing attributes in process `syz.3.6072'. [ 1046.007575][T24354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6072'. [ 1046.007608][T24354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6072'. [ 1046.007629][T24354] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6072'. [ 1046.713223][T24007] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1046.776901][T24007] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1046.778582][T24007] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1046.825627][T24007] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1046.826622][T24007] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1046.856317][T24007] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1046.857598][T24007] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1046.881720][T24007] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1047.073552][T24398] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6085'. [ 1047.109101][T24007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1047.157458][T24007] 8021q: adding VLAN 0 to HW filter on device team0 [ 1047.202487][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.202629][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1047.258577][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.258687][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.857503][T24007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1049.039828][T24007] veth0_vlan: entered promiscuous mode [ 1049.068258][T24007] veth1_vlan: entered promiscuous mode [ 1049.943692][T24007] veth0_macvtap: entered promiscuous mode [ 1049.978251][T24007] veth1_macvtap: entered promiscuous mode [ 1050.024813][T24007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1050.050553][T24007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1050.140299][ T158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.237659][ T1020] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.238172][ T1020] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.238225][ T1020] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.295246][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.295284][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.395332][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.395359][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.791602][T24516] netlink: 'syz.0.6113': attribute type 1 has an invalid length. [ 1054.182918][T24010] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1054.208276][T24010] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1054.227207][T24010] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1054.445147][T24010] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1054.531851][T24010] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1055.132040][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.132113][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.188296][T24010] Bluetooth: hci1: command tx timeout [ 1058.834870][T24567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6122'. [ 1058.852428][T24567] netlink: 340 bytes leftover after parsing attributes in process `syz.3.6122'. [ 1058.852459][T24567] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6122'. [ 1059.298698][T24010] Bluetooth: hci1: command tx timeout [ 1060.139644][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.585048][T24547] rxe_eth0 speed is unknown, defaulting to 1000 [ 1065.751420][T24547] lo speed is unknown, defaulting to 1000 [ 1072.354134][T24010] Bluetooth: hci1: command tx timeout [ 1073.347671][T24547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.347813][T24547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.350989][T24547] bridge_slave_0: entered allmulticast mode [ 1073.381502][T24547] bridge_slave_0: entered promiscuous mode [ 1073.398353][T24547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.398493][T24547] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.401997][T24547] bridge_slave_1: entered allmulticast mode [ 1073.434821][T24547] bridge_slave_1: entered promiscuous mode [ 1073.588031][T24547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1074.423693][T15765] Bluetooth: hci1: command tx timeout [ 1078.363428][T24547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.911048][T24010] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1083.203597][T24010] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1083.253022][T24010] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1083.298300][ T5644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1083.331418][ T5644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1083.348821][ T5644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1083.352126][T23468] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1083.913981][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1083.940477][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.970262][T23468] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1084.105571][ T5644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1084.536600][ T5644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1084.539572][ T5644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1084.540261][ T5644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1084.546397][ T5644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1084.547077][ T5644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1084.662979][T24547] team0: Port device team_slave_0 added [ 1084.673020][T24547] team0: Port device team_slave_1 added [ 1084.793028][T24614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6133'. [ 