last executing test programs: 1m11.827523184s ago: executing program 3 (id=2212): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000003780)=@newtaction={0x14, 0x30, 0x200, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1c, 0x0, &(0x7f0000000280)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xe37, 0x8000000, 0x0, {0x0, 0x0, 0x0, r1, {0x6, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x8}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x9}]}}]}, 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m1.029025475s ago: executing program 3 (id=2212): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000003780)=@newtaction={0x14, 0x30, 0x200, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1c, 0x0, &(0x7f0000000280)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xe37, 0x8000000, 0x0, {0x0, 0x0, 0x0, r1, {0x6, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x8}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x9}]}}]}, 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 48.38040295s ago: executing program 3 (id=2212): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000003780)=@newtaction={0x14, 0x30, 0x200, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1c, 0x0, &(0x7f0000000280)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xe37, 0x8000000, 0x0, {0x0, 0x0, 0x0, r1, {0x6, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x8}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x9}]}}]}, 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 37.511710524s ago: executing program 3 (id=2212): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000003780)=@newtaction={0x14, 0x30, 0x200, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1c, 0x0, &(0x7f0000000280)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xe37, 0x8000000, 0x0, {0x0, 0x0, 0x0, r1, {0x6, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x8}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x9}]}}]}, 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 26.262484373s ago: executing program 3 (id=2212): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000003780)=@newtaction={0x14, 0x30, 0x200, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1c, 0x0, &(0x7f0000000280)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xe37, 0x8000000, 0x0, {0x0, 0x0, 0x0, r1, {0x6, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x8}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x9}]}}]}, 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14.499620208s ago: executing program 3 (id=2212): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000003780)=@newtaction={0x14, 0x30, 0x200, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1c, 0x0, &(0x7f0000000280)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xe37, 0x8000000, 0x0, {0x0, 0x0, 0x0, r1, {0x6, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x8}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x9}]}}]}, 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.745086859s ago: executing program 1 (id=3304): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x1a0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x170, 0x2, [@TCA_GRED_LIMIT={0x8}, @TCA_GRED_DPS={0x10}, @TCA_GRED_STAB={0xfffffffffffffdaa, 0x2, "9ffe2b337685d6c62f148c806e5059b783f6f41b531d60250867ae03fd97e13d4cf520900107e5d7c0213877eb58f8279c529e67715fb04803db949412a38c6d9d02fd8b04ab2d8e666b94f36ec2af9912030e517e6b73aed0316b43df04e72844a49cea10b019fa406a1e6892e25a7549230fdd218023523aebe5cdd186008f46a0f071fb5b934ec50ede5ee2ea5a75895e2d45ac82bd20af920bce940ac6d53a80acccbf6b5a96ce439b317e645b263247372ca78dcb0e753d5b19769601a8976bfc4001a33aa241749564dd9bb04b33f84e0bc38517f6922294b8113662c67564baa978278fecb027c372dfc9dffaca502c57efc2726b2855587876a0e646"}, @TCA_GRED_DPS={0x10}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x1a0}}, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x2, 0x0, @mcast1={0xff, 0x7}, 0xffffffff}}, {{0xa, 0x0, 0xa4ffffff, @dev={0xfe, 0x80, '\x00', 0x15}, 0x6}}}, 0x108) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000000000000000000000000071101d000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 4.366614472s ago: executing program 2 (id=3307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0xb, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRESOCT=r6, @ANYBLOB="090800000000000000000100000008000100", @ANYRES32=r4, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=r3], 0x60}}, 0x0) 4.173495843s ago: executing program 1 (id=3310): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010020, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1}], 0x1}}], 0x80002ce, 0x9200000020008000) 4.056109422s ago: executing program 4 (id=3311): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) socket$inet(0x2, 0x800, 0xfffffff8) setsockopt$inet6_tcp_int(r0, 0x6, 0xf, &(0x7f0000000100)=0xffffffff, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x0) 4.027648592s ago: executing program 0 (id=3312): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x28}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000100), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000040)=[0x0], &(0x7f00000000c0)=[0x0], 0x0, 0xf8, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYRES32=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 3.901576877s ago: executing program 0 (id=3313): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000480)="2400006df5ffff0214fffffffffffff8070000e6b7d377189fd872000000000000010800", 0x24) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast2}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x35414, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f0000000300), 0x20000000}, 0x20) close(r2) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000140)={@ipv4={""/10, ""/2, @private}}, &(0x7f0000000240)=0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$netlink(r4, &(0x7f0000007a80)={0x0, 0x0, &(0x7f00000076c0)=[{&(0x7f0000002780)=ANY=[@ANYBLOB="10004f001a00010028bd7000ffdbdf25"], 0x10}], 0x1}, 0x20000040) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x41, &(0x7f0000002700)={0x77359400}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000600)=""/210, 0xd2, 0x0, &(0x7f00000003c0)=""/23, 0x17}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r5}, 0x10) close(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x4000, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x4}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r7 = accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) bpf$ITER_CREATE(0x21, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000440), 0x8) 3.845824138s ago: executing program 4 (id=3314): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028006000e00b2"], 0x40}}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x58, &(0x7f0000000140)}, 0x10) 3.669052407s ago: executing program 4 (id=3315): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r2, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x2a}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r8) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x24008004}, 0x40000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r7, &(0x7f0000000240)="218c0ac7bcce4908d8c52355a17501d907c65ba6cb94269ddb299b79e1fcec0a87ad7afa09fff7fd4762e2254c037e61b2182414a279cced721898af93346a727d7ea08d167f7957b4a8ae968f17b19382d844b5d207747ef851f1a842c851618223395d18770c676a14add3da5e4392f73aee4e3e54738c079f71e858ae5c47ba314013ec", 0x0}, 0x20) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000)=r10, 0x4) sendmsg$inet(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r11 = socket$inet(0x2, 0x2, 0x1) recvmmsg(r11, &(0x7f00000000c0), 0x0, 0x20010040, 0x0) r12 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x0, 0x40, 0x1, 0x1, 0x25, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0x2, 0x1c33}}) r14 = socket(0x1d, 0x2, 0x6) unshare(0x26020480) ppoll(&(0x7f00000004c0)=[{r14, 0x1}], 0x1, &(0x7f0000000540), 0x0, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x8bbe4721f542249, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x3, 0xffe2}, {0xfff1, 0xe}, {0x10, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) 3.326363139s ago: executing program 2 (id=3316): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @private1}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f00000000c0)="8d", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private1}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000003c0)={r2, 0x7}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000380)=@framed={{}, [@ldst={0x0, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000100), &(0x7f00000001c0)=0x4) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f0000000040)) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed02, 0x0, 0x0, 0x0, 0x100}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x24, 0x8, 0x0, 0x0, 0xb000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3.288982699s ago: executing program 4 (id=3317): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0x4}}]}, 0x60}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x200500, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x44005}, 0x840) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r9, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x44, 0x4}, 0x10) close(r6) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000006800090300000000000000000a0000000000010001000000000000000000000082476de28938a31c16c2dfafc93ec18c89864c07ba76977c1ff7bf5cd8731e1c393b8168bbc9842c6b3720930a19d3fee4f878ec8637db12c576400d67092677bdb7432b1a0a5e643146ca8c9b154f304b37ea7e54a171b074e592372d66aa19d586162002fc61cb955c6708"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r14, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}]}}]}, 0x40}}, 0x4000) r15 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r15, &(0x7f0000000040)="363c8f3fca5d66571e583e7c88a8", 0xe, 0x4810, &(0x7f0000000200)={0x11, 0x9, r14, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCSIFBR(r15, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='veth0_to_hsr\x00'}) 3.255734091s ago: executing program 1 (id=3318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b", 0x9}], 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r2, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000000)={0x0, 0x0}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_buf(r6, 0x0, 0x30, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0xfffffdc5) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0x0, 0x16, 0x8, 0x1, r7}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000500fffe0900020073797a32000000000900010073797a30000000204400048024000180090001006d65746100000000140002800800014000000001000002400000001715000180090001006d617371000000000c0002800800024000000008140000001100010000000000000000000000000a80f9f6fcb8cc69308054e4d613e3a1cf7885d921ebcee896947276c4f58a99ccefeb7989a32a8c884e7e5b1d0fa5e3ef8491db26abe4e0e947a03197ef31c2d627b78d"], 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 3.045488495s ago: executing program 0 (id=3319): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x11) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, r2, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r5, 0x58, &(0x7f00000004c0)}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r6) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0xc045}, 0x20000840) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x20000800, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f00000003c0)={@val={0x1c, 0x8864}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x32, 0x58, 0x68, 0x0, 0x5a, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x36}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x4, {{0x2, 0x1, 0xb, 0x3, 0x0, 0x3, 0x5, 0x9}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x1, {{0x2, 0x2, 0x5, 0x0, 0x0, 0x3, 0x7, 0x4}, 0x2, {0x9, 0x2, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}, 0x66) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x300, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xffff, 0xffe0}, {0x6, 0x4}, {0xe, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_RATE={0x6, 0x5, {0x8, 0xa}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4800) sendmsg$802154_raw(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="8ffd8712a2406a771ea6625005007a3bc01e1207008e", 0x16}, 0x1, 0x0, 0x0, 0x60004085}, 0xc0) 2.904721328s ago: executing program 4 (id=3320): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x94, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x3, [0xc, 0x9, 0xc, 0x8, 0x5, 0xb, 0x10, 0x5, 0xe, 0xf, 0xa, 0xf, 0x8, 0x7, 0x1, 0xf], 0x1, [0x5f1, 0x3, 0xdd64, 0x7, 0xfffa, 0x200, 0x5, 0xdb7, 0x9, 0x9d, 0xa, 0x5cb6, 0x4, 0x2, 0xd, 0xfbff], [0x0, 0x8, 0x4, 0x4, 0x6, 0x4, 0x2, 0x1, 0x4, 0xfffd, 0x2, 0x0, 0x5, 0x4d, 0x7, 0x3ff]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4000}}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x1, 0xffff, 0xb, 0x3}}, {0xa, 0x2, [0xa37, 0xfff, 0x8]}}]}]}, 0x64}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.494156692s ago: executing program 2 (id=3321): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000061110000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 677.520654ms ago: executing program 4 (id=3322): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b00000000000000000c85000000a800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000000000000000800ee00"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e4163ed09bdb581c9fe68a356f542b0430509da61bfb02b3235e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d52cfb3f27fafb60845f90b6dfc87c6905bbc94d33e4575c853105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb1fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d517fb2cf1a4ffdc1b7e018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="4800554a2da587f5c80200"/20, @ANYBLOB="0000000000000000200012800b00010065727370616e00001000028004001200060010004e20000008000400a7060000", @ANYRES16=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES32=r0], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r4, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e0000180002800400120005001600010000000800150000000076"], 0x48}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x8000f28, 0x0) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/uts\x00') ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r9}, 0x10) r11 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r11, r10, 0x0, 0x5, &(0x7f0000000140)='&#\'*\x00'}, 0x30) sendmsg$nl_route(r2, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@RTM_NEWNSID={0x4c, 0x58, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NETNSA_FD={0x8, 0x3, r6}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r7}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8, 0x2, r8}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, r11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r12 = socket(0x2, 0x80805, 0x0) accept4$llc(r12, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x85) r13 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) 676.640468ms ago: executing program 2 (id=3323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x14, r1, 0xb05, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2b, 0x801, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x2, 0x2, 0x0) getsockopt$nfc_llcp(r5, 0x88, 0x68, 0x0, 0x20000000) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000), 0x4) listen(r4, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c000104000000000000000002000000", @ANYRES32=r9, @ANYBLOB="200008000a000100aaaaaaaaaabb000005000c000400000008000f0001"], 0x38}}, 0x0) close(r2) 612.428334ms ago: executing program 1 (id=3324): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@initr0, @alu={0x7, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00'}) 601.251382ms ago: executing program 0 (id=3325): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x41e300, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x41e300, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r3, 0x225, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r6, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x1}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xa1}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r6, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x1}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xa1}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf250300000008000100000000000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000) socket(0x10, 