last executing test programs: 1m51.999248348s ago: executing program 0 (id=2353): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="e7e9370b76e8ea03c7010fb91d9ec9f1506a160f37be11cc8474ae26808b918db2f365580b6a6e75c4f2d343681de9141ef2485652603f229e58b516a63556d5408fe247a4e5a6b3360fe05fa935ac028aed32fd653ee899a7e73e50e1538643b43cc51cc2b025a3c870160466bc55b6b59f6b657e1f934d534d3a3feaa3f6391a7ee85c6291c4e4286f3e19436be44b69d8c8a30318ce09f923e03df2697cbc2024f6bbbdb7c9122f829c484c96fe6f0ae852a151d8a0782e71d82de05d69cccf04e409aacaf5ad67f85ea93220c3c4142972873054183204a37cc592404b8a08393c0f881c32754bfad3b3eea1fb12b1", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT], &(0x7f00000001c0)='GPL\x00', 0xd0d3, 0x9a, &(0x7f0000000200)=""/154, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x5, 0x8, 0x65c}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x2, 0x2, 0x1, 0x5}], 0x10, 0x7, @void, @value}, 0x94) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$packet(0x11, 0x2, 0x300) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0), 0xc) sendto$inet6(r3, &(0x7f0000000500)="1ea2e9340ffdf2ed72b4a240a733e32450814c5cb96fddff170c94c2e16dae36d6371a4247a07912f42ba4da13c318a1bfcae2b5444e7ae7639488e94d8b89c10f19cd59644b3128e42c5f72b86ca2fa1808eddd68bc34aa8c822a8c969e8a3976e3cf86eed5ba5f2ee85259f43c35c64a5e1fd649644739c812c73b5cf6709aaad5cbb7767759e92e949f9258598c05131d2f", 0x93, 0x50080, &(0x7f00000005c0)={0xa, 0x4e22, 0x4, @private2, 0xfffffff8}, 0x1c) (async) r5 = openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000180)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x7, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc5, &(0x7f0000000080)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3}, 0x4) 1m51.309632066s ago: executing program 4 (id=2574): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x1b0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m48.504882962s ago: executing program 1 (id=981): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0xa], 0x0, [0x8, 0x400]}}]}}]}, 0x8c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0xa], 0x0, [0x8, 0x400]}}]}}]}, 0x8c}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) 1m33.139773809s ago: executing program 0 (id=2353): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="e7e9370b76e8ea03c7010fb91d9ec9f1506a160f37be11cc8474ae26808b918db2f365580b6a6e75c4f2d343681de9141ef2485652603f229e58b516a63556d5408fe247a4e5a6b3360fe05fa935ac028aed32fd653ee899a7e73e50e1538643b43cc51cc2b025a3c870160466bc55b6b59f6b657e1f934d534d3a3feaa3f6391a7ee85c6291c4e4286f3e19436be44b69d8c8a30318ce09f923e03df2697cbc2024f6bbbdb7c9122f829c484c96fe6f0ae852a151d8a0782e71d82de05d69cccf04e409aacaf5ad67f85ea93220c3c4142972873054183204a37cc592404b8a08393c0f881c32754bfad3b3eea1fb12b1", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT], &(0x7f00000001c0)='GPL\x00', 0xd0d3, 0x9a, &(0x7f0000000200)=""/154, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x5, 0x8, 0x65c}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x2, 0x2, 0x1, 0x5}], 0x10, 0x7, @void, @value}, 0x94) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$packet(0x11, 0x2, 0x300) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0), 0xc) sendto$inet6(r3, &(0x7f0000000500)="1ea2e9340ffdf2ed72b4a240a733e32450814c5cb96fddff170c94c2e16dae36d6371a4247a07912f42ba4da13c318a1bfcae2b5444e7ae7639488e94d8b89c10f19cd59644b3128e42c5f72b86ca2fa1808eddd68bc34aa8c822a8c969e8a3976e3cf86eed5ba5f2ee85259f43c35c64a5e1fd649644739c812c73b5cf6709aaad5cbb7767759e92e949f9258598c05131d2f", 0x93, 0x50080, &(0x7f00000005c0)={0xa, 0x4e22, 0x4, @private2, 0xfffffff8}, 0x1c) (async) r5 = openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000180)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x7, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc5, &(0x7f0000000080)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3}, 0x4) 1m32.153537699s ago: executing program 4 (id=2574): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x1b0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m31.180691434s ago: executing program 1 (id=981): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0xa], 0x0, [0x8, 0x400]}}]}}]}, 0x8c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0xa], 0x0, [0x8, 0x400]}}]}}]}, 0x8c}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) 1m13.517651707s ago: executing program 0 (id=2353): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="e7e9370b76e8ea03c7010fb91d9ec9f1506a160f37be11cc8474ae26808b918db2f365580b6a6e75c4f2d343681de9141ef2485652603f229e58b516a63556d5408fe247a4e5a6b3360fe05fa935ac028aed32fd653ee899a7e73e50e1538643b43cc51cc2b025a3c870160466bc55b6b59f6b657e1f934d534d3a3feaa3f6391a7ee85c6291c4e4286f3e19436be44b69d8c8a30318ce09f923e03df2697cbc2024f6bbbdb7c9122f829c484c96fe6f0ae852a151d8a0782e71d82de05d69cccf04e409aacaf5ad67f85ea93220c3c4142972873054183204a37cc592404b8a08393c0f881c32754bfad3b3eea1fb12b1", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT], &(0x7f00000001c0)='GPL\x00', 0xd0d3, 0x9a, &(0x7f0000000200)=""/154, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x5, 0x8, 0x65c}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x2, 0x2, 0x1, 0x5}], 0x10, 0x7, @void, @value}, 0x94) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$packet(0x11, 0x2, 0x300) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0), 0xc) sendto$inet6(r3, &(0x7f0000000500)="1ea2e9340ffdf2ed72b4a240a733e32450814c5cb96fddff170c94c2e16dae36d6371a4247a07912f42ba4da13c318a1bfcae2b5444e7ae7639488e94d8b89c10f19cd59644b3128e42c5f72b86ca2fa1808eddd68bc34aa8c822a8c969e8a3976e3cf86eed5ba5f2ee85259f43c35c64a5e1fd649644739c812c73b5cf6709aaad5cbb7767759e92e949f9258598c05131d2f", 0x93, 0x50080, &(0x7f00000005c0)={0xa, 0x4e22, 0x4, @private2, 0xfffffff8}, 0x1c) (async) r5 = openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000180)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x7, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc5, &(0x7f0000000080)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3}, 0x4) 1m11.391408066s ago: executing program 1 (id=981): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0xa], 0x0, [0x8, 0x400]}}]}}]}, 0x8c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0xa], 0x0, [0x8, 0x400]}}]}}]}, 0x8c}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) 1m9.96611931s ago: executing program 4 (id=2574): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x1b0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 54.027660139s ago: executing program 0 (id=2353): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="e7e9370b76e8ea03c7010fb91d9ec9f1506a160f37be11cc8474ae26808b918db2f365580b6a6e75c4f2d343681de9141ef2485652603f229e58b516a63556d5408fe247a4e5a6b3360fe05fa935ac028aed32fd653ee899a7e73e50e1538643b43cc51cc2b025a3c870160466bc55b6b59f6b657e1f934d534d3a3feaa3f6391a7ee85c6291c4e4286f3e19436be44b69d8c8a30318ce09f923e03df2697cbc2024f6bbbdb7c9122f829c484c96fe6f0ae852a151d8a0782e71d82de05d69cccf04e409aacaf5ad67f85ea93220c3c4142972873054183204a37cc592404b8a08393c0f881c32754bfad3b3eea1fb12b1", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT], &(0x7f00000001c0)='GPL\x00', 0xd0d3, 0x9a, &(0x7f0000000200)=""/154, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x5, 0x8, 0x65c}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x2, 0x2, 0x1, 0x5}], 0x10, 0x7, @void, @value}, 0x94) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$packet(0x11, 0x2, 0x300) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0), 0xc) sendto$inet6(r3, &(0x7f0000000500)="1ea2e9340ffdf2ed72b4a240a733e32450814c5cb96fddff170c94c2e16dae36d6371a4247a07912f42ba4da13c318a1bfcae2b5444e7ae7639488e94d8b89c10f19cd59644b3128e42c5f72b86ca2fa1808eddd68bc34aa8c822a8c969e8a3976e3cf86eed5ba5f2ee85259f43c35c64a5e1fd649644739c812c73b5cf6709aaad5cbb7767759e92e949f9258598c05131d2f", 0x93, 0x50080, &(0x7f00000005c0)={0xa, 0x4e22, 0x4, @private2, 0xfffffff8}, 0x1c) (async) r5 = openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000180)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x7, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc5, &(0x7f0000000080)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3}, 0x4) 52.99564076s ago: executing program 1 (id=981): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0xa], 0x0, [0x8, 0x400]}}]}}]}, 0x8c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0xa], 0x0, [0x8, 0x400]}}]}}]}, 0x8c}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) 51.229756166s ago: executing program 4 (id=2574): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x1b0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 34.437368129s ago: executing program 0 (id=2353): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="e7e9370b76e8ea03c7010fb91d9ec9f1506a160f37be11cc8474ae26808b918db2f365580b6a6e75c4f2d343681de9141ef2485652603f229e58b516a63556d5408fe247a4e5a6b3360fe05fa935ac028aed32fd653ee899a7e73e50e1538643b43cc51cc2b025a3c870160466bc55b6b59f6b657e1f934d534d3a3feaa3f6391a7ee85c6291c4e4286f3e19436be44b69d8c8a30318ce09f923e03df2697cbc2024f6bbbdb7c9122f829c484c96fe6f0ae852a151d8a0782e71d82de05d69cccf04e409aacaf5ad67f85ea93220c3c4142972873054183204a37cc592404b8a08393c0f881c32754bfad3b3eea1fb12b1", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT], &(0x7f00000001c0)='GPL\x00', 0xd0d3, 0x9a, &(0x7f0000000200)=""/154, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x5, 0x8, 0x65c}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x2, 0x2, 0x1, 0x5}], 0x10, 0x7, @void, @value}, 0x94) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$packet(0x11, 0x2, 0x300) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0), 0xc) sendto$inet6(r3, &(0x7f0000000500)="1ea2e9340ffdf2ed72b4a240a733e32450814c5cb96fddff170c94c2e16dae36d6371a4247a07912f42ba4da13c318a1bfcae2b5444e7ae7639488e94d8b89c10f19cd59644b3128e42c5f72b86ca2fa1808eddd68bc34aa8c822a8c969e8a3976e3cf86eed5ba5f2ee85259f43c35c64a5e1fd649644739c812c73b5cf6709aaad5cbb7767759e92e949f9258598c05131d2f", 0x93, 0x50080, &(0x7f00000005c0)={0xa, 0x4e22, 0x4, @private2, 0xfffffff8}, 0x1c) (async) r5 = openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000180)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x7, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc5, &(0x7f0000000080)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3}, 0x4) 33.059298423s ago: executing program 1 (id=981): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0xa], 0x0, [0x8, 0x400]}}]}}]}, 0x8c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0xa], 0x0, [0x8, 0x400]}}]}}]}, 0x8c}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) 31.828683425s ago: executing program 4 (id=2574): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x1b0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 14.008178976s ago: executing program 0 (id=2353): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="e7e9370b76e8ea03c7010fb91d9ec9f1506a160f37be11cc8474ae26808b918db2f365580b6a6e75c4f2d343681de9141ef2485652603f229e58b516a63556d5408fe247a4e5a6b3360fe05fa935ac028aed32fd653ee899a7e73e50e1538643b43cc51cc2b025a3c870160466bc55b6b59f6b657e1f934d534d3a3feaa3f6391a7ee85c6291c4e4286f3e19436be44b69d8c8a30318ce09f923e03df2697cbc2024f6bbbdb7c9122f829c484c96fe6f0ae852a151d8a0782e71d82de05d69cccf04e409aacaf5ad67f85ea93220c3c4142972873054183204a37cc592404b8a08393c0f881c32754bfad3b3eea1fb12b1", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT], &(0x7f00000001c0)='GPL\x00', 0xd0d3, 0x9a, &(0x7f0000000200)=""/154, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x5, 0x8, 0x65c}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x2, 0x2, 0x1, 0x5}], 0x10, 0x7, @void, @value}, 0x94) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$packet(0x11, 0x2, 0x300) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0), 0xc) sendto$inet6(r3, &(0x7f0000000500)="1ea2e9340ffdf2ed72b4a240a733e32450814c5cb96fddff170c94c2e16dae36d6371a4247a07912f42ba4da13c318a1bfcae2b5444e7ae7639488e94d8b89c10f19cd59644b3128e42c5f72b86ca2fa1808eddd68bc34aa8c822a8c969e8a3976e3cf86eed5ba5f2ee85259f43c35c64a5e1fd649644739c812c73b5cf6709aaad5cbb7767759e92e949f9258598c05131d2f", 0x93, 0x50080, &(0x7f00000005c0)={0xa, 0x4e22, 0x4, @private2, 0xfffffff8}, 0x1c) (async) r5 = openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000180)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x7, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc5, &(0x7f0000000080)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3}, 0x4) 11.623184622s ago: executing program 1 (id=981): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0xa], 0x0, [0x8, 0x400]}}]}}]}, 0x8c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0xa], 0x0, [0x8, 0x400]}}]}}]}, 0x8c}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) 10.378207203s ago: executing program 4 (id=2574): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x1b0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.756964306s ago: executing program 2 (id=3194): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000140001ec4a2cec481e"], 0x28}}, 0x4000) 3.394550452s ago: executing program 2 (id=3196): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x0, 0x31, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89fe, &(0x7f0000000900)={'bridge0\x00', @random="00ffc32000"}) 3.393132699s ago: executing program 2 (id=3198): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000001000001e000000100000000000000000080ffffff000000000000000a"], 0xb8}}, 0x0) 3.392544568s ago: executing program 2 (id=3199): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000800)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 3.210682123s ago: executing program 3 (id=3201): syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x6}, @ssrr={0x89, 0x3}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newlink={0x60, 0x10, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, 0x8000}, [@IFLA_TXQLEN={0x8, 0xd, 0x7fffffff}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xb}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2a33b}, @IFLA_IFALIASn={0x4}]}, 0x60}}, 0x4000) 2.966038829s ago: executing program 2 (id=3202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x802, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000004821178f459c0b7a600", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x13, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x8, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) 2.965674469s ago: executing program 3 (id=3203): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000001030000000000850000006b00000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.839019801s ago: executing program 3 (id=3204): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000020c0)={0x6, 0x1c, &(0x7f0000001e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcac2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x74}, @jmp={0x5, 0x1, 0x7, 0x7, 0x6, 0xfffffffffffffffc, 0x4}]}, &(0x7f0000001f40)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001f80)={0x2, 0xb, 0x489, 0x101}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001fc0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000002000)=[{0x3, 0x3, 0x4, 0x5}, {0x0, 0x3, 0x0, 0x5}, {0x0, 0x2, 0x9, 0x7}, {0x5, 0x1, 0x8}, {0x5, 0x2, 0xf, 0x7}, {0x1, 0x2, 0x9, 0x6}, {0x4, 0x5, 0x4, 0x1}, {0x1, 0x4, 0xc, 0xc}, {0x0, 0x3, 0x7, 0x9}], 0x10, 0xf68, @void, @value}, 0x94) (async, rerun: 32) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000002180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000021c0)=0x14, 0x0) (async, rerun: 32) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 64) r5 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000002200), &(0x7f0000002280)=0x60, 0x800) (rerun: 64) r6 = accept$inet(0xffffffffffffffff, &(0x7f00000022c0)={0x2, 0x0, @multicast2}, &(0x7f0000002300)=0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x168, 0x6c, 0x0, 0x0, 0x0, 0x298, 0x258, 0x258, 0x298, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', '\x00', {}, {}, 0x11}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x7}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@private0, @empty, [], [], 'lo\x00', 'erspan0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0xff9e) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000002340), 0x2, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0) ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f00000005c0)) r10 = accept$netrom(0xffffffffffffffff, &(0x7f0000002380)={{0x3, @rose}, [@netrom, @default, @bcast, @default, @remote, @remote, @rose, @default]}, &(0x7f0000002400)=0x48) r11 = syz_init_net_socket$ax25(0x3, 0x5, 0x8) (async, rerun: 64) r12 = socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 64) r13 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000002440), 0x2, 0x0) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="ab3800000018000d000000000000102ad2"], 0x38}}, 0x40) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r16 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r16, 0x8917, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002600)=[{{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240), 0x0, &(0x7f0000000480)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38, 