1085.047323][T24634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1085.696156][T24547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.696178][T24547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.696225][T24547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.698795][T24547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.698812][T24547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.698842][T24547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.276808][ T5644] Bluetooth: hci0: command tx timeout [ 1086.741580][ T5644] Bluetooth: hci2: command tx timeout [ 1086.841894][ T5644] Bluetooth: hci3: command tx timeout [ 1087.450209][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.525270][T24547] hsr_slave_0: entered promiscuous mode [ 1087.526385][T24547] hsr_slave_1: entered promiscuous mode [ 1087.527209][T24547] debugfs: 'hsr0' already exists in 'hsr' [ 1087.527232][T24547] Cannot create hsr debugfs directory [ 1088.182950][T24620] rxe_eth0 speed is unknown, defaulting to 1000 [ 1088.343305][ T5644] Bluetooth: hci0: command tx timeout [ 1088.653384][T24608] rxe_eth0 speed is unknown, defaulting to 1000 [ 1088.660432][T24620] lo speed is unknown, defaulting to 1000 [ 1088.715560][ T5644] Bluetooth: hci2: command tx timeout [ 1088.883731][ T5644] Bluetooth: hci3: command tx timeout [ 1089.790087][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.841656][T24616] rxe_eth0 speed is unknown, defaulting to 1000 [ 1089.987205][T24608] lo speed is unknown, defaulting to 1000 [ 1090.384507][ T5644] Bluetooth: hci0: command tx timeout [ 1090.833537][ T5644] Bluetooth: hci2: command tx timeout [ 1090.908406][T24616] lo speed is unknown, defaulting to 1000 [ 1090.989919][ T5644] Bluetooth: hci3: command tx timeout [ 1091.059271][T24670] netlink: 340 bytes leftover after parsing attributes in process `syz.1.6143'. [ 1091.059304][T24670] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6143'. [ 1091.130077][T24668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6143'. [ 1092.158417][T24620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.158514][T24620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.158639][T24620] bridge_slave_0: entered allmulticast mode [ 1092.160104][T24620] bridge_slave_0: entered promiscuous mode [ 1092.165869][T24620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.166144][T24620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.166543][T24620] bridge_slave_1: entered allmulticast mode [ 1092.169346][T24620] bridge_slave_1: entered promiscuous mode [ 1092.463421][ T5644] Bluetooth: hci0: command tx timeout [ 1092.619207][T24620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.622602][T24620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1092.883212][ T5644] Bluetooth: hci2: command tx timeout [ 1093.075111][ T5644] Bluetooth: hci3: command tx timeout [ 1093.098369][ T13] bridge_slave_1: left allmulticast mode [ 1093.098392][ T13] bridge_slave_1: left promiscuous mode [ 1093.098553][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.100561][ T13] bridge_slave_0: left allmulticast mode [ 1093.100588][ T13] bridge_slave_0: left promiscuous mode [ 1093.101921][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.931194][ T13] team0: Port device geneve1 removed [ 1093.961622][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.967338][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.986609][ T13] bond0 (unregistering): Released all slaves [ 1094.315780][T24620] team0: Port device team_slave_0 added [ 1094.318558][T24620] team0: Port device team_slave_1 added [ 1094.700095][T24697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6150'. [ 1094.721028][T24620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.721048][T24620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.721089][T24620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.723244][T24620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.723263][T24620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.723294][T24620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.731929][T24697] netlink: 340 bytes leftover after parsing attributes in process `syz.1.6150'. [ 1094.731974][T24697] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6150'. [ 1095.332796][T24620] hsr_slave_0: entered promiscuous mode [ 1095.335553][T24620] hsr_slave_1: entered promiscuous mode [ 1095.337986][T24620] debugfs: 'hsr0' already exists in 'hsr' [ 1095.338008][T24620] Cannot create hsr debugfs directory [ 1096.545894][T24608] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.546128][T24608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.546271][T24608] bridge_slave_0: entered allmulticast mode [ 1096.553352][T24608] bridge_slave_0: entered promiscuous mode [ 1096.618313][T24616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.618448][T24616] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.618603][T24616] bridge_slave_0: entered allmulticast mode [ 1096.638629][T24616] bridge_slave_0: entered promiscuous mode [ 1096.660658][T24608] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.660808][T24608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.661293][T24608] bridge_slave_1: entered allmulticast mode [ 1096.693191][T24608] bridge_slave_1: entered promiscuous mode [ 1096.872291][T24616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.872416][T24616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.889284][T24616] bridge_slave_1: entered allmulticast mode [ 1096.915053][T24616] bridge_slave_1: entered promiscuous mode [ 1097.218176][T24608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.303897][T24608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1097.331278][T24616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.077382][T24616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1098.149614][T24616] team0: Port device team_slave_0 added [ 1098.157454][T24616] team0: Port device team_slave_1 added [ 