0x803, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000500)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="340000001400b5952cbc7000ffdbdf250a0080c8", @ANYRES32=r11, @ANYBLOB="140002000000000000000000000000000000000108000900ff"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x40040) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000076000104000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="080001", @ANYRESOCT=r11, @ANYRES32=r4, @ANYRES32=r2], 0x20}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000076000104000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="080001", @ANYRESOCT=r11, @ANYRES32=r4, @ANYRES32=r2], 0x20}}, 0x0) 417.196078ms ago: executing program 1 (id=3326): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rc, &(0x7f0000000080)=0x80) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e24, @local}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)='pimreg\x00', 0x8000000000000000, 0x0, 0x9}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r0}, 0x8) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_FAMILY={0x5, 0xd, 0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) socket$inet(0x2, 0x4, 0x20000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1e, 0x4, 0x27, 0x8, 0x4108, r3, 0x94e, '\x00', 0x0, r3, 0x4, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f00000004c0)={0x7fff, 0xdf}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x4}}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x8801) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={0x214, r5, 0x4, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x214}, 0x1, 0x0, 0x0, 0x20044000}, 0x40105) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0}, &(0x7f0000000a00)=0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000a40)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@empty, 0x4e20, 0x6ea5, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x2b, r6, r7}, {0x8, 0x5000000000000000, 0x0, 0x681, 0x3, 0x68c, 0x3, 0x5}, {0x1, 0x3, 0x5, 0xff}, 0x6, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x4d4, 0x32}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3503, 0x2, 0x0, 0x8, 0x1, 0x0, 0x401}}, 0xe8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={r3, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0], 0x0, 0x82, &(0x7f0000000dc0)=[{}, {}], 0x10, 0x10, &(0x7f0000000e00), &(0x7f0000000e40), 0x8, 0x61, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1e, 0x4, &(0x7f0000000b40)=@raw=[@jmp={0x5, 0x1, 0x6, 0x0, 0x5, 0xfffffffffffffff4, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x2}], &(0x7f0000000b80)='GPL\x00', 0x7ff, 0x9b, &(0x7f0000000bc0)=""/155, 0x41000, 0x20, '\x00', r6, @fallback=0x36, r3, 0x8, &(0x7f0000000c80)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000cc0)={0x3, 0x10, 0xb0d3, 0x3}, 0x10, r9, r3, 0x5, &(0x7f0000001000)=[r3, 0xffffffffffffffff, r4, r4], &(0x7f0000001040)=[{0x4, 0x2, 0x7}, {0x5, 0x1, 0xa, 0x6}, {0x0, 0x2, 0x3, 0x6}, {0x4, 0x2, 0x6, 0x3}, {0x2, 0x4, 0x8, 0x6}], 0x10, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0x4010, r0, 0x180000000) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000001180)=@gcm_128={{0x303}, "a1d4a312dab8b016", "b6e68c62a722a168d50faf3f70ddbe34", "242d1c02", "115e25f538310590"}, 0x28) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f00000011c0)={'icmp\x00'}, &(0x7f0000001200)=0x1e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x28, r10, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x48080}, 0x20000001) sendmsg(r0, &(0x7f0000002ac0)={&(0x7f00000013c0)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000002940)=[{&(0x7f0000001440)="16a901636ccd32684f53d420e69c64c6ce797a3fef7f9734b93d80504dda4ec6259fd6d5fde7ea0d38fda948b91865e7a4986debfdb1f470616b9965d4fa8633447afce022da9edf253d25a2eefde6d826d453ef8e8ceb3e8ee286c5cd342e385b1b15fd9fe2bb70995f0624c689ccef8093a24ecd3509bffb07bed86901a16d6a3102f60dde6f2fc4bde669f042cd2a96a09ca03b0b57144dbfc9c03b39830c64c535e6000012ea0f5b3fbb623e42a240706e6a", 0xb4}, {&(0x7f0000001500)="86d506a068ba4cd24fc3fd24afee342a765f6efe16db326dcd3adf6d06d041186905d5438a2be9ce33fcb2d61e2b38bea6f527055f59b2358b1e23a414e5c4301f44e2df18d4143496f040587f5fc54b1c64af75d5de6a79e8ecedac3d6d38a4f32a3a29db7c7ca87649b4d4841df340dfdfdc89dcc1c6049d7be0b09599671da2394d3357c69bedb4e4", 0x8a}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="1c7790ee8e31cd7420ed429ad54ff184ad3dcb525de7bf9f", 0x18}, {&(0x7f0000002600)="ccf3d0fc7d101e4efa7b418606cbe829bf3e21aa99e5b7fdba33a0e0f33fe7907e58c8fb8ad2626fd85bc424aa93460dc699a36b844fd60cfb4a22ad233408a93c4af0bb7e6747b3cc41b264eb19a9fe8c9501029e226a8d2d3ce1bbbe297bd83a9357317cb1ac1789d69ef6977477e4af405db234075cadb1bcf07ae6ba742de7f858906433704db5a594b280f5f0eb3983bcca8e2b37f5fc311f2c7469a6874b5b298e184adc", 0xa7}, {&(0x7f00000026c0)="fb794f5de21bc28c662ac3", 0xb}, {&(0x7f0000002700)="14dde54d9f30ec3103b831a3aa3b4454efe35623d19c392158c292852b54a84217d4c2577fb0682ab07548be3aa0e48257039150063d32f193a380bd8203f04e6b8055929ea04b568c1692d76a870246299a796e04c8e8da08cbea1af2eed1e5a0a4dcd944dc154e51cff3603726ddfc8d781fcb92691b6640cff18c9f3efe780fb8ba3cc938a76f501ffb5a9c97a142510506a5bbf845c470ec0f48e2cd923cdde10fb4799efb8afe260547ff1bb141c9b7", 0xb2}, {&(0x7f00000027c0)="f35db33dd5ce7e07cdce48578e99ecab600891eb065441018e60b12baa751cf5f86a41212d345ea020d13cd22918ad565166ee607434a3", 0x37}, {&(0x7f0000002800)="ddc4105627c44c532b48124c548543f804ac619e7a659e9025be9619ccf3ce737558a153e1b064a2adb74085a5432b0781d9806cf43b13244fdb11d49a62b278b1487b2820c00f2fcca86c3ed58d6f96758f01bd7b13bae1ae0f7c1b17e9dd7f700ff372156b5543ec4e30ac9597288b111ed50104cf054d32732e9fcc86f43b25bb1cd5cf331088951854402f310bfa67aa44dc125d21aae76c207c09a916cfed0641852e", 0xa5}, {&(0x7f00000028c0)="42459f107f07da63f4a038c4a5f6339f12b840e98c59001b8db81f68167f62c7bbc91fd09f2db7196c756998abab1e83db0b06d05950693ca6a31cb2447ff16dcf2a8e72d891d79a5bfb4e589851fda2a78c12e8b3c5e8d49e7e858e03c6ff4ff2846176d2c5369ad21aa5cb145140258dbe9f43c805325a82db4b", 0x7b}], 0xa, &(0x7f0000002a00)=[{0x90, 0x10e, 0x5, "2531481b399b249189a610d1e9d8b379bc266d32ece92bfe5dd297dc63c599a874e368a79c8a66977a27d1fb56206a410e808b7b0cd8f5d5a33a75a6df576a8f934df5411145588747a480d357d1dc7c7af475f9d2a00826a5f505b4ca212f3753fa7d73547f9c3a390b61127ad0158d516b3b94e24f90123d8becde"}], 0x90}, 0x4) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002b40), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000002c80)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002b80)={0x98, r11, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x23}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4091}, 0x800004c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000002d40)={'gre0\x00', &(0x7f0000002cc0)={'syztnl2\x00', r8, 0x20, 0x8000, 0x9, 0x5, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x67, 0x0, 0x5, 0x29, 0x0, @remote, @remote, {[@lsrr={0x83, 0x7, 0x6e, [@private=0xa010101]}, @generic={0x44, 0x4, "b4d2"}, @rr={0x7, 0x13, 0x77, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010100, @broadcast]}]}}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002e80)={@ifindex=r8, 0x9, 0x1, 0xa7, &(0x7f0000002d80)=[0x0], 0x1, 0x0, &(0x7f0000002dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002e40)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) write(0xffffffffffffffff, &(0x7f0000002ec0)="72ac4f5912feca", 0x7) 414.810675ms ago: executing program 2 (id=3327): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {0x54}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) close(r0) 176.682753ms ago: executing program 0 (id=3328): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000500000008000600", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 161.782312ms ago: executing program 1 (id=3329): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000640)}}], 0x1, 0x40010020, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1}], 0x1}}], 0x80002ce, 0x9200000020008000) 81.836359ms ago: executing program 2 (id=3330): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x34}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) accept4(r0, 0x0, 0x0, 0x800) write(r0, 0x0, 0x0) 0s ago: executing program 0 (id=3331): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'veth0_to_hsr\x00', 'macsec0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [], 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1000}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'syz_tun\x00', 'syzkaller0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) sendto$inet6(r0, &(0x7f0000000040)="ee", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x8000005}, 0x1c) kernel console output (not intermixed with test programs): s an invalid length. [ 281.065543][T14650] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.073134][T14650] bridge_slave_0: entered allmulticast mode [ 281.082372][T14650] bridge_slave_0: entered promiscuous mode [ 281.113890][T14650] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.136497][T14650] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.154778][T14650] bridge_slave_1: entered allmulticast mode [ 281.177174][T14650] bridge_slave_1: entered promiscuous mode [ 281.294699][T14650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.335221][T14650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.476088][T14720] netlink: 'syz.2.2427': attribute type 10 has an invalid length. [ 281.495693][T14160] bridge_slave_1: left allmulticast mode [ 281.512912][T14160] bridge_slave_1: left promiscuous mode [ 281.523209][T14160] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.530713][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 281.556478][T14160] bridge_slave_0: left allmulticast mode [ 281.588777][T14160] bridge_slave_0: left promiscuous mode [ 281.605357][T14160] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.727904][T14733] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.122033][T14160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.133485][T14160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.144958][T14160] bond0 (unregistering): Released all slaves [ 282.166531][T14650] team0: Port device team_slave_0 added [ 282.238244][T14650] team0: Port device team_slave_1 added [ 282.246668][ T5836] Bluetooth: hci3: command tx timeout [ 282.552302][T14650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.565884][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 282.572512][T14650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.612441][T14650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.649257][T14650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.666427][T14650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.718184][T14650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.871678][T14770] netlink: 'syz.1.2437': attribute type 21 has an invalid length. [ 282.905766][T14770] __nla_validate_parse: 3 callbacks suppressed [ 282.935166][T14770] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2437'. [ 282.939432][T14776] netlink: 'syz.0.2439': attribute type 10 has an invalid length. [ 283.011883][T14780] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2439'. [ 283.023766][T14776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.063253][T14773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2438'. [ 283.072678][T14773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2438'. [ 283.109186][T14650] hsr_slave_0: entered promiscuous mode [ 283.128903][T14650] hsr_slave_1: entered promiscuous mode [ 283.156212][T14650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.164258][T14650] Cannot create hsr debugfs directory [ 283.178083][T14160] hsr_slave_0: left promiscuous mode [ 283.203423][T14160] hsr_slave_1: left promiscuous mode [ 283.222970][T14160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.242880][T14160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.252724][T14160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.267264][T14160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.340294][T14160] veth1_macvtap: left promiscuous mode [ 283.346443][T14160] veth0_macvtap: left promiscuous mode [ 283.352850][T14160] veth1_vlan: left promiscuous mode [ 283.359232][T14160] veth0_vlan: left promiscuous mode [ 283.536603][T14791] netlink: 'syz.4.2443': attribute type 12 has an invalid length. [ 283.605893][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 284.064410][T14160] team0 (unregistering): Port device team_slave_1 removed [ 284.109088][T14160] team0 (unregistering): Port device team_slave_0 removed [ 284.326369][ T5836] Bluetooth: hci3: command tx timeout [ 284.603786][T14798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2445'. [ 284.645869][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 284.810691][T14802] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2446'. [ 285.420334][T14838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2456'. [ 285.586800][T14650] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 285.606614][T14650] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 285.639483][T14650] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 285.663466][T14650] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 285.685968][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 285.805095][T14650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.840063][T14650] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.852955][T14171] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.860188][T14171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.894073][T14854] openvswitch: netlink: Missing key (keys=40, expected=80) [ 285.894624][T14162] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.908503][T14162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.939745][T14855] openvswitch: netlink: Missing key (keys=40, expected=80) [ 286.158668][T14650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.224296][T14650] veth0_vlan: entered promiscuous mode [ 286.237663][T14650] veth1_vlan: entered promiscuous mode [ 286.274887][T14650] veth0_macvtap: entered promiscuous mode [ 286.286503][T14650] veth1_macvtap: entered promiscuous mode [ 286.330825][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.364233][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.386449][T14650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.406165][ T5840] Bluetooth: hci3: command tx timeout [ 286.413525][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.432873][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.444328][T14650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.456782][T14650] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.475920][T14650] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.484872][T14650] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.495091][T14650] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.725970][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 286.733633][ T6121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.756082][ T6121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.774679][T14884] FAULT_INJECTION: forcing a failure. [ 286.774679][T14884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.790593][ T6121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.815006][ T6121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.824727][T14884] CPU: 1 UID: 0 PID: 14884 Comm: syz.4.2467 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 286.835551][T14884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 286.845643][T14884] Call Trace: [ 286.848958][T14884] [ 286.851923][T14884] dump_stack_lvl+0x241/0x360 [ 286.856641][T14884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.861848][T14884] ? __pfx__printk+0x10/0x10 [ 286.866466][T14884] ? snprintf+0xda/0x120 [ 286.870745][T14884] should_fail_ex+0x3b0/0x4e0 [ 286.875457][T14884] _copy_to_user+0x31/0xb0 [ 286.879896][T14884] simple_read_from_buffer+0xca/0x150 [ 286.885372][T14884] proc_fail_nth_read+0x1e9/0x250 [ 286.890415][T14884] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 286.895976][T14884] ? rw_verify_area+0x55e/0x6f0 [ 286.900846][T14884] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 286.906404][T14884] vfs_read+0x1fc/0xb70 [ 