0x80}}, {{&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000000540)="17f98fb917813b3abb1bbac1ee0d394289f4d2f950c0bf2377356b8b59939edeb5fbce2f3848ac68fb84a1bc8769b4f285270f9709c314abc17f18190b663f7556d95b6c13e2909b399b9beaf2b08ffcf6b1b672930e56a32d654b7b60bae18f895ef22811d1e6b985b1993ac6adc0df7e2fbfaa4a5e5bcb66b3701d5a1c8ea354ad9c4eb59a32e355b61a0312cc905da2035ac9bff1a66b913e2e8f9968c81992893a716b9a88e7096b6117", 0xac}, {&(0x7f0000000600)="dc383db866feca5aa01cabbf51ae782a143744cb8ec9134fb3f2ee2f9c7ff7787cbc08617ffba0675297e23b3a0cef6a3cebf916840f74436e82fd95950e5e25fbc6b9664f4cfbd3e240490f2ed08d678d5adcb833bf50", 0x57}, {&(0x7f0000000680)="c897aefbf6ae380f6378587d3f30f492e570afcb6e3df02a57159203353a4d8853d6fe27ad901c3923d259b012176f9a079ce1a060cd751b36ff720aa1ba7d1fc7babd3d50a1570974b459894c43443d1823e87e45a9dab7f4689e6a505c59f1ecb656a9d055f636b79d3eeec62b0fc4e7d52bd536cf51699b9a88decb1378221619add39808ddc2eaf3753c27472238ba350826", 0x94}, {&(0x7f0000000740)="51b287fb8997b327975e8dff76cf98a7775cd62bb2547a4249bed9a9aa0fec20f2ed6a20c0347d5cb4b55a857fb8527784524e858f41c0410f8001ea7556bda42878df90b4ed42529438d95688f76a9b59559febe0baa5fe7b8473967941b8cef6112c233f5558f8eb49178c5fb69295743f635626c09a0840c39c27e9236752dc371c2a756d678b5bd06ade078e92fed421227b5c9da157120e4fd7bfe70dbf4a4224997c73", 0xa6}, {&(0x7f0000000800)="8fc98dfa8de476ddd79121f36d60cdecbb022bcbd5fcb950982eccdbc586fe5ff8da11f6b88733cf8aedb85f", 0x2c}, {&(0x7f0000000840)="8f5c770fe947af0bf105e6d6879b2e279466a35c94892955797832a44bf277d5f83b302514120e5fb61e560757cdc381bdd4a428b8b6a67e5707241a0ae03ae08ce2daeeba575e22066a84e8fc990d00f4e3f89f576aee6a4fb198b57e1c00e30f24d3b5a10d5ba72520a0031fc22515f82a8313b706b45fa783429e815b59d391c3c773bf5010fd2494c70a8568a1ae6adc9cb25fd01ef00bae772bed99f575a3ab9bc6058acac9da3fcd2c6a75748df66f601c1e629f245a3eb618cbddc0ff6d960a76ce71ca7ef8eba531f0a00b2354a7a35e", 0xd4}, {&(0x7f0000000940)="d378b09170954f5515a83cbd9a1b611a3e52960a5171c72ef4958369fe22790e0b1cc8f0ac0b0bba18e3d0a7a58034a8b28ae41cf0ee9977fc27655a9fbd7963e92ec45e97e89e0ac92e304843bd61ff458c78eb3c45067096b2cf602e63981d929cb2f96e75b66918d46a77e0539b11019ae1bd236e62905d72c0a68f6b67392ccc423884bf0f4d95d9a3a873af28a9d1e8c90eced626bb5805e9397681929422fa29d2a64daaea1e911996dd2b67e45ecf2e32aabd40ac05122e7fcb363482f1321fc33d4257f88859fabf795e00abeb6c448646c24cf010de76ce38606af6aa2bfe", 0xe3}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="20bf84fbe7a057d2de3b2ca347a6aa81d34bb18737e9b3704e283d612dbd92c7928b502017d9ddb67784ae05fe5d4ccb323f82687858c2af145f65198b220fc7aa4da3f6817e0e785486", 0x4a}], 0x9, &(0x7f00000024c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x30, 0x1, 0x1, [r1, r2, r3, r4, r5, r6, 0xffffffffffffffff, r7]}}, @rights={{0x34, 0x1, 0x1, [r8, r9, r10, r11, r12, 0xffffffffffffffff, r13, r14, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r15, r16, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x128, 0xc0}}], 0x2, 0xa000) (async) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r17, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) r18 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000030000000000000000000000791200000000000095"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4b) 2.681087775s ago: executing program 3 (id=3205): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x470, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_RATE={0x6}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x7, 0xfff1}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @filter_kind_options=@f_route={{0xa}, {0x400, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xc1}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x31}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_ACT={0x3dc, 0x6, [@m_sample={0x3c, 0x6, 0x0, 0x0, {{0xb}, {0x4}, {0xd, 0x6, "e382c42ebd85b3baf2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x140, 0x10, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1ff}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x128, 0xf, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x101}, @TCA_CT_LABELS_MASK={0x14, 0x8, "c30604ab3100a6de878355a1bfb0f58b"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ea4ceb0a2367847922314f8aa6c591ae"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "58f25e882ecebd3017a6274441c51594"}]}, {0x98, 0x6, "f84ebe84c2d9809d98cb12f2274b5e21a4b137a60d915bfb42d02d4976ad358f638df8594bc932b13ff21d61be8614c3e0d017d21773d441648e714188ceca643a7f306544ce1be061d95d94f171717e049609b7d2b065d9b018db93c08d3479edf5f057f3b5d682c142a7be2a698456dbb28b7070774e11cf4125dc778036c189ec187ceb923d94a23e0d32f0cda5d880fc5a36"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0xf4, 0x15, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x4, 0x1, 0x2, 0x6}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x10, 0x10000000, 0x8000, 0x1000}, @remote, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x8, 0x20000000, 0x1, 0x6f4f}, @remote, @private=0xa010101, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x45df, 0x7ff, 0x20000000, 0x4, 0x7}, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x7, 0xffffffffffffffff, 0x6, 0xfffefffd}, @broadcast, @loopback, 0xff000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x40, 0x0, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x1b0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 101.292993ms ago: executing program 2 (id=3206): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001980)={'netdevsim0\x00', &(0x7f0000001940)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x3a56}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x23, 0x200000006c832, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000086a552d51774ce200018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000012900008500000008000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000060000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1b, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x6, 0xa7, &(0x7f0000000200)=""/167, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xe, 0x2, 0x63}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x2, 0x5, 0x3, 0x1}, {0x2, 0x4, 0xa, 0x1}, {0x2, 0x4, 0x1}, {0x1, 0x2, 0x3, 0x8}, {0x5, 0x1, 0x9, 0x2}, {0x5, 0x1, 0xe, 0xa}], 0x10, 0x7, @void, @value}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000000c0)=0xffffffffffffff9c, 0x8) connect$vsock_stream(r6, &(0x7f0000000380)={0x28, 0x0, 0x0, @hyper}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0xac, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x84, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x74, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x87cd, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x27b6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x9}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x6, 0x4}}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xffffffffffffffa5, 0x1, {0x3, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffe01, 0x7f}}]}]}}}, @IFLA_LINK={0x8}]}, 0xac}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x74, 0x0, {}, {}, {0x0, 0x3f00}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x16, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffff31, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x0, 0x3, 0x1, 0x3, 0x1, 0x18, 0x10}, @generic={0x7, 0x3, 0x3, 0x9, 0x2c925703}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000c00)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c40)={0x4, 0xd, 0xffff748d, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[r2, r2, r2, r2], 0x0, 0x10, 0x1ff, @void, @value}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x14, 0x5a, 0x4, 0x0, 0x0, {0x9}}, 0x33}}, 0x24044014) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000880)=0xfb, 0x1) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59cf00bc3c3fb300000000000001000000000045f0fe7ce64676b458441f7535d322853f54f72a06e26ca946d1ed762e05fe55732017c852e20e73a55f44c0b13248b236cf0249000031f8ec1e3942e779dbcdea"], 0x28}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000008c0)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'ip6tnl0\x00', r8, 0x2f, 0x7, 0x9, 0x0, 0x80, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x7800, 0x6, 0x7}}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x0, 0x11, 0x148, 0x0, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x668) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r9}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x8, &(0x7f0000000880)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 62.669639ms ago: executing program 3 (id=3207): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000140001ec4a2cec481e"], 0x28}}, 0x4000) 0s ago: executing program 3 (id=3208): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="f4020000", @ANYRES16=0x0, @ANYBLOB="210300000000000000003b00000008000300", @ANYRES8=0x0, @ANYBLOB="ca02330080800000080211000000ffffffffffff90e488f9971a00000000000000000000000000000000000003010004060000000000002a01007206030303030303760600000000060bdd3b2d5014b2109a59339408ad50548584c01cda5f3ced6f13b590b9aaf1bca488130effc03c7c2adf4757f254203300027902dd1fa777e6282b58e524dd7aeb13a8b3df323b58645505746aa35226d4494a415c3d4ac256aa5c2291a3317d27815fda589154d0308f4ff131b3c4a96dde0f9c497c9bbde28122"], 0x2f4}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x178) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c00000011000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003"], 0x4c}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe55649a211e7d92c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): ] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2853'. [ 433.980747][T15102] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 434.011677][T15102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 434.016800][T15364] netlink: 'syz.3.2853': attribute type 3 has an invalid length. [ 434.052964][T15364] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2853'. [ 434.130903][T15364] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 434.155797][T15364] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 434.236076][T15142] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 434.261354][T15142] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 434.361774][T15142] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 434.410995][T15142] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 434.525309][T15121] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 434.552277][T15121] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 434.565294][T15378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2856'. [ 434.575282][T15378] lo: entered allmulticast mode [ 434.594037][T15102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.607678][T15121] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 434.622972][T15121] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 434.729518][T15380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2857'. [ 434.778946][T15381] team0: Port device bridge8 added [ 434.948353][T15102] veth0_vlan: entered promiscuous mode [ 435.049343][T15102] veth1_vlan: entered promiscuous mode [ 435.082199][T15121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.112263][T15142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.209699][T15142] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.248732][T15121] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.278857][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.286100][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.312397][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.319636][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.350545][T15102] veth0_macvtap: entered promiscuous mode [ 435.363114][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.370330][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.386576][T15102] veth1_macvtap: entered promiscuous mode [ 435.387851][T15398] FAULT_INJECTION: forcing a failure. [ 435.387851][T15398] name failslab, interval 1, probability 0, space 0, times 0 [ 435.429726][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.436950][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.452015][T15398] CPU: 0 UID: 0 PID: 15398 Comm: syz.2.2864 Not tainted 6.11.0-rc6-syzkaller-00215-g6513eb3d3191 #0 [ 435.458680][T15102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.462875][T15398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 435.480150][T15398] Call Trace: [ 435.483460][T15398] [ 435.486418][T15398] dump_stack_lvl+0x241/0x360 [ 435.491137][T15398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.496382][T15398] ? __pfx__printk+0x10/0x10 [ 435.501022][T15398] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 435.506962][T15398] ? __pfx___might_resched+0x10/0x10 [ 435.512288][T15398] should_fail_ex+0x3b0/0x4e0 [ 435.517030][T15398] should_failslab+0xac/0x100 [ 435.521602][T15142] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 435.521733][T15398] __kmalloc_cache_node_noprof+0x74/0x300 [ 435.537789][T15398] ? __get_vm_area_node+0x113/0x270 [ 435.543032][T15398] __get_vm_area_node+0x113/0x270 [ 435.543160][T15142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 435.548080][T15398] __vmalloc_node_range_noprof+0x3c6/0x1400 [ 435.548107][T15398] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 435.548136][T15398] ? mark_lock+0x9a/0x350 [ 435.548197][T15398] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 435.548232][T15398] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 435.548260][T15398] __vmalloc_noprof+0x79/0x90 [ 435.548284][T15398] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 435.548313][T15398] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 435.548341][T15398] ? bpf_prog_alloc+0x28/0x1b0 [ 435.606581][T15398] bpf_prog_alloc+0x3a/0x1b0 [ 435.611198][T15398] bpf_prog_load+0x7f7/0x20f0 [ 435.615968][T15398] ? __pfx_bpf_prog_load+0x10/0x10 [ 435.621108][T15398] ? __pfx___might_resched+0x10/0x10 [ 435.626433][T15398] ? __might_fault+0xc6/0x120 [ 435.631135][T15398] ? bpf_lsm_bpf+0x9/0x10 [ 435.635484][T15398] ? security_bpf+0x87/0xb0 [ 435.639998][T15398] __sys_bpf+0x4ee/0x810 [ 435.644257][T15398] ? __pfx___sys_bpf+0x10/0x10 [ 435.649039][T15398] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 435.655030][T15398] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 435.661405][T15398] ? do_syscall_64+0x100/0x230 [ 435.666192][T15398] __x64_sys_bpf+0x7c/0x90 [ 435.670630][T15398] do_syscall_64+0xf3/0x230 [ 435.675190][T15398] ? clear_bhb_loop+0x35/0x90 [ 435.679895][T15398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.685812][T15398] RIP: 0033:0x7f4251d7def9 [ 435.690239][T15398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.709868][T15398] RSP: 002b:00007f4252b58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 435.718299][T15398] RAX: ffffffffffffffda RBX: 00007f4251f35f80 RCX: 00007f4251d7def9 [ 435.726279][T15398] RDX: 0000000000000094 RSI: 0000000020000040 RDI: 0000000000000005 [ 435.734259][T15398] RBP: 00007f4252b58090 R08: 0000000000000000 R09: 0000000000000000 [ 435.742252][T15398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.750239][T15398] R13: 0000000000000000 R14: 00007f4251f35f80 R15: 00007ffc290ccdb8 [ 435.758307][T15398] [ 435.806412][T15102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.828301][T15102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.837019][T15398] syz.2.2864: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 435.844757][T15102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.868407][T15398] CPU: 0 UID: 0 PID: 15398 Comm: syz.2.2864 Not tainted 6.11.0-rc6-syzkaller-00215-g6513eb3d3191 #0 [ 435.874060][T15102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.879192][T15398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 435.879208][T15398] Call Trace: [ 435.879219][T15398] [ 435.879228][T15398] dump_stack_lvl+0x241/0x360 [ 435.879263][T15398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.879288][T15398] ? __pfx__printk+0x10/0x10 [ 435.879316][T15398] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 435.879343][T15398] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 435.879372][T15398] warn_alloc+0x278/0x410 [ 435.904507][T15102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.905584][T15398] ? __pfx_warn_alloc+0x10/0x10 [ 435.905625][T15398] ? __get_vm_area_node+0x113/0x270 [ 435.905667][T15398] ? __get_vm_area_node+0x261/0x270 [ 435.905706][T15398] __vmalloc_node_range_noprof+0x3eb/0x1400 [ 435.905747][T15398] ? mark_lock+0x9a/0x350 [ 435.905810][T15398] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 435.905845][T15398] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 435.905874][T15398] __vmalloc_noprof+0x79/0x90 [ 435.905897][T15398] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 435.905928][T15398] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 435.905957][T15398] ? bpf_prog_alloc+0x28/0x1b0 [ 435.905989][T15398] bpf_prog_alloc+0x3a/0x1b0 [ 435.906021][T15398] bpf_prog_load+0x7f7/0x20f0 [ 435.956160][T15121] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 435.960232][T15398] ? __pfx_bpf_prog_load+0x10/0x10 [ 435.966598][T15121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 435.970461][T15398] ? __pfx___might_resched+0x10/0x10 [ 435.970516][T15398] ? __might_fault+0xc6/0x120 [ 436.047802][T15398] ? bpf_lsm_bpf+0x9/0x10 [ 436.052183][T15398] ? security_bpf+0x87/0xb0 [ 436.056730][T15398] __sys_bpf+0x4ee/0x810 [ 436.061025][T15398] ? __pfx___sys_bpf+0x10/0x10 [ 436.065868][T15398] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 436.071922][T15398] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 436.078301][T15398] ? do_syscall_64+0x100/0x230 [ 436.083111][T15398] __x64_sys_bpf+0x7c/0x90 [ 436.087566][T15398] do_syscall_64+0xf3/0x230 [ 436.092110][T15398] ? clear_bhb_loop+0x35/0x90 [ 436.096875][T15398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.102845][T15398] RIP: 0033:0x7f4251d7def9 [ 436.102908][T15102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.107271][T15398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.107293][T15398] RSP: 002b:00007f4252b58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 436.107318][T15398] RAX: ffffffffffffffda RBX: 00007f4251f35f80 RCX: 00007f4251d7def9 [ 436.107335][T15398] RDX: 0000000000000094 RSI: 0000000020000040 RDI: 0000000000000005 [ 436.107350][T15398] RBP: 00007f4252b58090 R08: 0000000000000000 R09: 0000000000000000 [ 436.107364][T15398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.107378][T15398] R13: 0000000000000000 R14: 00007f4251f35f80 R15: 00007ffc290ccdb8 [ 436.107413][T15398] [ 436.136755][T15398] Mem-Info: [ 436.136781][T15398] active_anon:3288 inactive_anon:0 isolated_anon:0 [ 436.136781][T15398] active_file:1552 inactive_file:38363 isolated_file:0 [ 436.136781][T15398] unevictable:768 dirty:87 writeback:0 [ 436.136781][T15398] slab_reclaimable:9793 slab_unreclaimable:101722 [ 436.136781][T15398] mapped:20866 shmem:1250 pagetables:624 [ 436.136781][T15398] sec_pagetables:0 bounce:0 [ 436.136781][T15398] kernel_misc_reclaimable:0 [ 436.136781][T15398] free:1358519 free_pcp:1762 free_cma:0 [ 436.265602][T15102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.274343][T15102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.275913][T15398] Node 0 active_anon:13452kB inactive_anon:0kB active_file:6208kB inactive_file:153372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:83464kB dirty:348kB writeback:0kB shmem:3464kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11204kB pagetables:2596kB sec_pagetables:0kB all_unreclaimable? no [ 436.305638][T15102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.333319][T15398] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 436.342137][T15403] netlink: 'syz.3.2866': attribute type 1 has an invalid length. [ 436.384457][T15398] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 436.425780][T15398] lowmem_reserve[]: 0 2467 2468 0 0 [ 436.431148][T15398] Node 0 DMA32 free:1470052kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:13312kB inactive_anon:0kB active_file:6208kB inactive_file:152556kB unevictable:1536kB writepending:344kB present:3129332kB managed:2554984kB mlocked:0kB bounce:0kB free_pcp:816kB local_pcp:784kB free_cma:0kB [ 436.502463][T15403] bond17: entered promiscuous mode [ 436.508377][T15398] lowmem_reserve[]: 0 0 0 0 0 [ 436.513163][T15398] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 436.541509][T15398] lowmem_reserve[]: 0 0 0 0 0 [ 436.546417][T15398] Node 1 Normal free:3948612kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:5536kB local_pcp:0kB free_cma:0kB [ 436.576499][T15398] lowmem_reserve[]: 0 0 0 0 0 [ 436.581282][T15398] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 436.665962][T15398] Node 0 DMA32: 216*4kB (UME) 206*8kB (UME) 201*16kB (UME) 440*32kB (UME) 203*64kB (UME) 64*128kB (UME) 60*256kB (UM) 38*512kB (UME) 14*1024kB (UM) 7*2048kB (UM) 333*4096kB (UM) = 1468448kB [ 436.708141][T15398] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 436.729850][T15398] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 3*16kB (UM) 3*32kB (UM) 2*64kB (U) 2*128kB (U) 4*256kB (UM) 3*512kB (UM) 1*1024kB (U) 0*2048kB 963*4096kB (UM) = 3948612kB [ 436.793396][T15398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 436.826777][ T2585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.837105][T15398] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 436.849317][T15142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.856304][ T2585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.865433][T15398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 436.905679][T15398] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 436.916230][T15398] 41165 total pagecache pages [ 436.920961][T15398] 0 pages in swap cache [ 436.925133][T15398] Free swap = 124996kB [ 436.932326][T15398] Total swap = 124996kB [ 436.934843][T15121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.936635][T15398] 2097051 pages RAM [ 436.936649][T15398] 0 pages HighMem/MovableOnly [ 436.936659][T15398] 426967 pages reserved [ 436.936670][T15398] 0 pages cma reserved [ 437.007772][ T2585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.022790][ T2585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.077502][T15421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2868'. [ 437.178937][T15142] veth0_vlan: entered promiscuous mode [ 437.308640][T15429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2870'. [ 437.327166][T15428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2869'. [ 437.344809][T15142] veth1_vlan: entered promiscuous mode [ 437.368230][T15428] netlink: 'syz.3.2869': attribute type 3 has an invalid length. [ 437.382486][T15428] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2869'. [ 437.418583][T15428] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 437.436545][T15425] team0: Port device bridge9 added [ 437.446808][T15428] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 437.501221][T15142] veth0_macvtap: entered promiscuous mode [ 437.542059][T15142] veth1_macvtap: entered promiscuous mode [ 437.579983][T15121] veth0_vlan: entered promiscuous mode [ 437.597835][T15142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.611947][T15142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.624520][T15142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.639252][T15121] veth1_vlan: entered promiscuous mode [ 437.651425][T15142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.662922][T15142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.672996][T15142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.684960][T15142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.695142][T15142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.706254][T15142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.729426][T15142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.773955][T15142] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.784130][T15142] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.793289][T15142] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.802469][T15142] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.960803][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.007790][T15121] veth0_macvtap: entered promiscuous mode [ 438.022948][T15121] veth1_macvtap: entered promiscuous mode [ 438.106856][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.194880][T15121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.213293][T15121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.223562][T15121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.234374][T15121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.247286][T15121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.277828][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.311607][T15121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.324236][T15121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.334139][T15121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.344809][T15121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.355420][T15121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.366046][T15121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.376017][T15121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.387075][T15121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.398669][T15121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.411042][ T2585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.419787][ T2585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.456619][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.488492][T15121] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.497858][T15121] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.509355][T15121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.522346][T15121] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.579080][ T2585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.603023][ T2585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.718330][ T12] bridge_slave_1: left allmulticast mode [ 438.724033][ T12] bridge_slave_1: left promiscuous mode [ 438.739272][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.771424][ T12] bridge_slave_0: left allmulticast mode [ 438.786090][ T12] bridge_slave_0: left promiscuous mode [ 438.791993][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.311333][ T5245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 439.340247][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 439.362027][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 439.384932][ T5245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 439.402876][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 439.410445][ T5245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 439.571007][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.582545][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.602653][ T12] bond0 (unregistering): Released all slaves [ 439.616985][ T2585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.625740][ T2585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.893990][T15465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2881'. [ 439.945890][T15455] lo speed is unknown, defaulting to 1000 [ 439.968147][T15467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2882'. [ 440.024325][ T2585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.056975][ T2585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.113214][T15464] team0: Port device bridge10 added [ 440.527988][ T12] hsr_slave_0: left promiscuous mode [ 440.534019][ T12] hsr_slave_1: left promiscuous mode [ 440.541139][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.556785][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.568467][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.580327][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.609246][ T12] veth1_macvtap: left promiscuous mode [ 440.615025][ T12] veth0_macvtap: left promiscuous mode [ 440.621265][ T12] veth1_vlan: left promiscuous mode [ 440.627128][ T12] veth0_vlan: left promiscuous mode [ 441.313734][ T12] team0 (unregistering): Port device team_slave_1 removed [ 441.459406][ T12] team0 (unregistering): Port device team_slave_0 removed [ 441.506380][ T5245] Bluetooth: hci0: command tx timeout [ 441.866802][ T5253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 441.876736][ T5253] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 441.887021][ T5253] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 441.909193][T15481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2886'. [ 441.919779][ T5253] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 441.943986][ T5253] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 441.947901][T15481] netlink: 'syz.3.2886': attribute type 3 has an invalid length. [ 441.959185][T15481] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2886'. [ 441.965950][ T5253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 442.222502][ T5253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 442.233058][ T5253] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 442.242111][ T5253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 442.260051][ T5253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 442.277584][ T5253] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 442.295993][ T5253] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 442.463234][T15481] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 442.485664][T15481] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 442.529768][T15479] lo speed is unknown, defaulting to 1000 [ 442.758357][T15455] chnl_net:caif_netlink_parms(): no params data found [ 442.881625][T15496] netlink: 'syz.2.2889': attribute type 1 has an invalid length. [ 442.962516][T15496] bond15: entered promiscuous mode [ 443.014309][T15500] lo: left allmulticast mode [ 443.022131][T15500] bond14: (slave lo): Releasing active interface [ 443.047832][T15500] bond14: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 443.074565][T15500] bond15: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 443.103177][T15500] bond15: (slave lo): making interface the new active one [ 443.120744][T15500] bond15: (slave lo): Enslaving as an active interface with an up link [ 443.165967][T15490] lo speed is unknown, defaulting to 1000 [ 443.206032][T15508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2892'. [ 443.262557][T15455] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.271806][T15455] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.282741][T15455] bridge_slave_0: entered allmulticast mode [ 443.300595][T15455] bridge_slave_0: entered promiscuous mode [ 443.499974][T15455] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.515841][T15455] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.523863][T15455] bridge_slave_1: entered allmulticast mode [ 443.552175][T15455] bridge_slave_1: entered promiscuous mode [ 443.586519][ T5253] Bluetooth: hci0: command tx timeout [ 443.710045][T15520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2895'. [ 443.726237][T15520] lo: entered allmulticast mode [ 443.769297][T15455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.782519][T15455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.792585][T15523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2896'. [ 443.914724][T15523] team0: Port device bridge10 added [ 443.952383][T15455] team0: Port device team_slave_0 added [ 443.972308][T15455] team0: Port device team_slave_1 added [ 444.067219][ T5253] Bluetooth: hci1: command tx timeout [ 444.097578][T15455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.104567][T15455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.132873][T15455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.159094][T15533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2900'. [ 444.182636][T15533] netlink: 'syz.3.2900': attribute type 3 has an invalid length. [ 444.191537][T15533] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2900'. [ 444.230246][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.266576][T15455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.283790][T15455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.310985][T15455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.338052][T15533] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 444.354521][T15533] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 444.396647][ T5253] Bluetooth: hci3: command tx timeout [ 444.413931][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.532180][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.555231][T15455] hsr_slave_0: entered promiscuous mode [ 444.563577][T15455] hsr_slave_1: entered promiscuous mode [ 444.644740][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.663890][T15479] chnl_net:caif_netlink_parms(): no params data found [ 445.028589][T15479] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.037147][T15479] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.044497][T15479] bridge_slave_0: entered allmulticast mode [ 445.056973][T15479] bridge_slave_0: entered promiscuous mode [ 445.070892][T15479] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.085792][T15479] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.093179][T15479] bridge_slave_1: entered allmulticast mode [ 445.100963][T15479] bridge_slave_1: entered promiscuous mode [ 445.153470][T15490] chnl_net:caif_netlink_parms(): no params data found [ 445.338404][T15558] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2907'. [ 445.356141][T15558] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2907'. [ 445.377896][T15479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.402113][T15479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.550146][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.631311][T15479] team0: Port device team_slave_0 added [ 445.675387][ T5253] Bluetooth: hci0: command tx timeout [ 445.708102][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.725475][T15479] team0: Port device team_slave_1 added [ 445.781113][T15490] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.788915][T15490] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.796776][T15490] bridge_slave_0: entered allmulticast mode [ 445.804482][T15490] bridge_slave_0: entered promiscuous mode [ 445.812703][T15571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2911'. [ 