1098.190183][T24616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1098.190205][T24616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.190235][T24616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1098.192946][T24616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1098.192965][T24616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.192994][T24616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.244088][T24616] hsr_slave_0: entered promiscuous mode [ 1098.245196][T24616] hsr_slave_1: entered promiscuous mode [ 1098.245933][T24616] debugfs: 'hsr0' already exists in 'hsr' [ 1098.245954][T24616] Cannot create hsr debugfs directory [ 1098.893039][T24608] team0: Port device team_slave_0 added [ 1098.922910][T24608] team0: Port device team_slave_1 added [ 1099.429720][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1099.504487][T24608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1099.504510][T24608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1099.504538][T24608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1099.584466][T24608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1099.584491][T24608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1099.584523][T24608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.320914][T24608] hsr_slave_0: entered promiscuous mode [ 1102.331297][T24608] hsr_slave_1: entered promiscuous mode [ 1102.332198][T24608] debugfs: 'hsr0' already exists in 'hsr' [ 1102.332220][T24608] Cannot create hsr debugfs directory [ 1102.413041][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1106.221171][ T13] hsr_slave_0: left promiscuous mode [ 1106.221999][ T13] hsr_slave_1: left promiscuous mode [ 1106.234396][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1106.234427][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1106.235446][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1106.235468][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1106.241886][ T13] veth0_macvtap: left promiscuous mode [ 1106.242056][ T13] veth1_vlan: left promiscuous mode [ 1106.242090][ T13] veth0_vlan: left promiscuous mode [ 1107.565770][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1107.578778][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1110.838853][T24547] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1110.854690][T24547] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1110.855746][T24547] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1110.859219][T24547] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1110.860270][T24547] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1110.877028][T24547] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1110.899556][T24547] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1111.329205][T24547] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1112.642313][T24620] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1112.693867][T24620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1112.695058][T24620] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1112.728224][T24620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1113.029046][T24616] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1113.350257][T24616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1113.360478][T24616] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1113.810891][T24616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1114.219918][T24620] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1114.224459][T24010] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1114.241585][T24010] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1114.242624][T24010] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1114.554571][T24620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1114.555752][T24620] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1114.601022][T24010] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1114.760790][T24010] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1115.547429][T24620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1115.548912][T24616] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1115.559277][T24616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1115.955070][T24616] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1116.008551][T24616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1116.526205][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.526269][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.062664][T24608] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1117.070962][T24608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1117.100040][T24608] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1117.117630][T24856] netlink: 'syz.1.6165': attribute type 19 has an invalid length. [ 1117.117659][T24856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6165'. [ 1117.118856][T24010] Bluetooth: hci4: command tx timeout [ 1117.120290][T24608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1117.121162][T24608] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1117.536429][T24608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1117.556813][T24608] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1117.564506][T24608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1117.720396][T24827] rxe_eth0 speed is unknown, defaulting to 1000 [ 1117.895371][T24620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1118.061014][T24620] 8021q: adding VLAN 0 to HW filter on device team0 [ 1118.086951][ T9701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.087080][ T9701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1118.162570][ T9701] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.162774][ T9701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.231103][T24616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1118.412794][T24608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1118.421719][T24616] 