286.910572][T14884] ? __pfx___mutex_lock+0x10/0x10 [ 286.915611][T14884] ? __pfx_vfs_read+0x10/0x10 [ 286.920304][T14884] ? __fget_files+0x2a/0x410 [ 286.924924][T14884] ? __fget_files+0x395/0x410 [ 286.929709][T14884] ? __fget_files+0x2a/0x410 [ 286.934338][T14884] ksys_read+0x18f/0x2b0 [ 286.938589][T14884] ? __pfx_ksys_read+0x10/0x10 [ 286.943361][T14884] ? do_syscall_64+0x100/0x230 [ 286.948139][T14884] ? do_syscall_64+0xb6/0x230 [ 286.952827][T14884] do_syscall_64+0xf3/0x230 [ 286.957348][T14884] ? clear_bhb_loop+0x35/0x90 [ 286.962050][T14884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.967981][T14884] RIP: 0033:0x7f488a98473c [ 286.972405][T14884] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 286.992029][T14884] RSP: 002b:00007f488b765030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 287.000449][T14884] RAX: ffffffffffffffda RBX: 00007f488ab75fa0 RCX: 00007f488a98473c [ 287.008423][T14884] RDX: 000000000000000f RSI: 00007f488b7650a0 RDI: 0000000000000006 [ 287.016403][T14884] RBP: 00007f488b765090 R08: 0000000000000000 R09: 0000000000000000 [ 287.024376][T14884] R10: 0000000040000182 R11: 0000000000000246 R12: 0000000000000001 [ 287.032352][T14884] R13: 0000000000000000 R14: 00007f488ab75fa0 R15: 00007ffd6e6c7278 [ 287.040338][T14884] [ 287.157871][T14890] netlink: 'syz.2.2470': attribute type 21 has an invalid length. [ 287.165767][T14890] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2470'. [ 287.286893][T14900] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2474'. [ 287.304276][T14900] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2474'. [ 287.563149][T14904] xfrm0 speed is unknown, defaulting to 1000 [ 287.586493][T14912] openvswitch: netlink: Message has 1219 unknown bytes. [ 287.593509][T14912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.765938][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 288.153477][T14930] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 288.486436][ T5840] Bluetooth: hci3: command 0x0419 tx timeout [ 288.805924][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 288.817512][T14966] __nla_validate_parse: 2 callbacks suppressed [ 288.817533][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2494'. [ 288.980790][T14969] tipc: Enabling of bearer rejected, failed to enable media [ 288.992442][T14971] netlink: 'syz.2.2496': attribute type 1 has an invalid length. [ 289.001041][T14969] (unnamed net_device) (uninitialized): (slave lo): Device is not bonding slave [ 289.019827][T14969] (unnamed net_device) (uninitialized): option active_slave: invalid value (lo) [ 289.069547][T14971] 8021q: adding VLAN 0 to HW filter on device bond18 [ 289.156084][T14978] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 289.158883][T14979] vlan0: entered promiscuous mode [ 289.430277][T15000] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2504'. [ 289.449522][T15004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2506'. [ 289.467235][T15004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2506'. [ 289.591937][T15012] netlink: 'syz.4.2508': attribute type 1 has an invalid length. [ 289.600065][T15012] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2508'. [ 289.663262][T15015] netlink: 'syz.4.2508': attribute type 1 has an invalid length. [ 289.675087][T15015] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2508'. [ 289.676277][T15014] xfrm0 speed is unknown, defaulting to 1000 [ 289.845870][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 290.052866][T14162] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.115507][T15014] IPVS: You probably need to specify IP address on multicast interface. [ 290.135226][T15014] IPVS: Error connecting to the multicast addr [ 290.259457][T14162] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.395929][T14162] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.494575][T14162] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.668503][T14162] bridge_slave_1: left allmulticast mode [ 290.674235][T14162] bridge_slave_1: left promiscuous mode [ 290.680250][T14162] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.689447][T14162] bridge_slave_0: left allmulticast mode [ 290.695109][T14162] bridge_slave_0: left promiscuous mode [ 290.701378][T14162] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.885885][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 290.927231][T15043] x_tables: duplicate underflow at hook 3 [ 291.311634][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 291.342014][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 291.351054][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 291.381004][T15063] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2521'. [ 291.403117][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 291.437450][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 291.491264][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 291.925863][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 292.219774][T14162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.245308][T14162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.269634][T14162] bond0 (unregistering): Released all slaves [ 292.375604][T15055] xfrm0 speed is unknown, defaulting to 1000 [ 292.748227][T15126] netlink: 1275 bytes leftover after parsing attributes in process `syz.1.2534'. [ 292.756392][T15127] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2533'. [ 292.758080][T15126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.965953][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 293.059663][T15055] chnl_net:caif_netlink_parms(): no params data found [ 293.068080][T15141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2535'. [ 293.090812][T14162] hsr_slave_0: left promiscuous mode [ 293.118438][T14162] hsr_slave_1: left promiscuous mode [ 293.147437][T14162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.155018][T14162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.188808][T14162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.216914][T14162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.299646][T14162] veth1_macvtap: left promiscuous mode [ 293.305234][T14162] veth0_macvtap: left promiscuous mode [ 293.329392][T14162] veth1_vlan: left promiscuous mode [ 293.334852][T14162] veth0_vlan: left promiscuous mode [ 293.526637][ T5840] Bluetooth: hci3: command tx timeout [ 294.005869][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 294.127663][T14162] team0 (unregistering): Port device team_slave_1 removed [ 294.168859][T14162] team0 (unregistering): Port device team_slave_0 removed [ 294.754783][T15185] __nla_validate_parse: 1 callbacks suppressed [ 294.754805][T15185] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2548'. [ 294.877033][T15055] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.884182][T15055] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.898348][T15189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2550'. [ 294.916436][T15055] bridge_slave_0: entered allmulticast mode [ 294.936180][T15055] bridge_slave_0: entered promiscuous mode [ 294.943819][T15055] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.976777][T15055] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.984323][T15055] bridge_slave_1: entered allmulticast mode [ 295.009257][T15055] bridge_slave_1: entered promiscuous mode [ 295.050805][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 295.161443][T15055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.174367][T15055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.186253][T15205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2552'. [ 295.261950][T15055] team0: Port device team_slave_0 added [ 295.276387][T15055] team0: Port device team_slave_1 added [ 295.373183][T15210] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 295.403334][T15210] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 295.417283][T15055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.431026][T15055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.457915][T15055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.472444][T15055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.479778][T15055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.506615][T15055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.578888][T15055] hsr_slave_0: entered promiscuous mode [ 295.590803][T15055] hsr_slave_1: entered promiscuous mode [ 295.598784][T15055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.607108][ T5840] Bluetooth: hci3: command tx timeout [ 295.612795][T15055] Cannot create hsr debugfs directory [ 295.637096][T15218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2558'. [ 296.025044][T15226] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 296.085866][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 296.232601][T15055] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 296.249180][T15055] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 296.280938][T15055] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 296.307038][T15055] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 296.428017][T15055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.484374][T15241] netlink: 'syz.4.2566': attribute type 1 has an invalid length. [ 296.494610][T15055] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.514976][T14162] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.522181][T14162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.585245][T14162] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.592413][T14162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.717933][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2571'. [ 296.962598][T15055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.032720][T15271] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 297.125877][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 297.178127][T15055] veth0_vlan: entered promiscuous mode [ 297.234651][T15055] veth1_vlan: entered promiscuous mode [ 297.304628][T15055] veth0_macvtap: entered promiscuous mode [ 297.328549][T15284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2577'. [ 297.384589][T15055] veth1_macvtap: entered promiscuous mode [ 297.477646][T15055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.497757][T15055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.508905][T15055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.521547][T15055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.532436][T15055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.544901][T15055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.557627][T15055] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.566650][T15055] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.575470][T15055] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.584480][T15055] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.686152][ T5840] Bluetooth: hci3: command tx timeout [ 297.711086][T15297] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 297.798235][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2582'. [ 297.826963][ T6121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.834856][ T6121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.890972][T15302] netlink: 'syz.0.2581': attribute type 1 has an invalid length. [ 297.911571][T15302] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2581'. [ 297.911716][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.960008][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.165860][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 298.320006][T15323] xt_policy: too many policy elements [ 298.368062][T15325] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 298.377381][T15330] xt_CT: You must specify a L4 protocol and not use inversions on it [ 298.587665][T15343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2595'. [ 298.606219][T15341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2594'. [ 298.696670][T15346] wg2: entered promiscuous mode [ 298.702773][T15346] wg2: entered allmulticast mode [ 298.772660][T15348] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 299.159963][T15372] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 299.207024][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 299.332526][T15382] IPv6: sit2: Disabled Multicast RS [ 299.542083][T15395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.772776][T14169] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.814574][T15401] veth7: entered allmulticast mode [ 300.245911][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 300.627269][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.637463][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.645548][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.654398][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.663241][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 300.675575][T15418] x_tables: duplicate underflow at hook 2 [ 300.678653][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.781528][T15414] xfrm0 speed is unknown, defaulting to 1000 [ 300.871463][T14169] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.120599][T14169] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.283796][T14169] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.294212][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 301.356967][T15414] chnl_net:caif_netlink_parms(): no params data found [ 301.387246][T15449] __nla_validate_parse: 68 callbacks suppressed [ 301.387267][T15449] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2631'. [ 301.440185][T15449] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2631'. [ 301.621386][T14169] bridge_slave_1: left allmulticast mode [ 301.632140][T14169] bridge_slave_1: left promiscuous mode [ 301.653138][T14169] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.693384][T14169] bridge_slave_0: left allmulticast mode [ 301.699276][T14169] bridge_slave_0: left promiscuous mode [ 301.705023][T14169] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.764176][T15469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2637'. [ 301.926362][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.262693][T14169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.280902][T14169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.296381][T14169] bond0 (unregistering): Released all slaves [ 302.325875][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 302.397337][T15414] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.404500][T15414] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.447023][T15414] bridge_slave_0: entered allmulticast mode [ 302.457638][T15414] bridge_slave_0: entered promiscuous mode [ 302.467236][T15414] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.474489][T15414] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.481988][T15414] bridge_slave_1: entered allmulticast mode [ 302.493082][T15414] bridge_slave_1: entered promiscuous mode [ 302.604297][T15482] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2641'. [ 302.728736][ T5836] Bluetooth: hci3: command tx timeout [ 302.752327][T15496] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 302.805562][T15500] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 302.880477][T15414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.922627][T15414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.155191][T15511] netlink: 'syz.4.2648': attribute type 1 has an invalid length. [ 303.163062][T15414] team0: Port device team_slave_0 added [ 303.165702][T15414] team0: Port device team_slave_1 added [ 303.196604][T15511] netlink: 'syz.4.2648': attribute type 1 has an invalid length. [ 303.275088][T14169] hsr_slave_0: left promiscuous mode [ 303.309415][T14169] hsr_slave_1: left promiscuous mode [ 303.327224][T14169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.348957][T14169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.365860][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 303.388412][T14169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.403518][T14169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.462759][T14169] veth1_macvtap: left promiscuous mode [ 303.468708][T14169] veth0_macvtap: left promiscuous mode [ 303.474794][T14169] veth1_vlan: left promiscuous mode [ 303.481921][T14169] veth0_vlan: left promiscuous mode [ 