445.886140][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.907954][T15490] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.922405][T15490] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.935349][T15490] bridge_slave_1: entered allmulticast mode [ 445.943845][T15490] bridge_slave_1: entered promiscuous mode [ 445.960459][T15571] team0: Port device bridge11 added [ 445.971424][T15479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.995718][T15479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.041284][T15479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.054569][T15479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.063118][T15479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.089096][T15573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2912'. [ 446.099427][T15479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.145898][ T5253] Bluetooth: hci1: command tx timeout [ 446.155714][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.296012][T15578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2913'. [ 446.318889][T15577] netlink: 'syz.2.2913': attribute type 3 has an invalid length. [ 446.363042][T15490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.413642][T15577] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 446.423648][T15490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.452623][T15479] hsr_slave_0: entered promiscuous mode [ 446.460349][T15479] hsr_slave_1: entered promiscuous mode [ 446.476272][T15577] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 446.486121][ T5253] Bluetooth: hci3: command tx timeout [ 446.495935][T15479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.503549][T15479] Cannot create hsr debugfs directory [ 446.642114][T15455] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 446.682857][T15490] team0: Port device team_slave_0 added [ 446.709219][T15455] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 446.722564][T15455] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 446.777997][T15490] team0: Port device team_slave_1 added [ 446.784080][T15455] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 446.909288][T15490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.916811][T15490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.956321][T15490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.999362][ T12] bridge_slave_1: left allmulticast mode [ 447.009440][ T12] bridge_slave_1: left promiscuous mode [ 447.015292][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.058152][ T12] bridge_slave_0: left allmulticast mode [ 447.063866][ T12] bridge_slave_0: left promiscuous mode [ 447.092313][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.124765][ T12] bridge_slave_1: left allmulticast mode [ 447.135347][ T12] bridge_slave_1: left promiscuous mode [ 447.158680][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.186666][ T12] bridge_slave_0: left allmulticast mode [ 447.193220][T15601] FAULT_INJECTION: forcing a failure. [ 447.193220][T15601] name failslab, interval 1, probability 0, space 0, times 0 [ 447.206487][ T12] bridge_slave_0: left promiscuous mode [ 447.213001][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.221567][T15601] CPU: 1 UID: 0 PID: 15601 Comm: syz.3.2921 Not tainted 6.11.0-rc6-syzkaller-00215-g6513eb3d3191 #0 [ 447.232380][T15601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 447.242461][T15601] Call Trace: [ 447.245760][T15601] [ 447.248705][T15601] dump_stack_lvl+0x241/0x360 [ 447.253400][T15601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.258614][T15601] ? __pfx__printk+0x10/0x10 [ 447.263219][T15601] ? fs_reclaim_acquire+0x93/0x140 [ 447.268347][T15601] ? __pfx___might_resched+0x10/0x10 [ 447.273654][T15601] should_fail_ex+0x3b0/0x4e0 [ 447.278354][T15601] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 447.284081][T15601] should_failslab+0xac/0x100 [ 447.288779][T15601] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 447.294507][T15601] __kmalloc_noprof+0xd8/0x400 [ 447.299280][T15601] ? kfree+0x4e/0x360 [ 447.303273][T15601] tomoyo_realpath_from_path+0xcf/0x5e0 [ 447.308842][T15601] tomoyo_path_number_perm+0x23a/0x880 [ 447.314354][T15601] ? tomoyo_path_number_perm+0x208/0x880 [ 447.320008][T15601] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 447.326041][T15601] ? __fget_files+0x29/0x470 [ 447.330647][T15601] ? __fget_files+0x3f6/0x470 [ 447.335333][T15601] ? __fget_files+0x29/0x470 [ 447.339955][T15601] security_file_ioctl+0x75/0xb0 [ 447.344941][T15601] __se_sys_ioctl+0x47/0x170 [ 447.349635][T15601] do_syscall_64+0xf3/0x230 [ 447.354146][T15601] ? clear_bhb_loop+0x35/0x90 [ 447.358841][T15601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.364743][T15601] RIP: 0033:0x7f1e0d97def9 [ 447.369164][T15601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.388776][T15601] RSP: 002b:00007f1e0e7eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.397197][T15601] RAX: ffffffffffffffda RBX: 00007f1e0db35f80 RCX: 00007f1e0d97def9 [ 447.405190][T15601] RDX: 0000000020000900 RSI: 00000000000089fe RDI: 0000000000000004 [ 447.413167][T15601] RBP: 00007f1e0e7eb090 R08: 0000000000000000 R09: 0000000000000000 [ 447.421150][T15601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.429124][T15601] R13: 0000000000000000 R14: 00007f1e0db35f80 R15: 00007ffde7052f98 [ 447.437115][T15601] [ 447.446360][T15601] ERROR: Out of memory at tomoyo_realpath_from_path. [ 447.754363][ T5253] Bluetooth: hci0: command tx timeout [ 448.208752][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.220401][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.231887][ T12] bond0 (unregistering): Released all slaves [ 448.238433][ T5253] Bluetooth: hci1: command tx timeout [ 448.405421][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.422642][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.433631][ T12] bond0 (unregistering): Released all slaves [ 448.453131][T15490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.464069][T15490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.490898][T15490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.510014][T15603] netlink: 'syz.2.2922': attribute type 1 has an invalid length. [ 448.534471][T15603] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 448.535217][T15604] lo: left allmulticast mode [ 448.549595][ T5253] Bluetooth: hci3: command tx timeout [ 448.572818][T15604] bond15: (slave lo): Releasing active interface [ 448.616646][T15604] bond15: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 448.857508][T15614] Bluetooth: MGMT ver 1.23 [ 448.932868][T15615] __nla_validate_parse: 2 callbacks suppressed [ 448.932887][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2925'. [ 449.032410][T15619] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2927'. [ 449.055851][T15619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2927'. [ 449.182750][T15490] hsr_slave_0: entered promiscuous mode [ 449.199105][T15490] hsr_slave_1: entered promiscuous mode [ 449.205491][T15490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.213464][T15490] Cannot create hsr debugfs directory [ 449.738550][T15631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2931'. [ 449.792319][T15630] netlink: 'syz.3.2931': attribute type 3 has an invalid length. [ 449.817244][T15630] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2931'. [ 449.879550][T15455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.967258][T15630] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 450.000526][T15630] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 450.083801][ T12] hsr_slave_0: left promiscuous mode [ 450.106750][ T12] hsr_slave_1: left promiscuous mode [ 450.116136][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.134118][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.144827][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.155918][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.173584][ T12] hsr_slave_0: left promiscuous mode [ 450.184510][ T12] hsr_slave_1: left promiscuous mode [ 450.193795][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.201446][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.217434][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.225014][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.272846][ T12] veth1_macvtap: left promiscuous mode [ 450.278559][ T12] veth0_macvtap: left promiscuous mode [ 450.284230][ T12] veth1_vlan: left promiscuous mode [ 450.290516][ T12] veth0_vlan: left promiscuous mode [ 450.297611][ T12] veth1_macvtap: left promiscuous mode [ 450.303184][ T12] veth0_macvtap: left promiscuous mode [ 450.308768][ T5245] Bluetooth: hci1: command tx timeout [ 450.309086][ T12] veth1_vlan: left promiscuous mode [ 450.319638][ T12] veth0_vlan: left promiscuous mode [ 450.635787][ T5245] Bluetooth: hci3: command tx timeout [ 451.420904][ T12] team0 (unregistering): Port device team_slave_1 removed [ 451.469288][ T12] team0 (unregistering): Port device team_slave_0 removed [ 452.439346][ T12] team0 (unregistering): Port device team_slave_1 removed [ 452.493883][ T12] team0 (unregistering): Port device team_slave_0 removed [ 452.705843][ T5245] Bluetooth: hci3: command tx timeout [ 453.005823][T15640] netlink: 'syz.2.2935': attribute type 1 has an invalid length. [ 453.027983][T15640] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 453.065494][T15455] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.165065][T15479] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 453.188806][T15479] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 453.211558][T15652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2938'. [ 453.243951][T15652] lo: left promiscuous mode [ 453.254091][T15652] lo: entered allmulticast mode [ 453.280594][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.287872][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.305485][T15479] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 453.319845][T15479] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 453.371196][ T2910] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.378450][ T2910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.650212][T15455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 454.130895][T15479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.140075][T15677] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 454.162675][T15490] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 454.179166][T15490] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 454.207295][T15490] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 454.231209][T15677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2946'. [ 454.232005][T15680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2947'. [ 454.266237][T15490] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 454.314141][T15680] netlink: 'syz.3.2947': attribute type 3 has an invalid length. [ 454.349778][T15455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.357856][T15680] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2947'. [ 454.380544][T15479] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.411949][T15680] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 454.445905][T15680] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 454.456580][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.463748][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.536953][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.544155][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.570608][T15688] netlink: 'syz.2.2949': attribute type 1 has an invalid length. [ 454.595100][T15688] bond16: entered promiscuous mode [ 454.610663][T15690] lo: entered promiscuous mode [ 454.620572][T15690] lo: left allmulticast mode [ 454.625332][T15690] bond16: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 454.651823][T15690] bond16: (slave lo): making interface the new active one [ 454.666000][T15690] bond16: (slave lo): Enslaving as an active interface with an up link [ 454.755418][T15455] veth0_vlan: entered promiscuous mode [ 454.841644][T15455] veth1_vlan: entered promiscuous mode [ 454.900862][T15490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.936062][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2951'. [ 454.954604][T15697] lo: entered allmulticast mode [ 455.024239][T15490] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.061898][T15455] veth0_macvtap: entered promiscuous mode [ 455.088437][T15455] veth1_macvtap: entered promiscuous mode [ 455.141707][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.149122][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.209388][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.216593][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.344109][T15455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.408867][T15455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.425508][T15455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.447962][T15455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.458750][T15455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.471308][T15455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.490117][T15455] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.511911][T15455] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.525447][T15455] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.536885][T15455] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.622401][T15479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.824389][ T2585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.855736][ T2585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.888437][T15479] veth0_vlan: entered promiscuous mode [ 455.938120][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.970500][T15479] veth1_vlan: entered promiscuous mode [ 455.976968][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.062327][T15490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.094596][T15479] veth0_macvtap: entered promiscuous mode [ 456.145509][T15733] netlink: 'syz.2.2961': attribute type 1 has an invalid length. [ 456.242912][T15733] bond17: entered promiscuous mode [ 456.272607][T15479] veth1_macvtap: entered promiscuous mode [ 456.329801][T15739] lo: left allmulticast mode [ 456.337943][T15739] bond16: (slave lo): Releasing active interface [ 456.346495][T15739] bond16: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 456.361518][T15739] bond17: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 456.375314][T15742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2963'. [ 456.389641][T15742] netlink: 'syz.3.2963': attribute type 3 has an invalid length. [ 456.402027][T15739] bond17: (slave lo): making interface the new active one [ 456.412751][T15742] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2963'. [ 456.423363][T15739] bond17: (slave lo): Enslaving as an active interface with an up link [ 456.437830][T15742] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 456.481912][T15742] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 456.517653][T15479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.544555][T15479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.557564][T15479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.570777][T15479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.591299][T15479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.614030][T15479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.639689][T15479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.649764][T15479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.661145][T15479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.673225][T15479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.681521][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2964'. [ 456.702971][T15747] lo: entered allmulticast mode [ 456.731272][T15479] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.741482][T15479] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.754199][T15479] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.763394][T15479] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.939205][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.963415][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.049033][T15490] veth0_vlan: entered promiscuous mode [ 457.054969][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.068845][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.094229][T15490] veth1_vlan: entered promiscuous mode [ 457.401440][ T791] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.456460][T15490] veth0_macvtap: entered promiscuous mode [ 457.474069][T15762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2969'. [ 457.492459][T15762] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.501461][T15762] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.510744][T15762] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.520209][T15762] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.530937][T15762] vxlan0: entered promiscuous mode [ 457.550292][T15490] veth1_macvtap: entered promiscuous mode [ 