8021q: adding VLAN 0 to HW filter on device team0 [ 1118.479742][ T9701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.479902][ T9701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1118.569955][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.570085][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.623912][T24608] 8021q: adding VLAN 0 to HW filter on device team0 [ 1118.729887][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.730032][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1118.802367][T24827] lo speed is unknown, defaulting to 1000 [ 1118.828562][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.828692][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.226271][T24010] Bluetooth: hci4: command tx timeout [ 1121.330946][T24010] Bluetooth: hci4: command tx timeout [ 1121.551847][T24827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.554425][T24827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.554612][T24827] bridge_slave_0: entered allmulticast mode [ 1121.591310][T24827] bridge_slave_0: entered promiscuous mode [ 1121.619880][T24827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.620087][T24827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.620275][T24827] bridge_slave_1: entered allmulticast mode [ 1121.647538][T24827] bridge_slave_1: entered promiscuous mode [ 1121.791012][T24827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.819771][T24827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.972614][T24608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1122.003194][T24827] team0: Port device team_slave_0 added [ 1122.022520][T24827] team0: Port device team_slave_1 added [ 1122.161209][T24616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1122.385755][T24827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.385777][T24827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.385809][T24827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.451771][T24827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.451794][T24827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.451826][T24827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.775280][T24827] hsr_slave_0: entered promiscuous mode [ 1122.782113][T24827] hsr_slave_1: entered promiscuous mode [ 1122.801560][T24827] debugfs: 'hsr0' already exists in 'hsr' [ 1122.801589][T24827] Cannot create hsr debugfs directory [ 1123.365522][T24010] Bluetooth: hci4: command tx timeout [ 1123.569549][T24608] veth0_vlan: entered promiscuous mode [ 1123.623232][T24616] veth0_vlan: entered promiscuous mode [ 1123.651508][T24608] veth1_vlan: entered promiscuous mode [ 1123.686034][T24616] veth1_vlan: entered promiscuous mode [ 1123.807757][T24608] veth0_macvtap: entered promiscuous mode [ 1123.822309][T24616] veth0_macvtap: entered promiscuous mode [ 1123.842034][T24608] veth1_macvtap: entered promiscuous mode [ 1123.864173][T24616] veth1_macvtap: entered promiscuous mode [ 1123.934054][T24608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1123.969157][T24616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1123.987339][T24608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1124.024723][T24616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1124.906371][ T9701] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.906434][ T9701] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.906476][ T9701] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.906517][ T9701] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.906558][ T9701] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.906629][ T9701] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.906670][ T9701] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.906711][ T9701] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.786066][T24932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6170'. [ 1125.816231][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.149885][T24620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.510029][ T9701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.510053][ T9701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.655037][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.655064][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.940854][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.940877][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.956461][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.956485][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1127.348044][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.616783][T24620] veth0_vlan: entered promiscuous mode [ 1127.638465][T24620] veth1_vlan: entered promiscuous mode [ 1127.720194][T24620] veth0_macvtap: entered promiscuous mode [ 1127.737337][T24620] veth1_macvtap: entered promiscuous mode [ 1127.779920][T24620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1127.814817][T24620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1127.972499][ T1020] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.972630][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1127.972647][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1127.974391][ T1020] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.974559][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1127.974585][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.108670][T11135] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.109122][T11135] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.056069][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.531109][T24966] netlink: 'syz.7.6175': attribute type 4 has an invalid length. [ 1129.531152][T24966] netlink: 'syz.7.6175': attribute type 1 has an invalid length. [ 1129.531488][T24966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.878096][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.605001][T24992] netlink: 