304.253627][T14169] team0 (unregistering): Port device team_slave_1 removed [ 304.300406][T14169] team0 (unregistering): Port device team_slave_0 removed [ 304.406078][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 304.754318][T15414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.771890][T15414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.805992][ T5836] Bluetooth: hci3: command tx timeout [ 304.816585][T15414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.925136][T15414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.932641][T15414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.987744][T15414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.000501][T15537] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2656'. [ 305.097445][T15548] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2659'. [ 305.296288][T15414] hsr_slave_0: entered promiscuous mode [ 305.306354][T15414] hsr_slave_1: entered promiscuous mode [ 305.325133][T15414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.333091][T15414] Cannot create hsr debugfs directory [ 305.377366][T15557] bond0: (slave bridge0): Releasing backup interface [ 305.395174][T15557] bridge0: left promiscuous mode [ 305.409317][T15557] bond0: (slave team0): Releasing backup interface [ 305.423664][T15557] team0: left promiscuous mode [ 305.445866][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 305.463596][T15559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2663'. [ 305.868361][T15580] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2668'. [ 305.896548][T15582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2667'. [ 305.905480][T15582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2667'. [ 306.025054][T15590] netlink: 'syz.4.2669': attribute type 24 has an invalid length. [ 306.372664][T15414] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 306.425214][T15414] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 306.471109][T15619] __nla_validate_parse: 1 callbacks suppressed [ 306.471130][T15619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2676'. [ 306.482432][T15414] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 306.486418][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 306.515421][T15619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2676'. [ 306.575962][T15414] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 306.703476][T15414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.721739][T15414] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.739603][T14168] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.746840][T14168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.769627][T15627] atomic_op ffff888055481198 conn xmit_atomic 0000000000000000 [ 306.802075][T14168] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.809280][T14168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.853770][T15625] veth0: entered promiscuous mode [ 306.886660][ T5836] Bluetooth: hci3: command tx timeout [ 306.923149][T15622] veth0: left promiscuous mode [ 306.952931][T15414] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 306.965317][T15414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.035448][T15638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2683'. [ 307.208594][T15644] netlink: 'syz.2.2684': attribute type 21 has an invalid length. [ 307.238015][T15414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.321465][T15414] veth0_vlan: entered promiscuous mode [ 307.362624][T15414] veth1_vlan: entered promiscuous mode [ 307.432075][T15414] veth0_macvtap: entered promiscuous mode [ 307.450818][T15414] veth1_macvtap: entered promiscuous mode [ 307.464644][T15651] netlink: 'syz.2.2686': attribute type 1 has an invalid length. [ 307.484055][T15414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.499698][T15414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.514083][T15414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.526228][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 307.554721][T15414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.594286][T15414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.626796][T15414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.651217][T15414] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.671223][T15414] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.684231][T15414] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.705939][T15414] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.712263][T15665] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.2691'. [ 307.724461][T15665] openvswitch: netlink: Unknown key attributes 20 [ 307.824960][T15666] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2691'. [ 307.870615][T15666] netlink: 'syz.2.2691': attribute type 9 has an invalid length. [ 307.993623][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2693'. [ 308.010859][T14161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.034697][T14161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.046307][T15673] x_tables: unsorted underflow at hook 3 [ 308.206557][T14160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.235971][T14160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.552089][T15689] netlink: 'syz.2.2701': attribute type 10 has an invalid length. [ 308.565873][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 308.575455][T15693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2703'. [ 308.593123][T15689] hsr0: entered promiscuous mode [ 308.616508][T15689] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 308.642531][T15689] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 308.669070][T15689] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 308.973943][T15716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2708'. [ 309.060705][T15724] netlink: 'syz.2.2709': attribute type 11 has an invalid length. [ 309.076587][T15724] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2709'. [ 309.205648][T15732] syz.2.2713[15732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.205734][T15732] syz.2.2713[15732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.231826][T15732] syz.2.2713[15732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.264759][T15735] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2714'. [ 309.455486][T15741] xt_TPROXY: Can be used only with -p tcp or -p udp [ 309.615910][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 309.880364][T15760] netlink: 'syz.4.2722': attribute type 142 has an invalid length. [ 310.260837][T14162] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.304803][T15778] netlink: 'syz.1.2727': attribute type 3 has an invalid length. [ 310.328893][T15775] xfrm0 speed is unknown, defaulting to 1000 [ 310.534683][T15775] syzkaller1: entered promiscuous mode [ 310.540364][T15775] syzkaller1: entered allmulticast mode [ 310.646128][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 310.958358][T15790] xt_ecn: cannot match TCP bits for non-tcp packets [ 311.417723][T14162] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.501829][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 311.511970][T15819] __nla_validate_parse: 4 callbacks suppressed [ 311.511990][T15819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2738'. [ 311.518678][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 311.553259][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 311.564375][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 311.586264][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 311.593617][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 311.617445][T14162] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.664847][T15818] xfrm0 speed is unknown, defaulting to 1000 [ 311.685931][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 311.764101][T15828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.778062][T14162] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.830215][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2742'. [ 311.840824][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2742'. [ 312.042246][T14162] bridge_slave_1: left allmulticast mode [ 312.057842][T14162] bridge_slave_1: left promiscuous mode [ 312.068556][T14162] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.077578][T15843] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2744'. [ 312.087932][T15843] openvswitch: netlink: Message has 44053 unknown bytes. [ 312.106486][T14162] bridge_slave_0: left allmulticast mode [ 312.112192][T14162] bridge_slave_0: left promiscuous mode [ 312.123951][T14162] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.573210][T14162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.599239][T14162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.614067][T14162] bond0 (unregistering): Released all slaves [ 312.644717][T15818] chnl_net:caif_netlink_parms(): no params data found [ 312.725926][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 312.834356][T15860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2750'. [ 312.893848][T15866] xt_CT: You must specify a L4 protocol and not use inversions on it [ 313.211086][T15818] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.220325][T15884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2755'. [ 313.226185][T15818] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.243206][T15818] bridge_slave_0: entered allmulticast mode [ 313.267414][T15818] bridge_slave_0: entered promiscuous mode [ 313.293789][T15880] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2756'. [ 313.348042][T15818] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.355185][T15818] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.376138][T15818] bridge_slave_1: entered allmulticast mode [ 313.383204][T15818] bridge_slave_1: entered promiscuous mode [ 313.516225][T15897] netlink: 'syz.4.2760': attribute type 10 has an invalid length. [ 313.566039][T14162] hsr_slave_0: left promiscuous mode [ 313.599400][T15906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2760'. [ 313.618064][T14162] hsr_slave_1: left promiscuous mode [ 313.640392][T14162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.666320][T14162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.686179][ T5840] Bluetooth: hci3: command tx timeout [ 313.686865][T14162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.711587][T14162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.775997][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 313.800924][T14162] veth1_macvtap: left promiscuous mode [ 313.814679][T14162] veth0_macvtap: left promiscuous mode [ 313.823507][T15916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2764'. [ 313.824504][T14162] veth1_vlan: left promiscuous mode [ 313.849584][T14162] veth0_vlan: left promiscuous mode [ 314.381839][T14162] team0 (unregistering): Port device team_slave_1 removed [ 314.423437][T14162] team0 (unregistering): Port device team_slave_0 removed [ 314.805982][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 314.875636][T15818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.888600][T15897] batman_adv: batadv0: Adding interface: wlan0 [ 314.894815][T15897] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.922215][T15897] batman_adv: batadv0: Interface activated: wlan0 [ 315.039784][T15818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.144817][T15927] netlink: 'syz.1.2768': attribute type 1 has an invalid length. [ 315.153045][T15927] netlink: 'syz.1.2768': attribute type 3 has an invalid length. [ 315.161935][T15927] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2768'. [ 315.235108][T15818] team0: Port device team_slave_0 added [ 315.265066][T15818] team0: Port device team_slave_1 added [ 315.443393][T15940] netlink: 'syz.1.2774': attribute type 1 has an invalid length. [ 315.451844][T15940] netlink: 'syz.1.2774': attribute type 1 has an invalid length. [ 315.481287][T15940] netlink: 'syz.1.2774': attribute type 1 has an invalid length. [ 315.521311][T15940] netlink: 'syz.1.2774': attribute type 2 has an invalid length. [ 315.527926][T15818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.546178][T15818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.626231][T15818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.672026][T15818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.707578][T15818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.766286][T15818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.771489][ T5840] Bluetooth: hci3: command tx timeout [ 315.845982][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 315.955062][T15818] hsr_slave_0: entered promiscuous mode [ 315.992994][T15818] hsr_slave_1: entered promiscuous mode [ 316.001045][T15818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.009653][T15818] Cannot create hsr debugfs directory [ 316.356643][T15976] openvswitch: netlink: Message has 44053 unknown bytes. [ 316.575657][T15986] __nla_validate_parse: 5 callbacks suppressed [ 316.575677][T15986] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.2788'. [ 316.886273][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 317.081513][T15818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 317.103859][T15818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 317.154043][T15818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 317.192414][T15818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 317.286187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.358947][T15818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.423749][T15818] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.440406][T16020] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2800'. [ 317.482299][T14169] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.489619][T14169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.571460][T14169] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.578677][T14169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.849084][ T5840] Bluetooth: hci3: command tx timeout [ 317.925969][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 318.087665][T15818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.157365][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2812'. [ 318.222349][T15818] veth0_vlan: entered promiscuous mode [ 318.287761][T15818] veth1_vlan: entered promiscuous mode [ 318.404353][T15818] veth0_macvtap: entered promiscuous mode [ 318.428585][T15818] veth1_macvtap: entered promiscuous mode [ 318.484835][T15818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.526609][T15818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.547127][T15818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.588441][T15818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.624815][T15818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.662179][T15818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.697742][T15818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.722523][T15818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.741737][T15818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.766391][T15818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.924868][T15818] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 318.936106][T15818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.963686][T14162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.971738][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 319.016134][T14162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.077356][T16093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2825'. [ 319.150885][T14162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.161881][T16093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2825'. [ 319.180190][T14162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.674464][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2835'. [ 319.696560][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2835'. [ 319.981146][T16125] xfrm0 speed is unknown, defaulting to 1000 [ 320.005939][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 320.583962][T16153] syzkaller1: entered promiscuous mode [ 320.594699][T16153] syzkaller1: entered allmulticast mode [ 320.920391][T14161] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.014278][T16175] xfrm0 speed is unknown, defaulting to 1000 [ 321.045993][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 