457.593346][T15490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.604019][T15490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.614251][T15490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.624969][T15490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.643316][T15490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.663860][T15490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.674455][T15490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.684787][T15490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.695408][T15490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.705322][T15490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.715950][T15490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.725909][T15490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.736434][T15490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.749643][T15490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.769093][T15490] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.778133][T15490] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.786884][T15490] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.795799][T15490] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.886470][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.894363][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.948086][ T791] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.988991][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.001721][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.236344][ T791] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.431349][ T791] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.693296][ T791] bridge_slave_1: left allmulticast mode [ 458.699644][ T791] bridge_slave_1: left promiscuous mode [ 458.705435][ T791] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.718142][ T791] bridge_slave_0: left allmulticast mode [ 458.723835][ T791] bridge_slave_0: left promiscuous mode [ 458.730019][ T791] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.876881][ T5253] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 458.888093][ T5253] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 458.904744][ T5253] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 458.917642][ T5253] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 458.931877][ T5253] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 458.944635][ T5253] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 459.252043][ T791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.263837][ T791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.278160][ T791] bond0 (unregistering): Released all slaves [ 459.323529][T15775] lo speed is unknown, defaulting to 1000 [ 459.810528][T15775] chnl_net:caif_netlink_parms(): no params data found [ 459.925211][ T791] hsr_slave_0: left promiscuous mode [ 459.943094][ T791] hsr_slave_1: left promiscuous mode [ 459.953128][ T791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.961507][ T791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.973558][ T791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.981382][ T791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.015515][ T791] veth1_macvtap: left promiscuous mode [ 460.021526][ T791] veth0_macvtap: left promiscuous mode [ 460.040089][ T791] veth1_vlan: left promiscuous mode [ 460.045501][ T791] veth0_vlan: left promiscuous mode [ 460.507279][ T5253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 460.517019][ T5253] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 460.530429][ T5253] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 460.549110][ T5253] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 460.557256][ T5253] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 460.580112][ T5253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 460.999233][ T5253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 461.020987][ T5253] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 461.036037][ T5253] Bluetooth: hci0: command tx timeout [ 461.036230][ T5255] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 461.052591][ T5255] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 461.081427][ T5255] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 461.104676][ T5255] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 461.214615][ T791] team0 (unregistering): Port device team_slave_1 removed [ 461.274318][ T791] team0 (unregistering): Port device team_slave_0 removed [ 461.810568][T15782] netlink: 'syz.3.2974': attribute type 1 has an invalid length. [ 461.823678][T15782] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 461.835421][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2976'. [ 462.062042][T15775] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.070365][T15775] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.078422][T15775] bridge_slave_0: entered allmulticast mode [ 462.089177][T15775] bridge_slave_0: entered promiscuous mode [ 462.098248][T15775] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.105385][T15775] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.112917][T15775] bridge_slave_1: entered allmulticast mode [ 462.120778][T15775] bridge_slave_1: entered promiscuous mode [ 462.160511][T15789] lo speed is unknown, defaulting to 1000 [ 462.169741][T15775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.192488][T15775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.253423][T15811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2980'. [ 462.318695][T15775] team0: Port device team_slave_0 added [ 462.326675][T15810] netlink: 'syz.2.2980': attribute type 3 has an invalid length. [ 462.342724][T15775] team0: Port device team_slave_1 added [ 462.345930][T15810] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2980'. [ 462.374161][T15810] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 462.388081][T15810] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 462.467391][T15775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.474385][T15775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.551724][T15775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.566604][T15796] lo speed is unknown, defaulting to 1000 [ 462.608089][T15775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.615086][T15775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.647676][ T5255] Bluetooth: hci1: command tx timeout [ 462.679483][T15775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.864182][ T791] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.950784][T15775] hsr_slave_0: entered promiscuous mode [ 462.968722][T15775] hsr_slave_1: entered promiscuous mode [ 462.977483][T15826] openvswitch: netlink: Missing key (keys=40, expected=80) [ 463.024752][ T791] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.106305][ T5245] Bluetooth: hci0: command tx timeout [ 463.190109][ T5245] Bluetooth: hci3: command tx timeout [ 463.209475][ T791] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.328209][ T791] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.352737][T15831] netlink: 'syz.2.2987': attribute type 1 has an invalid length. [ 463.382072][T15831] bond18: entered promiscuous mode [ 463.434806][T15832] lo: left allmulticast mode [ 463.443366][T15832] bond17: (slave lo): Releasing active interface [ 463.461125][T15832] bond17: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 463.481485][T15832] bond18: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 463.513082][T15832] bond18: (slave lo): making interface the new active one [ 463.530205][T15832] bond18: (slave lo): Enslaving as an active interface with an up link [ 463.683594][T15838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2988'. [ 464.015449][ T791] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.122545][T15789] chnl_net:caif_netlink_parms(): no params data found [ 464.249873][ T791] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.480409][ T791] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.499552][T15871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2997'. [ 464.523982][T15871] netlink: 'syz.2.2997': attribute type 3 has an invalid length. [ 464.537883][T15871] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2997'. [ 464.622443][ T791] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.674535][T15871] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 464.683171][T15796] chnl_net:caif_netlink_parms(): no params data found [ 464.692975][T15871] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 464.706978][ T5245] Bluetooth: hci1: command tx timeout [ 464.817659][T15789] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.835780][T15789] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.843079][T15789] bridge_slave_0: entered allmulticast mode [ 464.853555][T15789] bridge_slave_0: entered promiscuous mode [ 464.886190][T15883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3001'. [ 464.942436][T15789] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.964674][T15789] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.985758][T15789] bridge_slave_1: entered allmulticast mode [ 464.994052][T15789] bridge_slave_1: entered promiscuous mode [ 465.060166][T15887] netlink: 'syz.3.3002': attribute type 1 has an invalid length. [ 465.085080][T15887] bond18: entered promiscuous mode [ 465.184392][T15796] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.187116][ T5245] Bluetooth: hci0: command tx timeout [ 465.192659][T15796] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.204779][T15796] bridge_slave_0: entered allmulticast mode [ 465.213236][T15796] bridge_slave_0: entered promiscuous mode [ 465.265054][T15796] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.266999][ T5245] Bluetooth: hci3: command tx timeout [ 465.277839][T15796] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.278041][T15796] bridge_slave_1: entered allmulticast mode [ 465.320764][T15796] bridge_slave_1: entered promiscuous mode [ 465.361977][T15789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.378009][T15789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.405783][T15897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3004'. [ 465.503586][T15789] team0: Port device team_slave_0 added [ 465.516065][ T791] bridge_slave_1: left allmulticast mode [ 465.521759][ T791] bridge_slave_1: left promiscuous mode [ 465.539727][ T791] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.557117][ T791] bridge_slave_0: left allmulticast mode [ 465.562831][ T791] bridge_slave_0: left promiscuous mode [ 465.573213][ T791] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.583677][ T791] bridge_slave_1: left allmulticast mode [ 465.589811][ T791] bridge_slave_1: left promiscuous mode [ 465.596872][ T791] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.608214][ T791] bridge_slave_0: left allmulticast mode [ 465.613942][ T791] bridge_slave_0: left promiscuous mode [ 465.620019][ T791] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.344994][ T791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.360673][ T791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.374075][ T791] bond0 (unregistering): Released all slaves [ 466.518452][ T791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.530932][ T791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.541891][ T791] bond0 (unregistering): Released all slaves [ 466.560654][T15796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.610045][T15789] team0: Port device team_slave_1 added [ 466.785752][ T5245] Bluetooth: hci1: command tx timeout [ 466.829021][T15796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.838660][T15775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 466.968552][T15775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 466.982392][T15775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 466.998681][T15789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.006667][T15789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.033074][T15789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.077076][T15775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 467.104403][T15789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.126489][T15789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.158155][T15789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.177594][T15796] team0: Port device team_slave_0 added [ 467.245497][T15913] xt_CT: No such helper "pptp" [ 467.275636][ T5245] Bluetooth: hci0: command tx timeout [ 467.304448][T15796] team0: Port device team_slave_1 added [ 467.345841][ T5245] Bluetooth: hci3: command tx timeout [ 467.421001][T15796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.436516][T15796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.485877][T15796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.609390][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3012'. [ 467.623706][T15796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.632062][T15796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.673826][T15796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.707052][T15789] hsr_slave_0: entered promiscuous mode [ 467.720412][T15789] hsr_slave_1: entered promiscuous mode [ 467.731059][T15789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.738932][T15789] Cannot create hsr debugfs directory [ 467.744671][T15928] netlink: 'syz.2.3014': attribute type 1 has an invalid length. [ 467.782150][T15933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3015'. [ 467.782829][T15928] bond19: entered promiscuous mode [ 467.826291][T15933] netlink: 'syz.3.3015': attribute type 3 has an invalid length. [ 467.834063][T15933] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3015'. [ 467.856168][T15929] bond18: (slave lo): Releasing active interface [ 467.863784][T15929] bond18: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 467.874913][T15929] bond19: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 467.892339][T15929] bond19: (slave lo): making interface the new active one [ 467.902547][T15929] bond19: (slave lo): Enslaving as an active interface with an up link [ 467.985009][T15935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3016'. [ 468.041283][T15933] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 468.055828][T15933] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 468.112071][T15796] hsr_slave_0: entered promiscuous mode [ 468.136620][T15796] hsr_slave_1: entered promiscuous mode [ 468.143130][T15796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.153569][T15796] Cannot create hsr debugfs directory [ 468.865816][ T5245] Bluetooth: hci1: command tx timeout [ 469.425837][ T5245] Bluetooth: hci3: command tx timeout [ 469.479876][ T791] hsr_slave_0: left promiscuous mode [ 469.495226][ T791] hsr_slave_1: left promiscuous mode [ 469.502245][T15952] netlink: 'syz.2.3022': attribute type 10 has an invalid length. [ 469.510528][T15952] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3022'. [ 469.510697][ T791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.535928][ T791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.544202][ T791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.551979][ T791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.569769][ T791] hsr_slave_0: left promiscuous mode [ 469.578789][ T791] hsr_slave_1: left promiscuous mode [ 469.585001][ T791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.592673][ T791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.602024][ T791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.610137][ T791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.652871][ T791] veth1_macvtap: left promiscuous mode [ 469.658629][ T791] veth0_macvtap: left promiscuous mode [ 469.664298][ T791] veth1_vlan: left promiscuous mode [ 469.673444][ T791] veth0_vlan: left promiscuous mode [ 469.680293][ T791] veth1_macvtap: left promiscuous mode [ 469.687095][ T791] veth0_macvtap: left promiscuous mode [ 469.692704][ T791] veth1_vlan: left promiscuous mode [ 469.698820][ T791] veth0_vlan: left promiscuous mode [ 470.434589][ T791] team0 (unregistering): Port device team_slave_1 removed [ 470.485223][ T791] team0 (unregistering): Port device team_slave_0 removed [ 471.403767][ T791] team0 (unregistering): Port device team_slave_1 removed [ 471.458508][ T791] team0 (unregistering): Port device team_slave_0 removed [ 472.327115][T15962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3025'. [ 472.440235][T15775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.456563][T15968] netlink: 'syz.3.3028': attribute type 1 has an invalid length. [ 472.500867][T15968] bond19: entered promiscuous mode [ 472.512081][T15775] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.519327][T15969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3027'. [ 472.581249][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.588459][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.629007][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.636267][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.845478][T15977] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 472.848641][T15775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 472.934883][T15789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 472.969956][T15789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 