'syz.6.6181': attribute type 10 has an invalid length. [ 1134.605028][T24992] netlink: 2 bytes leftover after parsing attributes in process `syz.6.6181'. [ 1134.663918][T24992] team0: Device wg2 is of different type [ 1139.017084][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.060818][T25030] netlink: 'syz.5.6192': attribute type 10 has an invalid length. [ 1139.500266][T25034] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6193'. [ 1139.548429][T25030] mac80211_hwsim hwsim48 wlan0: entered allmulticast mode [ 1140.218551][T25030] team0: Port device wlan0 added [ 1140.251096][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.150437][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.549193][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.917634][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1148.925259][ T13] bridge_slave_1: left allmulticast mode [ 1148.925289][ T13] bridge_slave_1: left promiscuous mode [ 1148.925562][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.960912][ T13] bridge_slave_0: left allmulticast mode [ 1148.960943][ T13] bridge_slave_0: left promiscuous mode [ 1148.961231][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.525763][ T13] bridge_slave_1: left allmulticast mode [ 1149.525796][ T13] bridge_slave_1: left promiscuous mode [ 1149.526035][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.076521][ T13] bridge_slave_0: left allmulticast mode [ 1150.076555][ T13] bridge_slave_0: left promiscuous mode [ 1150.076800][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.949088][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1151.959539][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1151.961571][ T13] bond0 (unregistering): Released all slaves [ 1251.024833][ T5644] Bluetooth: hci5: command 0x0406 tx timeout [ 1251.069763][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1251.069946][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.118420][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 143s! [syz.5.6228:25165] [ 1301.118468][ C1] Modules linked in: [ 1301.118490][ C1] irq event stamp: 5677 [ 1301.134940][ C1] hardirqs last enabled at (5676): [] seqcount_lockdep_reader_access+0xa9/0x100 [ 1301.145742][ C1] hardirqs last disabled at (5677): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 1301.156024][ C1] softirqs last enabled at (1446): [] fpu_clone+0x340/0xaf0 [ 1301.165028][ C1] softirqs last disabled at (1483): [] __irq_exit_rcu+0xc6/0x220 [ 1301.174393][ C1] CPU: 1 UID: 0 PID: 25165 Comm: syz.5.6228 Not tainted syzkaller #0 PREEMPT(full) [ 1301.174422][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1301.174436][ C1] RIP: 0010:seqcount_lockdep_reader_access+0xec/0x100 [ 1301.174471][ C1] Code: 00 75 11 e8 66 63 13 00 4d 85 ff 75 16 e8 5c 63 13 00 eb 15 e8 55 63 13 00 e8 30 93 44 0a 4d 85 ff 74 ea e8 46 63 13 00 fb 5b <41> 5e 41 5f c3 cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 1301.174489][ C1] RSP: 0018:ffffc90000a08a60 EFLAGS: 00000246 [ 1301.174512][ C1] RAX: ffffffff81b592ea RBX: ffffffff9baa7798 RCX: ffff888022b8be80 [ 1301.174528][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 1301.174542][ C1] RBP: 0000000000000000 R08: 0000000000000100 R09: 1ffffffff22f8ef7 [ 1301.174555][ C1] R10: dffffc0000000000 R11: fffffbfff22f8ef8 R12: dffffc0000000000 [ 1301.174571][ C1] R13: ffff88803549b998 R14: ffffffff81b599a3 R15: 0000000000000200 [ 1301.174586][ C1] FS: 00007f2e21c126c0(0000) GS:ffff888123b51000(0000) knlGS:0000000000000000 [ 1301.174609][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1301.174623][ C1] CR2: 0000561f6a49ca38 CR3: 000000005f136000 CR4: 00000000003526f0 [ 1301.174641][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1301.174654][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1301.174668][ C1] Call Trace: [ 1301.174678][ C1] [ 1301.174694][ C1] ktime_get_with_offset+0x93/0x2d0 [ 1301.174749][ C1] mac80211_hwsim_tx_frame_no_nl+0x13d/0x1820 [ 1301.174811][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 1301.174877][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 1301.174902][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 1301.174940][ C1] ? __ieee80211_beacon_get+0x457/0x1920 [ 1301.174975][ C1] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 1301.175056][ C1] ? ieee80211_beacon_get_tim+0x218/0x2c0 [ 1301.175131][ C1] mac80211_hwsim_tx_frame+0x199/0x1f0 [ 1301.175184][ C1] mac80211_hwsim_beacon_tx+0x396/0x820 [ 1301.175244][ C1] __iterate_interfaces+0x2af/0x5a0 [ 1301.175281][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1301.175310][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1301.175345][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1301.175373][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1301.175407][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1301.175448][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 1301.175486][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1301.175526][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 1301.175634][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 1301.175682][ C1] handle_softirqs+0x265/0x8d0 [ 1301.175768][ C1] __irq_exit_rcu+0xc6/0x220 [ 1301.175805][ C1] irq_exit_rcu+0x9/0x30 [ 1301.175832][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1301.175864][ C1] [ 1301.175872][ C1] [ 1301.175886][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1301.175912][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x5e/0x80 [ 1301.175939][ C1] Code: 00 00 00 10 0f 93 c2 40 08 f2 75 35 83 b9 44 17 00 00 00 74 2c 8b 91 18 17 00 00 83 fa 02 75 21 48 8b 91 20 17 00 00 48 8b 32 <48> 8d 7e 01 8b 89 1c 17 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 [ 1301.175955][ C1] RSP: 0018:ffffc90003bfed28 EFLAGS: 