321.498765][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 321.517161][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 321.532192][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 321.540648][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 321.548993][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 321.586082][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 321.713143][T14161] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.821053][T14161] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.839433][T16178] xfrm0 speed is unknown, defaulting to 1000 [ 321.906093][T14161] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.085945][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 322.113161][T16178] chnl_net:caif_netlink_parms(): no params data found [ 322.235077][T14161] bridge_slave_1: left allmulticast mode [ 322.241448][T14161] bridge_slave_1: left promiscuous mode [ 322.276016][T14161] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.353668][T14161] bridge_slave_0: left allmulticast mode [ 322.371719][T14161] bridge_slave_0: left promiscuous mode [ 322.400933][T14161] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.517037][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 322.538592][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 322.563696][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 322.611624][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 322.637136][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 322.664841][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 323.135939][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 323.147177][T14161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.165656][T14161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.185355][T14161] bond0 (unregistering): Released all slaves [ 323.232637][T16200] tipc: Enabling of bearer rejected, failed to enable media [ 323.338668][T16178] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.372582][T16178] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.397907][T16178] bridge_slave_0: entered allmulticast mode [ 323.417044][T16178] bridge_slave_0: entered promiscuous mode [ 323.507720][T16178] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.515080][T16178] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.522496][T16178] bridge_slave_1: entered allmulticast mode [ 323.529975][T16178] bridge_slave_1: entered promiscuous mode [ 323.592649][T16178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.617073][T16197] xfrm0 speed is unknown, defaulting to 1000 [ 323.696124][ T5840] Bluetooth: hci3: command tx timeout [ 323.769178][T16178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.888018][T16178] team0: Port device team_slave_0 added [ 323.928334][T16178] team0: Port device team_slave_1 added [ 323.976131][T14161] hsr_slave_0: left promiscuous mode [ 323.986810][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2880'. [ 324.003857][T14161] hsr_slave_1: left promiscuous mode [ 324.014021][T16239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2880'. [ 324.026599][T14161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.035987][T14161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.045320][T14161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.063863][T14161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.093146][T14161] veth1_macvtap: left promiscuous mode [ 324.099025][T14161] veth0_macvtap: left promiscuous mode [ 324.104648][T14161] veth1_vlan: left promiscuous mode [ 324.112830][T14161] veth0_vlan: left promiscuous mode [ 324.166111][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 324.624058][T14161] team0 (unregistering): Port device team_slave_1 removed [ 324.671682][T14161] team0 (unregistering): Port device team_slave_0 removed [ 324.726492][ T5840] Bluetooth: hci1: command tx timeout [ 325.205950][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 325.238640][T16244] hsr0: left promiscuous mode [ 325.414801][T16248] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 325.456259][T16178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.463510][T16178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.506921][T16178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.532397][T16257] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2885'. [ 325.561820][T16178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.576745][T16178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.624359][T16178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.671269][T16253] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2885'. [ 325.710548][T16266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2889'. [ 325.749918][T16268] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2890'. [ 325.759497][T16268] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2890'. [ 325.768678][ T5840] Bluetooth: hci3: command tx timeout [ 325.774483][T16268] netlink: 'syz.2.2890': attribute type 5 has an invalid length. [ 325.782404][T16268] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2890'. [ 325.822452][T16178] hsr_slave_0: entered promiscuous mode [ 325.884107][T16178] hsr_slave_1: entered promiscuous mode [ 325.896375][T16178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.905491][T16178] Cannot create hsr debugfs directory [ 326.255962][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 326.415184][T16197] chnl_net:caif_netlink_parms(): no params data found [ 326.543885][T16178] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.570244][T16178] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.736166][T16178] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.747103][T16178] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.806664][ T5840] Bluetooth: hci1: command tx timeout [ 326.903232][T16178] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.956763][T16178] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.982037][T16197] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.993052][T16197] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.011866][T16197] bridge_slave_0: entered allmulticast mode [ 327.023815][T16197] bridge_slave_0: entered promiscuous mode [ 327.118354][T16178] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.129014][T16178] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.144925][T16197] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.152407][T16197] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.159954][T16197] bridge_slave_1: entered allmulticast mode [ 327.167053][T16197] bridge_slave_1: entered promiscuous mode [ 327.201660][T16197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.213870][T16197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.286239][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 327.307267][T16197] team0: Port device team_slave_0 added [ 327.326485][T16197] team0: Port device team_slave_1 added [ 327.425705][T16197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.472093][T16197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.576534][T16197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.673943][T16178] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 327.846200][ T5840] Bluetooth: hci3: command tx timeout [ 327.860071][T16197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.868308][T16197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.911086][T16197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.933873][T16178] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 328.065010][T16338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2912'. [ 328.107459][T16178] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 328.177125][T16178] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 328.232928][T16197] hsr_slave_0: entered promiscuous mode [ 328.257120][T16197] hsr_slave_1: entered promiscuous mode [ 328.266266][T16197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.274008][T16197] Cannot create hsr debugfs directory [ 328.325909][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 328.513880][T16178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.560327][T16178] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.613698][T16357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2918'. [ 328.649848][T16361] bond0: option lacp_active: mode dependency failed, not supported in mode balance-tlb(5) [ 328.661635][T14162] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.668776][T14162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.715019][T16357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.830261][T16365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.852630][T16365] bond1: (slave vcan2): The slave device specified does not support setting the MAC address [ 328.868394][T16365] bond1: (slave vcan2): Error -95 calling set_mac_address [ 328.886248][ T5840] Bluetooth: hci1: command tx timeout [ 328.913959][T14161] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.921142][T14161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.054534][T16379] __nla_validate_parse: 1 callbacks suppressed [ 329.054555][T16379] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2926'. [ 329.334979][T16197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 329.365935][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 329.384162][T16197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 329.409743][T16197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 329.444834][T16197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 329.496320][T16178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.670542][T16197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.687501][T16197] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.728522][T14161] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.735692][T14161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.759427][T14161] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.766624][T14161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.805345][T16197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.956252][ T5840] Bluetooth: hci3: command tx timeout [ 330.047767][T16197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.191753][T16197] veth0_vlan: entered promiscuous mode [ 330.235958][T16197] veth1_vlan: entered promiscuous mode [ 330.285069][T16425] xfrm0 speed is unknown, defaulting to 1000 [ 330.348168][T16178] veth0_vlan: entered promiscuous mode [ 330.406363][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 330.458433][T16197] veth0_macvtap: entered promiscuous mode [ 330.478333][T16178] veth1_vlan: entered promiscuous mode [ 330.497060][T16197] veth1_macvtap: entered promiscuous mode [ 330.559290][T16197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.581546][T16197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.603237][T16197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.625231][T16178] veth0_macvtap: entered promiscuous mode [ 330.644315][T16197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.660517][T16197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.683632][T16197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.703870][T16178] veth1_macvtap: entered promiscuous mode [ 330.747958][T16197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.766382][T16197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.785326][T16197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.804811][T16197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.895491][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.946019][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.958086][T16438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2943'. [ 330.968090][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.978959][ T5840] Bluetooth: hci1: command tx timeout [ 330.985586][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.998685][T16178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.026389][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.061353][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.084019][T16178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.114109][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.126529][T16178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.146836][T16178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.155664][T16178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.178189][T16178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.195820][T16178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.445946][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 331.464192][T16197] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 331.492783][T16197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.539306][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.552850][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.606257][T16178] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 331.628086][T16178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.656555][T14169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.682542][T14169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.714910][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.723242][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.823446][T14169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.841814][T14169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.378462][T16480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2958'. [ 332.448139][T16485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2962'. [ 332.457482][T16485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2962'. [ 332.473709][T16485] batadv1: entered promiscuous mode [ 332.480055][T16485] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 332.495935][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 332.745524][T16496] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 332.766662][T16498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2967'. [ 332.786077][T16498] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2967'. [ 333.526297][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 333.678983][T14161] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.809443][T14161] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.941430][T14161] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.025954][T14161] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.125642][T14161] bridge_slave_1: left allmulticast mode [ 334.133239][T14161] bridge_slave_1: left promiscuous mode [ 334.139587][T14161] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.152334][T14161] bridge_slave_0: left allmulticast mode [ 334.158444][T14161] bridge_slave_0: left promiscuous mode [ 334.164187][T14161] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.554386][T14161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.565524][T14161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.575936][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 334.577328][T14161] bond0 (unregistering): Released all slaves [ 334.868301][T16526] vcan0: entered allmulticast mode [ 335.203086][T14161] hsr_slave_0: left promiscuous mode [ 335.247680][T14161] hsr_slave_1: left promiscuous mode [ 335.314383][T14161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.322473][T14161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.387661][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 335.404955][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.407656][T14161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.429244][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 335.436568][T14161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.452422][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 335.462668][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 335.470407][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.509707][T14161] veth1_macvtap: left promiscuous mode [ 335.515364][T14161] veth0_macvtap: left promiscuous mode [ 335.521241][T14161] veth1_vlan: left promiscuous mode [ 335.527928][T14161] veth0_vlan: left promiscuous mode [ 335.606166][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 336.194247][T14161] team0 (unregistering): Port device team_slave_1 removed [ 336.245322][T14161] team0 (unregistering): Port device