472.985248][T15789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 473.088082][T15789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 473.141137][T15983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3032'. [ 473.190101][T15983] netlink: 'syz.2.3032': attribute type 3 has an invalid length. [ 473.200212][T15983] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3032'. [ 473.279677][T15983] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 473.303982][T15983] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 473.418908][T15993] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3035'. [ 473.442589][T15993] nbd: must specify at least one socket [ 473.459404][T15789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.524756][T15789] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.579466][T15775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.607559][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.614721][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.633210][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.640431][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.735449][T15796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 473.767877][T15796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 473.794031][T15796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 473.819851][T15796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 473.947691][T15789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 474.023945][T15775] veth0_vlan: entered promiscuous mode [ 474.098193][T15775] veth1_vlan: entered promiscuous mode [ 474.246278][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3039'. [ 474.266098][T16010] nê1®N: renamed from lo (while UP) [ 474.283697][T16010] nê1®N: entered allmulticast mode [ 474.338489][T15775] veth0_macvtap: entered promiscuous mode [ 474.365400][T15775] veth1_macvtap: entered promiscuous mode [ 474.430851][T15796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.441758][T16016] netlink: 'syz.2.3041': attribute type 1 has an invalid length. [ 474.470671][T16016] bond20: entered promiscuous mode [ 474.484743][T15789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.529637][T15775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.590096][T15796] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.631829][T15775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.643617][T15775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.657873][T15775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.669813][T15775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.682555][T15775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.718433][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.725681][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.782376][T15775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.804697][T15775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.815292][T15775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.839576][T15775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.840277][T16030] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3046'. [ 474.858521][T16030] nbd: must specify at least one socket [ 474.919270][ T2585] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.926491][ T2585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.034977][T15789] veth0_vlan: entered promiscuous mode [ 475.117085][T16035] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3048'. [ 475.127191][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.135005][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.157636][T15789] veth1_vlan: entered promiscuous mode [ 475.172704][T16035] netlink: 'syz.2.3048': attribute type 6 has an invalid length. [ 475.181185][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3048'. [ 475.234909][ T2585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.243809][ T2585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.311869][T15789] veth0_macvtap: entered promiscuous mode [ 475.343224][T15789] veth1_macvtap: entered promiscuous mode [ 475.352489][T16038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3049'. [ 475.398151][T15789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.414443][T16038] netlink: 'syz.2.3049': attribute type 3 has an invalid length. [ 475.422729][T16038] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3049'. [ 475.432613][T15789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.448319][T15789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.460301][T15789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.471978][T15789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.482461][T15789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.494265][T15789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.504615][T15789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.519199][T15789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.539582][T15789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.563157][T16038] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 475.577770][T15789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.587690][T16038] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 475.597723][T15789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.607812][T15789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.616938][T15789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.774160][T15796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.818644][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.866109][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.932160][ T2585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.952313][ T2585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.320919][T15796] veth0_vlan: entered promiscuous mode [ 476.343892][T15796] veth1_vlan: entered promiscuous mode [ 476.379207][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3052'. [ 476.428348][T15796] veth0_macvtap: entered promiscuous mode [ 476.451266][T15796] veth1_macvtap: entered promiscuous mode [ 476.502536][T15796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.514668][T15796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.533949][T15796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.561107][T15796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.581225][T15796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.601643][T16066] netlink: 'syz.3.3056': attribute type 1 has an invalid length. [ 476.653466][T16066] bond20: entered promiscuous mode [ 476.673277][T15796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.696918][T15796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.715943][T15796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.735661][T15796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.747336][T15796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.758378][T15796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.768441][T15796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.779240][T15796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.791669][T15796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.821572][T15796] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.830717][T15796] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.850548][T15796] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.868573][T15796] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.914406][T16075] nbd: must specify at least one socket [ 477.049952][ T1121] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.224500][ T2585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.232950][ T2585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.262832][ T791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.275768][ T791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.511412][ T1121] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.577898][ T1121] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.696253][ T1121] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.791885][ T1121] bridge_slave_1: left allmulticast mode [ 477.797663][ T1121] bridge_slave_1: left promiscuous mode [ 477.803384][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.812546][ T1121] bridge_slave_0: left allmulticast mode [ 477.819797][ T1121] bridge_slave_0: left promiscuous mode [ 477.827343][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.084814][T16081] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 478.437079][T16089] sock: sock_timestamping_bind_phc: sock not bind to device [ 478.483882][ T5255] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 478.502772][ T5255] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 478.512245][ T5255] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 478.539034][ T5255] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 478.562431][ T5255] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 478.576174][ T5255] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 478.644660][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.661724][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.674024][ T1121] bond0 (unregistering): Released all slaves [ 478.763346][T16090] lo speed is unknown, defaulting to 1000 [ 479.257549][ T1121] hsr_slave_0: left promiscuous mode [ 479.264882][ T1121] hsr_slave_1: left promiscuous mode [ 479.283605][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.295266][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.313212][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.321968][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.377594][ T1121] veth1_macvtap: left promiscuous mode [ 479.383367][ T1121] veth0_macvtap: left promiscuous mode [ 479.398217][ T1121] veth1_vlan: left promiscuous mode [ 479.403603][ T1121] veth0_vlan: left promiscuous mode [ 479.661804][T16101] __nla_validate_parse: 2 callbacks suppressed [ 479.661824][T16101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3063'. [ 479.693901][T16101] netlink: 'syz.3.3063': attribute type 3 has an invalid length. [ 479.705197][T16101] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3063'. [ 479.852174][ T5255] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 479.862237][ T5255] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 479.871850][ T5255] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 479.887718][ T5255] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 479.915114][ T5255] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 479.925493][ T5255] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 480.383784][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 480.436908][ T5255] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 480.454961][ T5255] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 480.468297][ T5255] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 480.493425][ T5255] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 480.503453][ T5255] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 480.504115][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 480.520981][ T5255] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 480.626279][ T5255] Bluetooth: hci0: command tx timeout [ 481.055166][T16101] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 481.060801][T16090] chnl_net:caif_netlink_parms(): no params data found [ 481.085750][T16101] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 481.236779][T16105] lo speed is unknown, defaulting to 1000 [ 481.453527][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3065'. [ 481.475991][T16090] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.483400][T16090] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.536234][T16090] bridge_slave_0: entered allmulticast mode [ 481.543409][T16090] bridge_slave_0: entered promiscuous mode [ 481.574348][T16090] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.605807][T16090] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.626818][T16090] bridge_slave_1: entered allmulticast mode [ 481.651573][T16090] bridge_slave_1: entered promiscuous mode [ 481.680506][T16108] lo speed is unknown, defaulting to 1000 [ 481.895755][T16090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.904947][T16127] netlink: 'syz.3.3069': attribute type 1 has an invalid length. [ 481.986147][ T5255] Bluetooth: hci1: command tx timeout [ 481.992622][T16127] bond21: entered promiscuous mode [ 482.018381][T16090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.103053][T16135] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3070'. [ 482.112858][T16135] nbd: must specify at least one socket [ 482.129665][T16090] team0: Port device team_slave_0 added [ 482.189111][T16090] team0: Port device team_slave_1 added [ 482.364020][T16146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3074'. [ 482.421627][T16090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.445116][T16090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.505642][T16090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.543461][T16090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.566416][T16090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.602218][T16090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.626187][ T5255] Bluetooth: hci3: command tx timeout [ 482.667707][T16151] netlink: 'syz.3.3076': attribute type 4 has an invalid length. [ 482.683390][T16151] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3076'. [ 482.700144][T16151] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3076'. [ 482.709368][ T5255] Bluetooth: hci0: command tx timeout [ 482.805317][ T1121] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.929792][ T1121] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.003072][T16090] hsr_slave_0: entered promiscuous mode [ 483.018284][T16090] hsr_slave_1: entered promiscuous mode [ 483.097508][ T1121] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.112100][T16160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3078'. [ 483.272600][ T1121] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.394852][T16168] netlink: 'syz.3.3081': attribute type 1 has an invalid length. [ 483.437801][T16168] bond22: entered promiscuous mode [ 483.466915][T16105] chnl_net:caif_netlink_parms(): no params data found [ 483.688052][T16182] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3083'. [ 483.697647][T16182] nbd: must specify at least one socket [ 483.752660][T16108] chnl_net:caif_netlink_parms(): no params data found [ 483.887885][ T1121] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.933759][T16105] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.941313][T16105] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.943040][T16190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3086'. [ 483.948691][T16105] bridge_slave_0: entered allmulticast mode [ 483.950410][T16105] bridge_slave_0: entered promiscuous mode [ 484.065790][ T5255] Bluetooth: hci1: command tx timeout [ 484.109511][ T1121] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.129825][T16105] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.137205][T16105] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.144450][T16105] bridge_slave_1: entered allmulticast mode [ 484.152435][T16105] bridge_slave_1: entered promiscuous mode [ 484.323762][T16195] netlink: 'syz.3.3087': attribute type 21 has an invalid length. [ 484.446155][ T1121] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.572566][ T1121] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.607765][T16105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.628786][T16105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.705736][ T5255] Bluetooth: hci3: command tx timeout [ 484.730859][T16108] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.738448][T16108] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.745850][T16108] bridge_slave_0: entered allmulticast mode [ 484.753493][T16108] bridge_slave_0: entered promiscuous mode [ 484.785811][ T5255] Bluetooth: hci0: command tx timeout [ 484.835202][T16218] __nla_validate_parse: 2 callbacks suppressed [ 484.835223][T16218] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3094'. [ 484.835826][T16105] team0: Port device team_slave_0 added [ 484.841766][T16218] nbd: must specify at least one socket [ 484.867924][T16108] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.875134][T16108] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.886215][T16108] bridge_slave_1: entered allmulticast mode [ 484.899101][T16108] bridge_slave_1: entered promiscuous mode [ 484.957973][T16105] team0: Port device team_slave_1 added [ 485.050641][T16221] netlink: 'syz.3.3095': attribute type 1 has an invalid length. [ 485.094443][T16221] bond23: entered promiscuous mode [ 485.131989][T16108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.154311][T16108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.166288][T16105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.173410][T16105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.200863][T16105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.271075][T16105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.284146][T16105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.312855][T16105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.338488][ T1121] bridge_slave_1: left allmulticast mode [ 485.344327][ T1121] bridge_slave_1: left promiscuous mode [ 485.351949][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.362187][ T1121] bridge_slave_0: left allmulticast mode [ 485.368211][ T1121] bridge_slave_0: left promiscuous mode [ 485.373924][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.385684][ T1121] bridge_slave_1: left allmulticast mode [ 485.391346][ T1121] bridge_slave_1: left promiscuous mode [ 485.397606][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.409588][ T1121] bridge_slave_0: left allmulticast mode [ 485.415238][ T1121] bridge_slave_0: left promiscuous mode [ 485.422638][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.675013][T16233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3098'. [ 486.145697][ T5255] Bluetooth: hci1: command tx timeout [ 486.308603][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.320362][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.333823][ T1121] bond0 (unregistering): Released all slaves [ 486.485260][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.502023][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.513169][ T1121] bond0 (unregistering): Released all slaves [ 486.535387][T16108] team0: Port device team_slave_0 added [ 486.546412][T16108] team0: Port device team_slave_1 added [ 486.796318][ T5255] Bluetooth: hci3: command tx timeout [ 486.876140][ T5255] Bluetooth: hci0: command tx timeout [ 486.897730][T16108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.904735][T16108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.955379][T16108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.006018][T16105] hsr_slave_0: entered promiscuous mode [ 487.016835][T16105] hsr_slave_1: entered promiscuous mode [ 487.025753][T16105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.033337][T16105] Cannot create hsr debugfs directory [ 487.062927][T16244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3102'. [ 487.116830][T16108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.123827][T16108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.166063][T16108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.260887][T16251] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3105'. [ 487.281579][T16251] nbd: must specify at least one socket [ 487.381649][T16257] netlink: 'syz.2.3108': attribute type 1 has an invalid length. [ 487.385613][T16090] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 487.389684][T16257] netlink: 9396 bytes leftover after parsing attributes in process `syz.2.3108'. [ 487.409870][T16090] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 487.434271][T16256] netlink: 'syz.3.3107': attribute type 1 has an invalid length. [ 487.484180][T16256] bond24: entered promiscuous mode [ 487.539783][T16090] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 487.551979][T16090] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 487.680938][T16108] hsr_slave_0: entered promiscuous mode [ 487.688324][T16108] hsr_slave_1: entered promiscuous mode [ 487.696919][T16108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.714751][T16108] Cannot create hsr debugfs directory [ 487.730849][T16269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3110'. [ 487.789937][T16257] syzkaller0: entered promiscuous mode [ 487.796030][T16257] syzkaller0: entered allmulticast mode [ 487.803675][ T2585] syzkaller0: tun_net_xmit 48 [ 487.810399][T16258] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 487.820266][T16258] syzkaller0: Linktype set failed because interface is up [ 487.865231][T16272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3111'. [ 488.228574][ T5255] Bluetooth: hci1: command tx timeout [ 488.868648][ T5255] Bluetooth: hci3: command tx timeout [ 490.130451][T16274] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 490.506253][T16283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3114'. [ 490.763646][T16290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3117'. [ 490.818117][ T1121] hsr_slave_0: left promiscuous mode [ 490.828138][ T1121] hsr_slave_1: left promiscuous mode [ 490.834258][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.841996][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.851572][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.860979][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.878228][ T1121] hsr_slave_0: left promiscuous mode [ 490.884328][ T1121] hsr_slave_1: left promiscuous mode [ 490.892401][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.901754][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.911286][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.919050][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.960904][ T1121] veth1_macvtap: left promiscuous mode [ 490.966785][ T1121] veth0_macvtap: left promiscuous mode [ 490.972467][ T1121] veth1_vlan: left promiscuous mode [ 490.979066][ T1121] veth0_vlan: left promiscuous mode [ 490.985905][ T1121] veth1_macvtap: left promiscuous mode [ 490.991815][ T1121] veth0_macvtap: left promiscuous mode [ 490.997624][ T1121] veth1_vlan: left promiscuous mode [ 491.003007][ T1121] veth0_vlan: left promiscuous mode [ 491.698435][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 491.752830][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 492.674245][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 492.729630][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 493.411409][T16090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.482904][T16302] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3119'. [ 493.500919][T16090] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.504137][T16302] nbd: must specify at least one socket [ 493.528397][T16303] netlink: 'syz.2.3120': attribute type 1 has an invalid length. [ 493.595057][T16303] bond21: entered promiscuous mode [ 493.612779][ T791] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.620053][ T791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.679123][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.686306][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.889276][T16090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 494.082581][T16317] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3124'. [ 494.116412][T16105] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 494.147696][T16105] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 494.171656][T16105] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 494.250261][T16105] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 494.431561][T16090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.480975][T16325] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3126'. [ 494.573168][T16329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3127'. [ 494.694064][T16332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3128'. [ 494.757385][T16090] veth0_vlan: entered promiscuous mode [ 494.846336][T16090] veth1_vlan: entered promiscuous mode [ 494.856583][T16108] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 494.896607][T16108] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 494.917517][T16108] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 494.926137][T16338] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3131'. [ 494.935112][T16338] nbd: must specify at least one socket [ 494.965463][T16105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.983448][T16341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3132'. [ 495.013861][T16108] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 495.071372][T16105] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.086413][T16344] netlink: 'syz.2.3133': attribute type 1 has an invalid length. [ 495.138789][T16344] bond22: entered promiscuous mode [ 495.188561][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.195766][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.207426][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.214609][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.333639][T16090] veth0_macvtap: entered promiscuous mode [ 495.357659][T16352] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3135'. [ 495.384189][T16090] veth1_macvtap: entered promiscuous mode [ 495.451993][T16108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.554845][T16108] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.577752][T16090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.603286][T16090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.616315][T16090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.627899][T16090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.638731][T16090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.652026][T16090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.678517][ T791] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.685717][ T791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.741631][T16090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.776078][T16090] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.792736][T16090] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.824389][T16090] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.866563][ T791] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.873853][ T791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.904239][T16370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3139'. [ 496.088242][T16105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.114052][T16373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3140'. [ 496.150683][T16375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3141'. [ 496.180072][T16375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3141'. [ 496.262574][ T791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.287293][ T791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.360405][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.369429][T16375] tap0: tun_chr_ioctl cmd 35108 [ 496.377927][T16105] veth0_vlan: entered promiscuous mode [ 496.383556][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.568793][T16105] veth1_vlan: entered promiscuous mode [ 496.692555][T16108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.741366][T16105] veth0_macvtap: entered promiscuous mode [ 496.784099][T16105] veth1_macvtap: entered promiscuous mode [ 496.848199][T16105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.884978][T16105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.909374][T16105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.933208][T16105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.975397][T16105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.997003][T16105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.020461][T16105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.041392][T16105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.066024][T16105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.095003][T16105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.140473][T16105] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.160769][T16105] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.172243][T16105] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.197009][T16105] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.388210][T16413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3150'. [ 497.529649][ T1121] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.650855][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.673228][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.692412][T16108] veth0_vlan: entered promiscuous mode [ 497.722511][ T1121] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.753342][ T791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.764840][ T791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.769173][T16108] veth1_vlan: entered promiscuous mode [ 497.813625][ T1121] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.854828][T16108] veth0_macvtap: entered promiscuous mode [ 497.916291][ T1121] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.942347][T16108] veth1_macvtap: entered promiscuous mode [ 498.018237][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.035491][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.053154][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.063793][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.076485][T16108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.094293][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.108249][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.118342][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.129016][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.139522][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.150777][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.160656][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.172274][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.184238][T16108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.196045][T16108] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.205921][T16108] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.214635][T16108] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.224480][T16108] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.331855][ T1121] bridge_slave_1: left allmulticast mode [ 498.339951][ T1121] bridge_slave_1: left promiscuous mode [ 498.347004][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.357336][ T1121] bridge_slave_0: left allmulticast mode [ 498.363027][ T1121] bridge_slave_0: left promiscuous mode [ 498.368889][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.906687][ T5245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 498.937055][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 498.945292][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 498.976891][ T5245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 499.000342][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 499.009269][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.009584][ T5245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 499.041249][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.052777][ T1121] bond0 (unregistering): Released all slaves [ 499.145791][ T2910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.153647][ T2910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.204507][ T2585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.216613][ T2585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.254698][T16427] lo speed is unknown, defaulting to 1000 [ 499.303021][T16431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3156'. [ 500.091011][ T1121] hsr_slave_0: left promiscuous mode [ 500.097110][ T1121] hsr_slave_1: left promiscuous mode [ 500.103174][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.111365][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.119322][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.127041][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.156662][ T1121] veth1_macvtap: left promiscuous mode [ 500.162241][ T1121] veth0_macvtap: left promiscuous mode [ 500.168125][ T1121] veth1_vlan: left promiscuous mode [ 500.173428][ T1121] veth0_vlan: left promiscuous mode [ 500.678237][T16108] syz-executor (16108) used greatest stack depth: 18416 bytes left [ 500.782239][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 500.848591][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 501.106699][ T5255] Bluetooth: hci0: command tx timeout [ 501.333229][ T5245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 501.348872][ T5245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 501.358962][ T5245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 501.367514][ T5245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 501.376921][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 501.391608][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 501.739992][T16454] lo speed is unknown, defaulting to 1000 [ 501.851906][T16427] chnl_net:caif_netlink_parms(): no params data found [ 502.125840][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3163'. [ 502.361785][T16427] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.375787][T16427] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.386191][T16427] bridge_slave_0: entered allmulticast mode [ 502.393713][T16427] bridge_slave_0: entered promiscuous mode [ 502.424568][T16427] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.449806][T16427] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.473995][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 502.484763][T16427] bridge_slave_1: entered allmulticast mode [ 502.486308][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 502.499075][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 502.510339][T16427] bridge_slave_1: entered promiscuous mode [ 502.536693][ T5245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 502.551032][ T5245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 502.562037][ T5245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 502.688960][T16427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.731448][T16427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.941983][T16477] lo