00000246 [ 1301.175974][ C1] RAX: ffffffff8207d551 RBX: 0000000000000000 RCX: ffff888022b8be80 [ 1301.175988][ C1] RDX: ffffc900069d1000 RSI: 000000000007ffff RDI: 0000000000000000 [ 1301.176002][ C1] RBP: 0000000000000001 R08: 0000000000000002 R09: 0000000000000000 [ 1301.176014][ C1] R10: 6f6c5f646165725f R11: 64656863735f6b63 R12: 1ffff11004571a6d [ 1301.176029][ C1] R13: dffffc0000000000 R14: ffff888022b8d368 R15: dffffc0000000000 [ 1301.176076][ C1] ? perf_swevent_get_recursion_context+0xa1/0x100 [ 1301.176138][ C1] perf_swevent_get_recursion_context+0xa1/0x100 [ 1301.176180][ C1] perf_trace_buf_alloc+0x43/0x280 [ 1301.176227][ C1] perf_trace_lock_acquire+0x1a6/0x440 [ 1301.176289][ C1] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1301.176329][ C1] ? perf_trace_lock+0x100/0x410 [ 1301.176361][ C1] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1301.176423][ C1] lock_acquire+0x303/0x350 [ 1301.176452][ C1] ? trace_call_bpf+0xb4/0xb80 [ 1301.176495][ C1] ? trace_call_bpf+0xb4/0xb80 [ 1301.176544][ C1] trace_call_bpf+0xd5/0xb80 [ 1301.176566][ C1] ? trace_call_bpf+0xb4/0xb80 [ 1301.176592][ C1] ? trace_call_bpf+0xb4/0xb80 [ 1301.176630][ C1] ? trace_call_bpf+0x7d5/0xb80 [ 1301.176657][ C1] ? trace_call_bpf+0xb4/0xb80 [ 1301.176686][ C1] ? __pfx_trace_call_bpf+0x10/0x10 [ 1301.176729][ C1] ? __pfx_trace_call_bpf+0x10/0x10 [ 1301.176778][ C1] perf_trace_run_bpf_submit+0x78/0x170 [ 1301.176865][ C1] perf_trace_lock_acquire+0x346/0x440 [ 1301.176901][ C1] ? __lock_acquire+0x747/0x2de0 [ 1301.176954][ C1] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1301.176993][ C1] ? perf_trace_lock+0x100/0x410 [ 1301.177025][ C1] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1301.177075][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 1301.177122][ C1] lock_acquire+0x303/0x350 [ 1301.177152][ C1] ? pfn_valid+0xba/0x490 [ 1301.177196][ C1] ? page_table_check_clear+0x1d0/0x590 [ 1301.177234][ C1] ? pfn_valid+0xba/0x490 [ 1301.177274][ C1] pfn_valid+0xd6/0x490 [ 1301.177300][ C1] ? pfn_valid+0xba/0x490 [ 1301.177343][ C1] page_table_check_clear+0x21/0x590 [ 1301.177374][ C1] ? vm_normal_page+0x13c/0x2b0 [ 1301.177423][ C1] __zap_vma_range+0x3a12/0x4f70 [ 1301.177665][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 1301.177746][ C1] ? mas_find+0x6d6/0xcb0 [ 1301.177803][ C1] unmap_vmas+0x38b/0x550 [ 1301.177871][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1301.177892][ C1] ? mas_next_slot+0xc91/0xd70 [ 1301.178031][ C1] exit_mmap+0x293/0x9f0 [ 1301.178082][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1301.178224][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1301.178307][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 1301.178362][ C1] __mmput+0x118/0x420 [ 1301.178407][ C1] copy_process+0x2fbb/0x44b0 [ 1301.178498][ C1] ? copy_process+0xd17/0x44b0 [ 1301.178609][ C1] ? __pfx_copy_process+0x10/0x10 [ 1301.178699][ C1] kernel_clone+0x2d7/0x940 [ 1301.178760][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1301.178839][ C1] ? do_futex+0x3e7/0x4e0 [ 1301.178893][ C1] __x64_sys_clone+0x1b6/0x230 [ 1301.178942][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1301.179041][ C1] ? rcu_is_watching+0x16/0xb0 [ 1301.179132][ C1] do_syscall_64+0x166/0x520 [ 1301.179162][ C1] ? trace_irq_disable+0x3b/0x140 [ 1301.179189][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.179214][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1301.179256][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.179280][ C1] RIP: 0033:0x7f2e20d9f559 [ 1301.179308][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1301.179324][ C1] RSP: 002b:00007f2e21c11fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1301.179346][ C1] RAX: ffffffffffffffda RBX: 00007f2e21025fa0 RCX: 00007f2e20d9f559 [ 1301.179360][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 1301.179373][ C1] RBP: 00007f2e20e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1301.179385][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1301.179397][ C1] R13: 00007f2e21026038 R14: 00007f2e21025fa0 R15: 00007ffc06f106c8 [ 1301.179485][ C1] [ 1301.179514][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1301.179613][ C0] NMI backtrace for cpu 0 [ 1301.179629][ C0] CPU: 0 UID: 0 PID: 25167 Comm: syz.5.6228 Not tainted syzkaller #0 PREEMPT(full) [ 1301.179653][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1301.179666][ C0] RIP: 0010:smp_call_function_many_cond+0x61e/0x1500 [ 1301.179700][ C0] Code: b6 04 04 84 c0 0f 85 d5 03 00 00 44 8b 3b 44 89 fe 83 e6 01 31 ff e8 71 71 0c 00 41 83 e7 01 75 07 e8 66 6c 0c 00 eb 3f f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 75 0f f7 03 01 [ 1301.179717][ C0] RSP: 0018:ffffc90003b571a0 EFLAGS: 00000293 [ 1301.179736][ C0] RAX: ffffffff81bc89ee RBX: ffff8880b8541b08 RCX: ffff888021b83e80 [ 1301.179753][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1301.179766][ C0] RBP: ffffc90003b572f0 R08: ffff888021b8541f R09: 1ffff11004370a83 [ 1301.179782][ C0] R10: dffffc0000000000 R11: ffffffff817a5570 R12: 1ffff110170a8361 [ 1301.179798][ C0] R13: 0000000000000001 R14: ffff8880b8541b00 R15: 0000000000000001 [ 1301.179813][ C0] FS: 0000000000000000(0000) GS:ffff888123a51000(0000) knlGS:0000000000000000 [ 1301.179830][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1301.179845][ C0] CR2: 00007f2e21bf1990 CR3: 000000005f136000 CR4: 00000000003526f0 [ 1301.179865][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1301.179878][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1301.179891][ C0] Call Trace: [ 1301.179901][ C0] [ 1301.179941][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1301.179987][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 1301.180027][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1301.180070][ C0] ? rcu_is_watching+0x16/0xb0 [ 1301.180118][ C0] ? trace_tlb_flush+0x3c/0x160 [ 1301.180184][ C0] flush_tlb_mm_range+0x910/0x10b0 [ 1301.180218][ C0] ? perf_trace_lock+0x100/0x410 [ 1301.180289][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1301.180379][ C0] ? page_table_check_clear+0x1d0/0x590 [ 1301.180421][ C0] ? page_table_check_clear+0x1d0/0x590 [ 1301.180453][ C0] ? page_table_check_clear+0x530/0x590 [ 1301.180480][ C0] ? page_table_check_clear+0x1d0/0x590 [ 1301.180531][ C0] ptep_clear_flush+0x120/0x170 [ 1301.180580][ C0] do_wp_page+0x3c52/0x4b70 [ 1301.180640][ C0] ? do_wp_page+0x365c/0x4b70 [ 1301.180719][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 1301.180753][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1301.180805][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1301.180888][ C0] handle_mm_fault+0x15d7/0x3750 [ 1301.180970][ C0] ? handle_mm_fault+0xf1/0x3750 [ 1301.181053][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 1301.181177][ C0] ? lock_mm_and_find_vma+0xa7/0x340 [ 1301.181231][ C0] do_user_addr_fault+0x7f6/0x1480 [ 1301.181334][ C0] exc_page_fault+0x6a/0xc0 [ 1301.181375][ C0] asm_exc_page_fault+0x26/0x30 [ 1301.181400][ C0] RIP: 0010:__put_user_4+0xd/0x30 [ 1301.181428][ C0] Code: 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 07 aa 03 00 90 90 90 90 90 90 90 90 90 90 [ 1301.181447][ C0] RSP: 0018:ffffc90003b57a90 EFLAGS: 00050206 [ 1301.181467][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2e21bf1990 [ 1301.181481][ C0] RDX: 0000000000000000 RSI: ffffffff8e7180ce RDI: ffffffff8c6e7280 [ 1301.181496][ C0] RBP: dffffc0000000000 R08: ffffffff8226145f R09: 0000000000000000 [ 1301.181511][ C0] R10: ffffc90003b577e0 R11: ffffffffa0400914 R12: dffffc0000000000 [ 1301.181528][ C0] R13: 1ffff110043708b2 R14: ffff888021b83e80 R15: ffff888021b84590 [ 1301.181567][ C0] ? 0xffffffffa0400914 [ 1301.181597][ C0] ? __might_fault+0xaf/0x130 [ 1301.181662][ C0] mm_exit_exec_release+0xe1/0x290 [ 1301.181707][ C0] exit_mm+0x50/0x240 [ 1301.181748][ C0] do_exit+0x6a8/0x2360 [ 1301.181777][ C0] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1301.181828][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 1301.181855][ C0] ? perf_trace_preemptirq_template+0xb3/0x350 [ 1301.181892][ C0] ? __pfx_do_exit+0x10/0x10 [ 1301.181938][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1301.181979][ C0] ? get_signal+0xfc3/0x12c0 [ 1301.182041][ C0] do_group_exit+0x22d/0x2f0 [ 1301.182064][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1301.182119][ C0] get_signal+0x1216/0x12c0 [ 1301.182243][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 1301.182299][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1301.182418][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 1301.182453][ C0] ? rcu_is_watching+0x16/0xb0 [ 1301.182508][ C0] do_syscall_64+0x328/0x520 [ 1301.182538][ C0] ? trace_irq_disable+0x3b/0x140 [ 1301.182567][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.182597][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1301.182640][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.182665][ C0] RIP: 0033:0x7f2e20d9f559 [ 1301.182691][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1301.182709][ C0] RSP: 002b:00007f2e21bf10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1301.182731][ C0] RAX: fffffffffffffe00 RBX: 00007f2e21026098 RCX: 00007f2e20d9f559 [ 1301.182748][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2e21026098 [ 1301.182761][ C0] RBP: 00007f2e21026090 R08: 0000000000000000 R09: 0000000000000000 [ 1301.182775][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1301.182788][ C0] R13: 00007f2e21026128 R14: 00007ffc06f105e0 R15: 00007ffc06f106c8 [ 1301.182876][ C0] [ 1301.183560][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 1302.455850][ C1] CPU: 1 UID: 0 PID: 25165 Comm: syz.5.6228 Tainted: G L syzkaller #0 PREEMPT(full) [ 1302.466920][ C1] Tainted: [L]=SOFTLOCKUP [ 1302.471301][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1302.481393][ C1] Call Trace: [ 1302.484716][ C1] [ 1302.487620][ C1] vpanic+0x56d/0xa60 [ 1302.491676][ C1] ? __pfx_vpanic+0x10/0x10 [ 1302.496297][ C1] panic+0xc5/0xd0 [ 1302.500096][ C1] ? __pfx_panic+0x10/0x10 [ 1302.504584][ C1] ? printk_trigger_flush+0x174/0x1d0 [ 1302.510111][ C1] watchdog_timer_fn+0x785/0x790 [ 1302.515122][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 1302.520765][ C1] __hrtimer_run_queues+0x371/0xa10 [ 1302.526107][ C1] hrtimer_interrupt+0x4cd/0xaa0 [ 1302.531312][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1302.537374][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 1302.543095][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1302.549117][ C1] RIP: 0010:seqcount_lockdep_reader_access+0xec/0x100 [ 1302.555925][ C1] Code: 00 75 11 e8 66 63 13 00 4d 85 ff 75 16 e8 5c 63 13 00 eb 15 e8 55 63 13 00 e8 30 93 44 0a 4d 85 ff 74 ea e8 46 63 13 00 fb 5b <41> 5e 41 5f c3 cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 1302.575575][ C1] RSP: 0018:ffffc90000a08a60 EFLAGS: 00000246 [ 1302.581702][ C1] RAX: ffffffff81b592ea RBX: ffffffff9baa7798 RCX: ffff888022b8be80 [ 1302.590241][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 1302.598255][ C1] RBP: 0000000000000000 R08: 0000000000000100 R09: 1ffffffff22f8ef7 [ 1302.606260][ C1] R10: dffffc0000000000 R11: fffffbfff22f8ef8 R12: dffffc0000000000 [ 1302.614277][ C1] R13: ffff88803549b998 R14: ffffffff81b599a3 R15: 0000000000000200 [ 1302.622316][ C1] ? ktime_get_with_offset+0x93/0x2d0 [ 1302.627773][ C1] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1302.634040][ C1] ktime_get_with_offset+0x93/0x2d0 [ 1302.639307][ C1] mac80211_hwsim_tx_frame_no_nl+0x13d/0x1820 [ 1302.645465][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 1302.651105][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 1302.656786][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 