team_slave_0 removed [ 336.655961][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 336.833789][T16569] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 336.850436][T16569] syzkaller0: group set to 825 [ 336.922710][T16543] xfrm0 speed is unknown, defaulting to 1000 [ 337.353661][T16543] chnl_net:caif_netlink_parms(): no params data found [ 337.525989][ T5840] Bluetooth: hci1: command tx timeout [ 337.689914][T16543] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.697202][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 337.741279][T16543] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.755877][T16543] bridge_slave_0: entered allmulticast mode [ 337.763148][T16543] bridge_slave_0: entered promiscuous mode [ 337.789261][T16543] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.796512][T16543] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.803904][T16543] bridge_slave_1: entered allmulticast mode [ 337.812245][T16543] bridge_slave_1: entered promiscuous mode [ 337.822825][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3008'. [ 338.034247][T16543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.065083][T16543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.207017][T16618] tipc: Failed to remove unknown binding: 66,1,1/7:2318175971/2318175973 [ 338.231390][T16618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3011'. [ 338.333025][T16543] team0: Port device team_slave_0 added [ 338.354717][T16543] team0: Port device team_slave_1 added [ 338.434627][T16625] x_tables: unsorted underflow at hook 2 [ 338.546199][T16543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.563492][T16543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.636486][T16543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.689355][T16543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.719632][T16543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.745910][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 338.785942][T16543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.927924][T16543] hsr_slave_0: entered promiscuous mode [ 338.955280][T16543] hsr_slave_1: entered promiscuous mode [ 338.976819][T16543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.989734][T16543] Cannot create hsr debugfs directory [ 339.051141][T16657] x_tables: duplicate underflow at hook 2 [ 339.081338][T16652] x_tables: duplicate underflow at hook 2 [ 339.180178][T16660] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 339.235970][T16664] IPVS: stopping backup sync thread 14321 ... [ 339.494419][T16678] xt_ipvs: protocol family 7 not supported [ 339.607546][ T5840] Bluetooth: hci1: command tx timeout [ 339.617969][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3030'. [ 339.648196][T16690] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3029'. [ 339.660676][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3030'. [ 339.702430][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3030'. [ 339.736676][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3030'. [ 339.765936][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 339.815882][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3030'. [ 339.836468][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3030'. [ 339.865104][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3030'. [ 339.899672][T16543] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 339.979523][T16543] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 340.023077][T16543] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 340.038685][T16543] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 340.249323][T16543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.267391][T16712] netlink: 'syz.0.3037': attribute type 10 has an invalid length. [ 340.312877][T16543] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.370579][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.377749][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.392178][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.399358][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.805923][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 340.888965][T16543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.053664][T16543] veth0_vlan: entered promiscuous mode [ 341.071793][T16760] netlink: 'syz.0.3049': attribute type 4 has an invalid length. [ 341.094708][T16543] veth1_vlan: entered promiscuous mode [ 341.135434][T16763] netlink: 'syz.1.3050': attribute type 12 has an invalid length. [ 341.188062][T16543] veth0_macvtap: entered promiscuous mode [ 341.200443][T16543] veth1_macvtap: entered promiscuous mode [ 341.243315][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.255118][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.275698][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.290376][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.318365][T16543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.346805][T16765] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 341.364343][T16765] team0: Device ipvlan2 is already an upper device of the team interface [ 341.575042][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.627497][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.650247][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.661538][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.673389][T16543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.706154][ T5840] Bluetooth: hci1: command tx timeout [ 341.788344][T16543] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.798013][T16543] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.806807][T16543] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.815732][T16543] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.845970][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 341.965098][T16779] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.972795][T16779] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.143269][T16779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.164116][T16779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.269578][T16779] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.278971][T16779] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.289432][T16779] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.298734][T16779] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.689565][T16543] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 342.720926][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.777993][ T6121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.828189][ T6121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.879257][T14169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.895872][T14169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.897275][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 343.039080][T16824] __nla_validate_parse: 32 callbacks suppressed [ 343.039102][T16824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3068'. [ 343.088958][T16824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3068'. [ 343.137935][T16824] netlink: 'syz.4.3068': attribute type 13 has an invalid length. [ 343.173082][T16828] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 343.458269][T16833] sctp: [Deprecated]: syz.1.3070 (pid 16833) Use of int in max_burst socket option. [ 343.458269][T16833] Use struct sctp_assoc_value instead [ 343.500402][T16838] netlink: 'syz.2.3072': attribute type 3 has an invalid length. [ 343.517062][T16833] sctp: [Deprecated]: syz.1.3070 (pid 16833) Use of int in max_burst socket option. [ 343.517062][T16833] Use struct sctp_assoc_value instead [ 343.542736][T16838] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3072'. [ 343.624916][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3072'. [ 343.838542][T14169] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.937081][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 344.170487][T14169] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.243981][T14169] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.384283][T14169] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.485637][T14169] bridge_slave_1: left allmulticast mode [ 344.491526][T14169] bridge_slave_1: left promiscuous mode [ 344.498939][T14169] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.509274][T14169] bridge_slave_0: left allmulticast mode [ 344.514928][T14169] bridge_slave_0: left promiscuous mode [ 344.521228][T14169] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.912045][T14169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.925147][T14169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.965944][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 344.994031][T14169] bond0 (unregistering): Released all slaves [ 345.006633][T16860] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3076'. [ 345.218334][T16870] nftables ruleset with unbound chain [ 345.254517][T16870] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 345.539399][T16888] IPVS: set_ctl: invalid protocol: 43 172.30.0.1:20002 [ 345.858952][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 345.869239][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 345.877520][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 345.887162][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 345.908305][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 345.917511][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 345.921117][T16906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3086'. [ 345.986781][T16908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3085'. [ 346.006140][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 346.068077][T16913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.345026][T16899] xfrm0 speed is unknown, defaulting to 1000 [ 346.442967][T14169] hsr_slave_0: left promiscuous mode [ 346.484416][T14169] hsr_slave_1: left promiscuous mode [ 346.497130][T16937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3094'. [ 346.516064][T16937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3094'. [ 346.529079][T14169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.538717][T16940] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3091'. [ 346.556001][T14169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.565553][T14169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.588097][T16939] syz.1.3093: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 346.594373][T14169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.641378][T16939] CPU: 0 UID: 0 PID: 16939 Comm: syz.1.3093 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 346.652215][T16939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 346.662311][T16939] Call Trace: [ 346.665681][T16939] [ 346.668651][T16939] dump_stack_lvl+0x241/0x360 [ 346.673390][T16939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.678643][T16939] ? __pfx__printk+0x10/0x10 [ 346.683288][T16939] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 346.689763][T16939] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 346.696318][T16939] warn_alloc+0x278/0x410 [ 346.700689][T16939] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 346.706809][T16939] ? __pfx_warn_alloc+0x10/0x10 [ 346.711703][T16939] ? kasan_save_track+0x3f/0x80 [ 346.716622][T16939] ? __kasan_kmalloc+0x98/0xb0 [ 346.721429][T16939] ? xsk_setsockopt+0x4ea/0x950 [ 346.726319][T16939] ? do_sock_setsockopt+0x3af/0x720 [ 346.731560][T16939] ? __x64_sys_setsockopt+0x1ee/0x280 [ 346.736985][T16939] ? do_syscall_64+0xf3/0x230 [ 346.741707][T16939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.747834][T16939] __vmalloc_node_range_noprof+0x126/0x1380 [ 346.753811][T16939] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 346.760213][T16939] ? __kasan_kmalloc+0x98/0xb0 [ 346.765027][T16939] vmalloc_user_noprof+0x74/0x80 [ 346.770040][T16939] ? xskq_create+0xb6/0x170 [ 346.774596][T16939] xskq_create+0xb6/0x170 [ 346.778977][T16939] xsk_init_queue+0xa1/0x100 [ 346.783609][T16939] xsk_setsockopt+0x4ea/0x950 [ 346.788312][T16939] ? __pfx_xsk_setsockopt+0x10/0x10 [ 346.793547][T16939] ? __pfx_aa_sk_perm+0x10/0x10 [ 346.798418][T16939] ? aa_sock_opt_perm+0x79/0x120 [ 346.803366][T16939] ? __pfx_xsk_setsockopt+0x10/0x10 [ 346.808583][T16939] do_sock_setsockopt+0x3af/0x720 [ 346.813642][T16939] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 346.819199][T16939] ? __fget_files+0x395/0x410 [ 346.823896][T16939] ? __fget_files+0x2a/0x410 [ 346.828502][T16939] __x64_sys_setsockopt+0x1ee/0x280 [ 346.833734][T16939] do_syscall_64+0xf3/0x230 [ 346.838272][T16939] ? clear_bhb_loop+0x35/0x90 [ 346.842980][T16939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.848888][T16939] RIP: 0033:0x7fd2a1585d29 [ 346.853319][T16939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.872966][T16939] RSP: 002b:00007fd2a2331038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 346.881414][T16939] RAX: ffffffffffffffda RBX: 00007fd2a1775fa0 RCX: 00007fd2a1585d29 [ 346.889444][T16939] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 346.897454][T16939] RBP: 00007fd2a1601aa8 R08: 0000000000000004 R09: 0000000000000000 [ 346.905444][T16939] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.913436][T16939] R13: 0000000000000000 R14: 00007fd2a1775fa0 R15: 00007ffc2a1950c8 [ 346.922045][T16939] [ 346.940946][T16939] Mem-Info: [ 346.944223][T16939] active_anon:4045 inactive_anon:0 isolated_anon:0 [ 346.944223][T16939] active_file:1488 inactive_file:38371 isolated_file:0 [ 346.944223][T16939] unevictable:768 dirty:62 writeback:0 [ 346.944223][T16939] slab_reclaimable:11359 slab_unreclaimable:112531 [ 346.944223][T16939] mapped:29480 shmem:1428 pagetables:670 [ 346.944223][T16939] sec_pagetables:0 bounce:0 [ 346.944223][T16939] kernel_misc_reclaimable:0 [ 346.944223][T16939] free:1328898 free_pcp:591 free_cma:0 [ 346.982627][T14169] veth1_macvtap: left promiscuous mode [ 346.990834][T16939] Node 0 active_anon:16180kB inactive_anon:0kB active_file:5952kB inactive_file:153412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117920kB dirty:244kB writeback:0kB shmem:4176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13172kB pagetables:2680kB sec_pagetables:0kB all_unreclaimable? no [ 347.016500][T14169] veth0_macvtap: left promiscuous mode [ 347.027956][T16939] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 347.044891][T14169] veth1_vlan: left promiscuous mode [ 347.065618][T16939] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 347.068722][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 347.096508][T16939] lowmem_reserve[]: 0 2465 2466 0 0 [ 347.108508][T16939] Node 0 DMA32 free:1393472kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:16216kB inactive_anon:0kB active_file:5952kB inactive_file:152584kB unevictable:1536kB writepending:240kB present:3129332kB managed:2552784kB mlocked:0kB bounce:0kB free_pcp:2416kB local_pcp:1508kB free_cma:0kB [ 347.147381][T14169] veth0_vlan: left promiscuous mode [ 347.153190][T16939] lowmem_reserve[]: 0 0 0 0 0 [ 347.163248][T16939] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 347.202000][T16939] lowmem_reserve[]: 0 0 0 0 0 [ 347.207099][T16939] Node 1 Normal free:3906648kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 347.252876][T16939] lowmem_reserve[]: 0 0 0 0 0 [ 347.263629][T16939] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 347.277076][T16939] Node 0 DMA32: 38*4kB (UM) 113*8kB (UME) 107*16kB (UME) 92*32kB (UME) 176*64kB (UME) 123*128kB (UME) 66*256kB (UME) 23*512kB (UME) 12*1024kB (UM) 9*2048kB (UME) 318*4096kB (UM) = 1394640kB [ 347.303334][T16939] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 347.315508][T16939] Node 1 Normal: 192*4kB (UME) 67*8kB (UME) 40*16kB (UME) 188*32kB (UME) 81*64kB (UME) 28*128kB (UME) 19*256kB (UM) 12*512kB (UME) 2*1024kB (UM) 3*2048kB (UE) 945*4096kB (UM) = 3906648kB [ 347.334424][T16939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 347.344881][T16939] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 347.354972][T16939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 347.364884][T16939] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 347.378044][T16939] 41287 total pagecache pages [ 347.382765][T16939] 0 pages in swap cache [ 347.388293][T16939] Free swap = 124996kB [ 347.392485][T16939] Total swap = 124996kB [ 