speed is unknown, defaulting to 1000 [ 503.003096][T16492] netlink: 'syz.3.3171': attribute type 3 has an invalid length. [ 503.022348][T16492] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3171'. [ 503.032178][ T1121] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.036770][T16494] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3172'. [ 503.139528][T16427] team0: Port device team_slave_0 added [ 503.185971][ T5245] Bluetooth: hci0: command tx timeout [ 503.238250][ T1121] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.308017][T16427] team0: Port device team_slave_1 added [ 503.319886][T16454] chnl_net:caif_netlink_parms(): no params data found [ 503.425736][ T5245] Bluetooth: hci1: command tx timeout [ 503.460884][ T1121] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.595812][ T1121] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.612562][T16427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.619728][T16427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.647038][T16427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.675181][T16510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3175'. [ 503.700267][T16427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.707555][T16427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.745744][T16427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.981263][T16427] hsr_slave_0: entered promiscuous mode [ 503.998292][T16427] hsr_slave_1: entered promiscuous mode [ 504.020793][T16454] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.035405][T16454] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.044224][T16454] bridge_slave_0: entered allmulticast mode [ 504.054047][T16454] bridge_slave_0: entered promiscuous mode [ 504.067124][T16454] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.074271][T16454] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.083363][T16454] bridge_slave_1: entered allmulticast mode [ 504.091036][T16454] bridge_slave_1: entered promiscuous mode [ 504.248284][T16454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.283386][T16530] netlink: 'syz.3.3180': attribute type 32 has an invalid length. [ 504.293941][T16454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.399690][ T1121] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.432084][T16533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3180'. [ 504.447258][T16454] team0: Port device team_slave_0 added [ 504.501096][ T1121] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.517880][T16454] team0: Port device team_slave_1 added [ 504.534196][T16477] chnl_net:caif_netlink_parms(): no params data found [ 504.591480][ T1121] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.636358][ T5245] Bluetooth: hci3: command tx timeout [ 504.645451][T16454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.654183][T16454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.681898][T16454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.730458][ T1121] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.751797][T16454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.760841][T16454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.790169][T16454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.919862][T16454] hsr_slave_0: entered promiscuous mode [ 504.926853][T16454] hsr_slave_1: entered promiscuous mode [ 504.933296][T16454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.941408][T16454] Cannot create hsr debugfs directory [ 505.030416][T16477] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.038792][T16477] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.046323][T16477] bridge_slave_0: entered allmulticast mode [ 505.062825][T16477] bridge_slave_0: entered promiscuous mode [ 505.145324][T16477] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.167723][T16477] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.175046][T16477] bridge_slave_1: entered allmulticast mode [ 505.201257][T16477] bridge_slave_1: entered promiscuous mode [ 505.240820][T16546] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3183'. [ 505.265746][ T5245] Bluetooth: hci0: command tx timeout [ 505.346920][T16477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.374059][T16477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.428809][T16551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3185'. [ 505.506356][ T5245] Bluetooth: hci1: command tx timeout [ 505.511265][ T1121] bridge_slave_1: left allmulticast mode [ 505.524368][ T1121] bridge_slave_1: left promiscuous mode [ 505.532778][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.552992][ T1121] bridge_slave_0: left allmulticast mode [ 505.563371][ T1121] bridge_slave_0: left promiscuous mode [ 505.583449][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.607720][ T1121] bridge_slave_1: left allmulticast mode [ 505.613412][ T1121] bridge_slave_1: left promiscuous mode [ 505.623070][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.633733][ T1121] bridge_slave_0: left allmulticast mode [ 505.640028][ T1121] bridge_slave_0: left promiscuous mode [ 505.648501][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.414860][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.427582][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.440393][ T1121] bond0 (unregistering): Released all slaves [ 506.573813][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.585663][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.597467][ T1121] bond0 (unregistering): Released all slaves [ 506.622208][T16477] team0: Port device team_slave_0 added [ 506.632386][T16477] team0: Port device team_slave_1 added [ 506.642915][T16554] netlink: 'syz.2.3186': attribute type 10 has an invalid length. [ 506.676894][T16554] bond0: (slave bond_slave_0): Releasing backup interface [ 506.707666][ T5245] Bluetooth: hci3: command tx timeout [ 507.081168][T16477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.088555][T16477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.116493][T16477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.176645][T16477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.183641][T16477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.214596][T16477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.290266][T16427] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 507.327910][T16573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3191'. [ 507.345984][ T5245] Bluetooth: hci0: command tx timeout [ 507.413933][T16427] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 507.454351][T16578] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 507.512090][T16477] hsr_slave_0: entered promiscuous mode [ 507.519177][T16477] hsr_slave_1: entered promiscuous mode [ 507.535738][T16477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 507.555735][T16477] Cannot create hsr debugfs directory [ 507.579797][T16427] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 507.590047][ T5245] Bluetooth: hci1: command tx timeout [ 507.602576][T16427] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 507.838393][T16591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3197'. [ 508.551465][ T1121] hsr_slave_0: left promiscuous mode [ 508.558010][ T1121] hsr_slave_1: left promiscuous mode [ 508.564168][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.572796][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.587211][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.594634][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.611150][ T1121] hsr_slave_0: left promiscuous mode [ 508.625828][ T1121] hsr_slave_1: left promiscuous mode [ 508.636056][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.643492][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.672854][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.685399][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.740395][ T1121] veth1_macvtap: left promiscuous mode [ 508.746786][ T1121] veth0_macvtap: left promiscuous mode [ 508.752480][ T1121] veth1_vlan: left promiscuous mode [ 508.757934][ T1121] veth0_vlan: left promiscuous mode [ 508.764171][ T1121] veth1_macvtap: left promiscuous mode [ 508.772124][ T1121] veth0_macvtap: left promiscuous mode [ 508.778398][ T1121] veth1_vlan: left promiscuous mode [ 508.783702][ T1121] veth0_vlan: left promiscuous mode [ 508.785972][ T5245] Bluetooth: hci3: command tx timeout [ 509.523471][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 509.583294][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 509.665928][ T5245] Bluetooth: hci1: command tx timeout [ 510.559624][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 510.614069][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 510.885696][ T5245] Bluetooth: hci3: command tx timeout [ 511.232246][T16454] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 511.307681][T16427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.395375][T16454] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 511.404619][T16623] bond19: Unknown bonding mode 6 for xdp xmit [ 511.411545][T16623] ------------[ cut here ]------------ [ 511.417092][T16623] WARNING: CPU: 0 PID: 16623 at drivers/net/bonding/bond_main.c:5541 bond_xdp_get_xmit_slave+0x519/0x690 [ 511.428399][T16623] Modules linked in: [ 511.432321][T16623] CPU: 0 UID: 0 PID: 16623 Comm: syz.2.3206 Not tainted 6.11.0-rc6-syzkaller-00215-g6513eb3d3191 #0 [ 511.443125][T16623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 511.453238][T16623] RIP: 0010:bond_xdp_get_xmit_slave+0x519/0x690 [ 511.459779][T16623] Code: be 90 13 00 00 48 c7 c2 c0 5d 96 8c e8 10 02 13 fb eb 98 e8 79 60 36 fb 4c 89 e7 48 c7 c6 c0 7c 96 8c 89 da e8 48 e7 5b 05 90 <0f> 0b 90 eb a6 e8 5d 60 36 fb 48 85 db 74 0a e8 53 60 36 fb e9 72 [ 511.479452][T16623] RSP: 0018:ffffc9000414f848 EFLAGS: 00010246 [ 511.485589][T16623] RAX: 4d0f7aec7fd49f00 RBX: 0000000000000006 RCX: 4d0f7aec7fd49f00 [ 511.493596][T16623] RDX: ffffc90009ed5000 RSI: 0000000000001def RDI: 0000000000001df0 [ 511.501660][T16623] RBP: ffffc9000414fc60 R08: ffffffff817401bc R09: fffffbfff1cfa0e0 [ 511.509710][T16623] R10: dffffc0000000000 R11: fffffbfff1cfa0e0 R12: ffff888027e54000 [ 511.517761][T16623] R13: ffff888027e54000 R14: ffff888027e54cc0 R15: dffffc0000000000 [ 511.525823][T16623] FS: 00007f4252b376c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 511.534795][T16623] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 511.541444][T16623] CR2: 000000110c30078a CR3: 000000005eb90000 CR4: 00000000003506f0 [ 511.549459][T16623] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 511.557484][T16623] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 511.565489][T16623] Call Trace: [ 511.568857][T16623] [ 511.571812][T16623] ? __warn+0x163/0x4e0 [ 511.576040][T16623] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 511.581735][T16623] ? report_bug+0x2b3/0x500 [ 511.586328][T16623] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 511.592021][T16623] ? handle_bug+0x3e/0x70 [ 511.596445][T16623] ? exc_invalid_op+0x1a/0x50 [ 511.601156][T16623] ? asm_exc_invalid_op+0x1a/0x20 [ 511.606259][T16623] ? __wake_up_klogd+0xcc/0x110 [ 511.611154][T16623] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 511.616911][T16623] ? bond_xdp_get_xmit_slave+0x518/0x690 [ 511.622601][T16623] xdp_master_redirect+0x143/0x2d0 [ 511.627824][T16623] bpf_test_run+0x8cf/0xa90 [ 511.632386][T16623] ? bpf_test_run+0x370/0xa90 [ 511.637171][T16623] ? __pfx_bpf_test_run+0x10/0x10 [ 511.642274][T16623] ? _copy_from_user+0xa6/0xe0 [ 511.647144][T16623] ? bpf_test_init+0x15a/0x180 [ 511.652227][T16623] ? xdp_convert_md_to_buff+0x5b/0x330 [ 511.657789][T16623] bpf_prog_test_run_xdp+0x7e3/0x11b0 [ 511.663219][T16623] ? __pfx_lock_release+0x10/0x10 [ 511.668354][T16623] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 511.674197][T16623] ? __fget_files+0x29/0x470 [ 511.678908][T16623] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 511.684759][T16623] bpf_prog_test_run+0x33a/0x3b0 [ 511.689801][T16623] __sys_bpf+0x48d/0x810 [ 511.694098][T16623] ? __pfx___sys_bpf+0x10/0x10 [ 511.698952][T16623] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 511.705004][T16623] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 511.711078][T16623] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 511.717491][T16623] ? do_syscall_64+0x100/0x230 [ 511.722323][T16623] __x64_sys_bpf+0x7c/0x90 [ 511.726876][T16623] do_syscall_64+0xf3/0x230 [ 511.731429][T16623] ? clear_bhb_loop+0x35/0x90 [ 511.736206][T16623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.742150][T16623] RIP: 0033:0x7f4251d7def9 [ 511.746648][T16623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.766348][T16623] RSP: 002b:00007f4252b37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 511.774806][T16623] RAX: ffffffffffffffda RBX: 00007f4251f36058 RCX: 00007f4251d7def9 [ 511.782892][T16623] RDX: 0000000000000050 RSI: 0000000020000040 RDI: 000000000000000a [ 511.790954][T16623] RBP: 00007f4251df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 511.799018][T16623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.807106][T16623] R13: 0000000000000000 R14: 00007f4251f36058 R15: 00007ffc290ccdb8 [ 511.815143][T16623] [ 511.818250][T16623] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 511.825557][T16623] CPU: 0 UID: 0 PID: 16623 Comm: syz.2.3206 Not tainted 6.11.0-rc6-syzkaller-00215-g6513eb3d3191 #0 [ 511.836354][T16623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 511.846413][T16623] Call Trace: [ 511.849699][T16623] [ 511.852654][T16623] dump_stack_lvl+0x241/0x360 [ 511.857348][T16623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.862573][T16623] ? __pfx__printk+0x10/0x10 [ 511.867178][T16623] ? vscnprintf+0x5d/0x90 [ 511.871514][T16623] panic+0x349/0x860 [ 511.875425][T16623] ? __warn+0x172/0x4e0 [ 511.879612][T16623] ? __pfx_panic+0x10/0x10 [ 511.884091][T16623] __warn+0x346/0x4e0 [ 511.888107][T16623] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 511.893775][T16623] report_bug+0x2b3/0x500 [ 511.898125][T16623] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 511.903791][T16623] handle_bug+0x3e/0x70 [ 511.907959][T16623] exc_invalid_op+0x1a/0x50 [ 511.912468][T16623] asm_exc_invalid_op+0x1a/0x20 [ 511.917347][T16623] RIP: 0010:bond_xdp_get_xmit_slave+0x519/0x690 [ 511.923602][T16623] Code: be 90 13 00 00 48 c7 c2 c0 5d 96 8c e8 10 02 13 fb eb 98 e8 79 60 36 fb 4c 89 e7 48 c7 c6 c0 7c 96 8c 89 da e8 48 e7 5b 05 90 <0f> 0b 90 eb a6 e8 5d 60 36 fb 48 85 db 74 0a e8 53 60 36 fb e9 72 [ 511.943226][T16623] RSP: 0018:ffffc9000414f848 EFLAGS: 00010246 [ 511.949312][T16623] RAX: 4d0f7aec7fd49f00 RBX: 0000000000000006 RCX: 4d0f7aec7fd49f00 [ 511.957294][T16623] RDX: ffffc90009ed5000 RSI: 0000000000001def RDI: 0000000000001df0 [ 511.965266][T16623] RBP: ffffc9000414fc60 R08: ffffffff817401bc R09: fffffbfff1cfa0e0 [ 511.973243][T16623] R10: dffffc0000000000 R11: fffffbfff1cfa0e0 R12: ffff888027e54000 [ 511.981224][T16623] R13: ffff888027e54000 R14: ffff888027e54cc0 R15: dffffc0000000000 [ 511.989212][T16623] ? __wake_up_klogd+0xcc/0x110 [ 511.994114][T16623] ? bond_xdp_get_xmit_slave+0x518/0x690 [ 511.999793][T16623] xdp_master_redirect+0x143/0x2d0 [ 512.004946][T16623] bpf_test_run+0x8cf/0xa90 [ 512.009471][T16623] ? bpf_test_run+0x370/0xa90 [ 512.014256][T16623] ? __pfx_bpf_test_run+0x10/0x10 [ 512.019337][T16623] ? _copy_from_user+0xa6/0xe0 [ 512.024216][T16623] ? bpf_test_init+0x15a/0x180 [ 512.028994][T16623] ? xdp_convert_md_to_buff+0x5b/0x330 [ 512.034481][T16623] bpf_prog_test_run_xdp+0x7e3/0x11b0 [ 512.039974][T16623] ? __pfx_lock_release+0x10/0x10 [ 512.045035][T16623] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 512.050865][T16623] ? __fget_files+0x29/0x470 [ 512.055574][T16623] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 512.061484][T16623] bpf_prog_test_run+0x33a/0x3b0 [ 512.066440][T16623] __sys_bpf+0x48d/0x810 [ 512.070692][T16623] ? __pfx___sys_bpf+0x10/0x10 [ 512.075460][T16623] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 512.081460][T16623] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 512.087454][T16623] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 512.093796][T16623] ? do_syscall_64+0x100/0x230 [ 512.098580][T16623] __x64_sys_bpf+0x7c/0x90 [ 512.103006][T16623] do_syscall_64+0xf3/0x230 [ 512.107517][T16623] ? clear_bhb_loop+0x35/0x90 [ 512.112208][T16623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.118121][T16623] RIP: 0033:0x7f4251d7def9 [ 512.122572][T16623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.142202][T16623] RSP: 002b:00007f4252b37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 512.150643][T16623] RAX: ffffffffffffffda RBX: 00007f4251f36058 RCX: 00007f4251d7def9 [ 512.158635][T16623] RDX: 0000000000000050 RSI: 0000000020000040 RDI: 000000000000000a [ 512.166630][T16623] RBP: 00007f4251df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 512.174625][T16623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.182609][T16623] R13: 0000000000000000 R14: 00007f4251f36058 R15: 00007ffc290ccdb8 [ 512.190618][T16623] [ 512.193777][T16623] Kernel Offset: disabled [ 512.198104][T16623] Rebooting in 86400 seconds..