1302.662385][ C1] ? __ieee80211_beacon_get+0x457/0x1920 [ 1302.668083][ C1] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 1302.674691][ C1] ? ieee80211_beacon_get_tim+0x218/0x2c0 [ 1302.680516][ C1] mac80211_hwsim_tx_frame+0x199/0x1f0 [ 1302.686071][ C1] mac80211_hwsim_beacon_tx+0x396/0x820 [ 1302.691730][ C1] __iterate_interfaces+0x2af/0x5a0 [ 1302.697197][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1302.703345][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1302.710606][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1302.716724][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1302.723837][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1302.729703][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 1302.734953][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1302.740854][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 1302.746164][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 1302.751341][ C1] handle_softirqs+0x265/0x8d0 [ 1302.756206][ C1] __irq_exit_rcu+0xc6/0x220 [ 1302.760855][ C1] irq_exit_rcu+0x9/0x30 [ 1302.765140][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1302.770858][ C1] [ 1302.773821][ C1] [ 1302.776785][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1302.782833][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x5e/0x80 [ 1302.789029][ C1] Code: 00 00 00 10 0f 93 c2 40 08 f2 75 35 83 b9 44 17 00 00 00 74 2c 8b 91 18 17 00 00 83 fa 02 75 21 48 8b 91 20 17 00 00 48 8b 32 <48> 8d 7e 01 8b 89 1c 17 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 [ 1302.808682][ C1] RSP: 0018:ffffc90003bfed28 EFLAGS: 00000246 [ 1302.814792][ C1] RAX: ffffffff8207d551 RBX: 0000000000000000 RCX: ffff888022b8be80 [ 1302.822802][ C1] RDX: ffffc900069d1000 RSI: 000000000007ffff RDI: 0000000000000000 [ 1302.831509][ C1] RBP: 0000000000000001 R08: 0000000000000002 R09: 0000000000000000 [ 1302.839512][ C1] R10: 6f6c5f646165725f R11: 64656863735f6b63 R12: 1ffff11004571a6d [ 1302.847513][ C1] R13: dffffc0000000000 R14: ffff888022b8d368 R15: dffffc0000000000 [ 1302.855554][ C1] ? perf_swevent_get_recursion_context+0xa1/0x100 [ 1302.862204][ C1] perf_swevent_get_recursion_context+0xa1/0x100 [ 1302.868677][ C1] perf_trace_buf_alloc+0x43/0x280 [ 1302.873863][ C1] perf_trace_lock_acquire+0x1a6/0x440 [ 1302.879395][ C1] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1302.885421][ C1] ? perf_trace_lock+0x100/0x410 [ 1302.890407][ C1] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1302.896498][ C1] lock_acquire+0x303/0x350 [ 1302.901056][ C1] ? trace_call_bpf+0xb4/0xb80 [ 1302.905887][ C1] ? trace_call_bpf+0xb4/0xb80 [ 1302.910742][ C1] trace_call_bpf+0xd5/0xb80 [ 1302.915376][ C1] ? trace_call_bpf+0xb4/0xb80 [ 1302.920526][ C1] ? trace_call_bpf+0xb4/0xb80 [ 1302.925345][ C1] ? trace_call_bpf+0x7d5/0xb80 [ 1302.930239][ C1] ? trace_call_bpf+0xb4/0xb80 [ 1302.935041][ C1] ? __pfx_trace_call_bpf+0x10/0x10 [ 1302.940292][ C1] ? __pfx_trace_call_bpf+0x10/0x10 [ 1302.945550][ C1] perf_trace_run_bpf_submit+0x78/0x170 [ 1302.951167][ C1] perf_trace_lock_acquire+0x346/0x440 [ 1302.956669][ C1] ? __lock_acquire+0x747/0x2de0 [ 1302.961669][ C1] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1302.967726][ C1] ? perf_trace_lock+0x100/0x410 [ 1302.972713][ C1] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1302.978757][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 1302.984099][ C1] lock_acquire+0x303/0x350 [ 1302.988637][ C1] ? pfn_valid+0xba/0x490 [ 1302.993025][ C1] ? page_table_check_clear+0x1d0/0x590 [ 1302.998634][ C1] ? pfn_valid+0xba/0x490 [ 1303.003031][ C1] pfn_valid+0xd6/0x490 [ 1303.007231][ C1] ? pfn_valid+0xba/0x490 [ 1303.011650][ C1] page_table_check_clear+0x21/0x590 [ 1303.017006][ C1] ? vm_normal_page+0x13c/0x2b0 [ 1303.021920][ C1] __zap_vma_range+0x3a12/0x4f70 [ 1303.027375][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 1303.032771][ C1] ? mas_find+0x6d6/0xcb0 [ 1303.037411][ C1] unmap_vmas+0x38b/0x550 [ 1303.041847][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1303.046915][ C1] ? mas_next_slot+0xc91/0xd70 [ 1303.051836][ C1] exit_mmap+0x293/0x9f0 [ 1303.056140][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1303.061049][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1303.066006][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 1303.071276][ C1] __mmput+0x118/0x420 [ 1303.075461][ C1] copy_process+0x2fbb/0x44b0 [ 1303.080240][ C1] ? copy_process+0xd17/0x44b0 [ 1303.085120][ C1] ? __pfx_copy_process+0x10/0x10 [ 1303.090248][ C1] kernel_clone+0x2d7/0x940 [ 1303.094836][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1303.099992][ C1] ? do_futex+0x3e7/0x4e0 [ 1303.104395][ C1] __x64_sys_clone+0x1b6/0x230 [ 1303.109219][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1303.114643][ C1] ? rcu_is_watching+0x16/0xb0 [ 1303.119527][ C1] do_syscall_64+0x166/0x520 [ 1303.124191][ C1] ? trace_irq_disable+0x3b/0x140 [ 1303.129254][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.135361][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1303.140089][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.146020][ C1] RIP: 0033:0x7f2e20d9f559 [ 1303.150471][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1303.170108][ C1] RSP: 002b:00007f2e21c11fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1303.178568][ C1] RAX: ffffffffffffffda RBX: 00007f2e21025fa0 RCX: 00007f2e20d9f559 [ 1303.186576][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 1303.194660][ C1] RBP: 00007f2e20e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1303.202665][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1303.210671][ C1] R13: 00007f2e21026038 R14: 00007f2e21025fa0 R15: 00007ffc06f106c8 [ 1303.218895][ C1] [ 1303.222569][ C1] Kernel Offset: disabled [ 1303.226991][ C1] Rebooting in 86400 seconds..