347.397614][T16939] 2097051 pages RAM [ 347.401454][T16939] 0 pages HighMem/MovableOnly [ 347.406398][T16939] 427005 pages reserved [ 347.410586][T16939] 0 pages cma reserved [ 347.498849][T16957] Bluetooth: MGMT ver 1.23 [ 347.887646][T14169] team0 (unregistering): Port device team_slave_1 removed [ 347.932245][T14169] team0 (unregistering): Port device team_slave_0 removed [ 348.007361][ T5840] Bluetooth: hci1: command tx timeout [ 348.089392][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 348.587916][T16899] chnl_net:caif_netlink_parms(): no params data found [ 348.746869][T16970] __nla_validate_parse: 2 callbacks suppressed [ 348.746889][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3099'. [ 348.750502][T16976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3101'. [ 348.765275][T16970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3099'. [ 348.804600][T16970] netlink: 'syz.0.3099': attribute type 11 has an invalid length. [ 348.956233][T16899] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.963415][T16899] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.986521][T16899] bridge_slave_0: entered allmulticast mode [ 349.007312][T16899] bridge_slave_0: entered promiscuous mode [ 349.031843][T16899] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.046378][T16899] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.066387][T16899] bridge_slave_1: entered allmulticast mode [ 349.073545][T16899] bridge_slave_1: entered promiscuous mode [ 349.110918][T16993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3104'. [ 349.133753][T16899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.142904][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 349.163804][T16993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3104'. [ 349.191153][T16993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.220175][T16899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.254885][T16993] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3104'. [ 349.294659][T16899] team0: Port device team_slave_0 added [ 349.314209][T16899] team0: Port device team_slave_1 added [ 349.353680][T16998] xt_bpf: check failed: parse error [ 349.379312][T16899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.391695][T16899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.448501][T16899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.472955][T16899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.480644][T16899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.507690][T16899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.623243][T16899] hsr_slave_0: entered promiscuous mode [ 349.631237][T16899] hsr_slave_1: entered promiscuous mode [ 349.638364][T16899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.646364][T16899] Cannot create hsr debugfs directory [ 349.788585][T17009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3111'. [ 350.083568][T17025] xt_CT: You must specify a L4 protocol and not use inversions on it [ 350.096361][ T5840] Bluetooth: hci1: command tx timeout [ 350.097529][T17025] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3116'. [ 350.144440][T17021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3114'. [ 350.161673][T17021] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3114'. [ 350.175831][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 350.470250][T16899] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 350.529633][T16899] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 350.647977][T16899] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 350.664230][T16899] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 350.919006][T16899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.040804][T16899] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.083224][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.090413][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.138161][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.145360][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.205852][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 351.659780][T17093] batadv_slave_0: entered promiscuous mode [ 351.779070][T17106] nbd: illegal input index -8454144 [ 352.176187][ T5840] Bluetooth: hci1: command tx timeout [ 352.249001][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 353.295849][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 353.768398][T17099] batadv_slave_0: left promiscuous mode [ 353.797163][T17117] tipc: Started in network mode [ 353.802145][T17117] tipc: Node identity ac1414aa, cluster identity 4711 [ 353.816506][T17117] tipc: Enabled bearer , priority 10 [ 353.824713][T16899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.951864][T16899] veth0_vlan: entered promiscuous mode [ 353.970922][T16899] veth1_vlan: entered promiscuous mode [ 354.024581][T16899] veth0_macvtap: entered promiscuous mode [ 354.049292][T16899] veth1_macvtap: entered promiscuous mode [ 354.078539][T16899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.089519][T16899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.101332][T16899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.111295][T16899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.121853][T16899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.132839][T16899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.137896][T17135] x_tables: duplicate underflow at hook 3 [ 354.144037][T16899] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.154616][T16899] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.160597][T17137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.163626][T16899] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.181289][T16899] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.247270][ T5840] Bluetooth: hci1: command tx timeout [ 354.318975][T16899] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 354.328786][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 354.337502][T16899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.386720][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.420871][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.478242][T14162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.489616][T14162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.622771][T17150] __nla_validate_parse: 1 callbacks suppressed [ 354.622793][T17150] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.3146'. [ 354.651738][T17150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.748232][T17154] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3147'. [ 354.890848][T17159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3148'. [ 354.936423][ T5876] tipc: Node number set to 2886997162 [ 355.033444][T17167] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3150'. [ 355.143238][T17167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3150'. [ 355.156861][T17167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3150'. [ 355.165641][T17175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3153'. [ 355.342014][T17176] xfrm0 speed is unknown, defaulting to 1000 [ 355.347492][ T5979] hid-generic 0005:15C2:0006.0002: item fetching failed at offset 0/1 [ 355.367130][ T5979] hid-generic 0005:15C2:0006.0002: probe with driver hid-generic failed with error -22 [ 355.376961][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 355.407010][T17179] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3154'. [ 355.559055][T17190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.752705][T17194] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3157'. [ 355.891225][T14162] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.950893][T17193] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3157'. [ 356.271908][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 356.281244][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 356.289850][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 356.304952][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 356.326124][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 356.330738][T14162] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.344660][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 356.378688][T17198] xfrm0 speed is unknown, defaulting to 1000 [ 356.415835][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 356.514520][T17198] chnl_net:caif_netlink_parms(): no params data found [ 356.587263][T17198] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.594443][T17198] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.602098][T17198] bridge_slave_0: entered allmulticast mode [ 356.610159][T17198] bridge_slave_0: entered promiscuous mode [ 356.619037][T17198] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.626348][T17198] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.633557][T17198] bridge_slave_1: entered allmulticast mode [ 356.641163][T17198] bridge_slave_1: entered promiscuous mode [ 356.682691][T14162] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.712933][T17198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.730202][T17198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.765539][T17198] team0: Port device team_slave_0 added [ 356.773935][T17198] team0: Port device team_slave_1 added [ 356.819808][T14162] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.841459][T17198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.848899][T17198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.876377][T17198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.897530][T17198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.904583][T17198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.930664][T17198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.984380][T17198] hsr_slave_0: entered promiscuous mode [ 356.991084][T17198] hsr_slave_1: entered promiscuous mode [ 356.999368][T17198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.007488][T17198] Cannot create hsr debugfs directory [ 357.070157][T14162] bridge_slave_1: left allmulticast mode [ 357.082128][T14162] bridge_slave_1: left promiscuous mode [ 357.088036][T14162] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.104328][T14162] bridge_slave_0: left allmulticast mode [ 357.110570][T14162] bridge_slave_0: left promiscuous mode [ 357.116422][T14162] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.366686][ T5836] Bluetooth: hci3: command 0x0405 tx timeout [ 357.455844][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 357.677765][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.695027][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 357.704402][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.712451][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 357.726615][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 357.733993][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 357.959650][T14162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.971713][T14162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.983799][T14162] bond0 (unregistering): Released all slaves [ 358.173035][T17232] netlink: 'syz.1.3167': attribute type 8 has an invalid length. [ 358.197728][T17226] xfrm0 speed is unknown, defaulting to 1000 [ 358.406800][ T5840] Bluetooth: hci1: command tx timeout [ 358.491630][T17198] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.502309][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 358.515369][T17198] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.769307][T17198] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.796815][T17198] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.872583][T17264] vlan2: entered promiscuous mode [ 358.968330][T17198] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.989399][T17198] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.145807][T14162] hsr_slave_0: left promiscuous mode [ 359.398425][T14162] hsr_slave_1: left promiscuous mode [ 359.431466][T14162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.446445][T14162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.469592][T14162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.477474][T14162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.509557][T14162] veth1_macvtap: left promiscuous mode [ 359.515095][T14162] veth0_macvtap: left promiscuous mode [ 359.521356][T14162] veth1_vlan: left promiscuous mode [ 359.533541][T14162] veth0_vlan: left promiscuous mode [ 359.535948][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 359.778064][ T5840] Bluetooth: hci2: command tx timeout [ 360.105307][T14162] team0 (unregistering): Port device team_slave_1 removed [ 360.154698][T14162] team0 (unregistering): Port device team_slave_0 removed [ 360.486319][ T5840] Bluetooth: hci1: command tx timeout [ 360.570094][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 360.717035][T17198] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.728072][T17198] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.760795][T17285] __nla_validate_parse: 8 callbacks suppressed [ 360.760816][T17285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3183'. [ 360.949763][T17226] chnl_net:caif_netlink_parms(): no params data found [ 360.996276][T17300] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3186'. [ 361.067229][T17303] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3187'. [ 361.076766][T17303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3187'. [ 361.229527][T17198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 361.300619][T17198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 361.310666][T17198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 361.343466][T17198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 361.395096][T17226] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.405646][T17226] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.413304][T17226] bridge_slave_0: entered allmulticast mode [ 361.420673][T17226] bridge_slave_0: entered promiscuous mode [ 361.428813][T17226] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.436272][T17226] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.443515][T17226] bridge_slave_1: entered allmulticast mode [ 361.451101][T17226] bridge_slave_1: entered promiscuous mode [ 361.507610][T17226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.544110][T17226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.605874][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 361.663813][T17226] team0: Port device team_slave_0 added [ 361.677397][T17226] team0: Port device team_slave_1 added [ 361.723872][T17331] x_tables: duplicate underflow at hook 1 [ 361.770912][T17332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3193'. [ 361.784614][T17329] netlink: 'syz.0.3194': attribute type 29 has an invalid length. [ 361.839010][T17226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.846571][T17226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.847066][ T5840] Bluetooth: hci2: command tx timeout [ 361.872626][T17226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.903779][T17226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.916190][T17226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.960971][T17226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.083978][T17198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.101684][T17198] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.140972][T17226] hsr_slave_0: entered promiscuous mode [ 362.202876][T17226] hsr_slave_1: entered promiscuous mode [ 362.218213][T17226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.226838][T17226] Cannot create hsr debugfs directory [ 362.274310][T17344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3199'. [ 362.310219][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.317428][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.329641][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.336834][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.466417][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3202'. [ 362.567076][ T5840] Bluetooth: hci1: command tx timeout [ 362.645888][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 362.918040][T17376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3208'. [ 362.922938][T17198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.159552][T17198] veth0_vlan: entered promiscuous mode [ 363.172348][T17198] veth1_vlan: entered promiscuous mode [ 363.194793][T17198] veth0_macvtap: entered promiscuous mode [ 363.204138][T17198] veth1_macvtap: entered promiscuous mode [ 363.295205][T17198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.327572][T17198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.347930][T17198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.369687][T17198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.395961][T17198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.430561][T17198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.533548][T17404] xt_cluster: you have exceeded the maximum number of cluster nodes (768 > 32) [ 363.536615][T17198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.573433][T17198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.582428][T17198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.591429][T17198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.686014][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 363.907296][T17198] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 363.926302][ T5840] Bluetooth: hci2: command tx timeout [ 363.939524][T17198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.011532][T17226] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 364.036819][T17226] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 364.051962][T14161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.076116][T14161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.084725][T17226] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 364.137525][T17226] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 364.164400][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.174085][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.388588][T17226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.446946][T17226] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.478420][T14161] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.485589][T14161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.517220][T14168] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.524395][T14168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.655975][ T5840] Bluetooth: hci1: command tx timeout [ 364.725883][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 365.079702][T17226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.106184][T17467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3233'. [ 365.192428][T17226] veth0_vlan: entered promiscuous mode [ 365.237251][T17226] veth1_vlan: entered promiscuous mode [ 365.328291][T17226] veth0_macvtap: entered promiscuous mode [ 365.350813][T17226] veth1_macvtap: entered promiscuous mode [ 365.409111][T17226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.447101][T17226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.463394][T17226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.484126][T17226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.500873][T17226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.545162][T17226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.558733][T17485] xt_l2tp: v2 doesn't support IP mode [ 365.576029][T17226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.616137][T17226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.635804][T17226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.654030][T17226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.691667][T17226] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.715304][T17226] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.735909][T17226] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.744752][T17226] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.765864][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 365.887160][T17226] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 365.910295][T17226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.935640][T14168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.956237][T14168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.960437][T17496] sctp: [Deprecated]: syz.4.3243 (pid 17496) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.960437][T17496] Use struct sctp_sack_info instead [ 366.006920][ T5840] Bluetooth: hci2: command tx timeout [ 366.055267][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.098500][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.166828][T17501] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3244'. [ 366.231615][T17501] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:0 [ 366.806033][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 367.855950][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 368.895835][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 368.952011][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.975651][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.986039][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 369.002296][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 369.011296][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 369.024258][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.271559][T17523] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3252'. [ 369.465182][T14168] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.519238][T17541] xfrm0 speed is unknown, defaulting to 1000 [ 369.562461][T17550] xfrm0: entered allmulticast mode [ 369.576665][T17550] tipc: Resetting bearer [ 369.718639][T14168] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.915525][T17568] xt_l2tp: v2 doesn't support IP mode [ 369.925849][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 369.991454][T17570] syzkaller0: entered promiscuous mode [ 369.997928][T17570] syzkaller0: entered allmulticast mode [ 370.031631][T14168] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.062000][T17541] chnl_net:caif_netlink_parms(): no params data found [ 370.366495][T17586] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3270'. [ 370.975882][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 371.137202][ T5836] Bluetooth: hci2: command tx timeout [ 372.015860][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 372.539954][T14168] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.640927][T17541] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.666780][T17541] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.694559][T17541] bridge_slave_0: entered allmulticast mode [ 372.708182][T17541] bridge_slave_0: entered promiscuous mode [ 372.736519][T17541] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.743662][T17541] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.773878][T17541] bridge_slave_1: entered allmulticast mode [ 372.776987][T17604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3275'. [ 372.787203][T17541] bridge_slave_1: entered promiscuous mode [ 372.866346][T17606] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3276'. [ 372.910854][T17541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.943802][T17541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.045702][T17541] team0: Port device team_slave_0 added [ 373.055824][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 373.123542][T17541] team0: Port device team_slave_1 added [ 373.194198][T17618] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3279'. [ 373.207925][ T5836] Bluetooth: hci2: command tx timeout [ 373.313247][T17541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.355862][T17541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.423476][T17541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.470423][T14168] bridge_slave_1: left allmulticast mode [ 373.480126][T14168] bridge_slave_1: left promiscuous mode [ 373.490027][T17632] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3282'. [ 373.499931][T14168] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.512665][T14168] bridge_slave_0: left allmulticast mode [ 373.519502][T14168] bridge_slave_0: left promiscuous mode [ 373.536133][T14168] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.085839][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 374.119017][T14168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.140086][T14168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.154992][T14168] bond0 (unregistering): Released all slaves [ 374.180306][T17541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.196032][T17541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.255359][T17541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.014180][T17541] hsr_slave_0: entered promiscuous mode [ 375.025049][T17541] hsr_slave_1: entered promiscuous mode [ 375.093034][T17541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.103605][T17541] Cannot create hsr debugfs directory [ 375.108659][T17661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3292'. [ 375.120797][T17661] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3292'. [ 375.130523][T17661] netlink: 'syz.2.3292': attribute type 5 has an invalid length. [ 375.135842][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 375.254987][T17665] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3293'. [ 375.286113][ T5836] Bluetooth: hci2: command tx timeout [ 375.313650][T14168] hsr_slave_0: left promiscuous mode [ 375.333385][T14168] hsr_slave_1: left promiscuous mode [ 375.339883][T14168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.351733][T14168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.366838][T14168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.384495][T14168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.435548][T14168] veth1_macvtap: left promiscuous mode [ 375.441536][T14168] veth0_macvtap: left promiscuous mode [ 375.454012][T14168] veth1_vlan: left promiscuous mode [ 375.464008][T14168] veth0_vlan: left promiscuous mode [ 376.155723][T13197] hid-generic 0005:0C45:1010.0003: item fetching failed at offset 0/1 [ 376.165559][T13197] hid-generic 0005:0C45:1010.0003: probe with driver hid-generic failed with error -22 [ 376.177304][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 376.377841][T14168] team0 (unregistering): Port device team_slave_1 removed [ 376.437982][T14168] team0 (unregistering): Port device team_slave_0 removed [ 377.031834][T17692] IPv6: NLM_F_CREATE should be specified when creating new route [ 377.205949][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 377.274166][T17706] netlink: 340 bytes leftover after parsing attributes in process `syz.1.3304'. [ 377.345560][T17706] netlink: 'syz.1.3304': attribute type 4 has an invalid length. [ 377.367230][ T5836] Bluetooth: hci2: command tx timeout [ 377.426928][T17706] netlink: 'syz.1.3304': attribute type 4 has an invalid length. [ 377.749484][T17724] IPVS: set_ctl: invalid protocol: 103 172.30.0.1:20000 [ 377.760546][T17726] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3308'. [ 377.913016][T17541] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 377.929913][T17541] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 377.946822][T17541] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 377.975068][T17541] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 378.006545][T17736] dvmrp0: entered allmulticast mode [ 378.191669][T17541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.223742][T17541] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.237319][T14171] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.244457][T14171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.255827][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 378.333224][T17741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3315'. [ 378.381959][T17741] netlink: 'syz.4.3315': attribute type 1 has an invalid length. [ 378.395962][T17741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3315'. [ 378.402905][T14171] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.412349][T14171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.531731][T17541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 378.561046][T17541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.688801][T17749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3317'. [ 378.713164][T17749] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 378.898621][T17749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3317'. [ 379.285988][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 380.335859][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 381.171076][T17541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.268728][T17541] veth0_vlan: entered promiscuous mode [ 381.297782][T17541] veth1_vlan: entered promiscuous mode [ 381.363977][T17541] veth0_macvtap: entered promiscuous mode [ 381.366358][T17779] nbd: must specify at least one socket [ 381.375822][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 381.398399][T17541] veth1_macvtap: entered promiscuous mode [ 381.416522][T17779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3325'. [ 381.467244][T17541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.490945][T17541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.501642][T17541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.512741][T17541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.524084][T17541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.536847][T17541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.548033][T17541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.558590][T17541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.569424][T17541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.580449][T17541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.596952][T17785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3327'. [ 381.621452][T17785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3327'. [ 381.653631][T17541] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.676098][T17541] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.695244][T17541] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.717536][T17541] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.797039][T17789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3328'. [ 381.963560][T17541] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 381.973942][T17541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.990248][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.999083][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.043414][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.053579][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.137010][T17685] ================================================================== [ 382.145232][T17685] BUG: KASAN: slab-use-after-free in __mutex_lock+0x7fb/0xee0 [ 382.152746][T17685] Read of size 8 at addr ffff888012aa0060 by task khidpd_0c451010/17685 [ 382.161105][T17685] [ 382.163445][T17685] CPU: 1 UID: 0 PID: 17685 Comm: khidpd_0c451010 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 382.174650][T17685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 382.184717][T17685] Call Trace: [ 382.188020][T17685] [ 382.190964][T17685] dump_stack_lvl+0x241/0x360 [ 382.195669][T17685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.200887][T17685] ? __pfx__printk+0x10/0x10 [ 382.205497][T17685] ? _printk+0xd5/0x120 [ 382.209669][T17685] ? __virt_addr_valid+0x183/0x530 [ 382.214794][T17685] ? __virt_addr_valid+0x183/0x530 [ 382.220009][T17685] print_report+0x169/0x550 [ 382.224609][T17685] ? __virt_addr_valid+0x183/0x530 [ 382.229821][T17685] ? __virt_addr_valid+0x183/0x530 [ 382.234944][T17685] ? __virt_addr_valid+0x45f/0x530 [ 382.240087][T17685] ? __phys_addr+0xba/0x170 [ 382.244605][T17685] ? __mutex_lock+0x7fb/0xee0 [ 382.249300][T17685] kasan_report+0x143/0x180 [ 382.253821][T17685] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 382.259744][T17685] ? __mutex_lock+0x7fb/0xee0 [ 382.264452][T17685] __mutex_lock+0x7fb/0xee0 [ 382.268976][T17685] ? __mutex_lock+0x5ef/0xee0 [ 382.273672][T17685] ? l2cap_unregister_user+0x6a/0x1c0 [ 382.279075][T17685] ? __pfx___mutex_lock+0x10/0x10 [ 382.284147][T17685] ? __pfx___timer_delete_sync+0x10/0x10 [ 382.289825][T17685] l2cap_unregister_user+0x6a/0x1c0 [ 382.295059][T17685] hidp_session_thread+0x450/0x490 [ 382.300197][T17685] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 382.306116][T17685] ? __pfx_hidp_session_thread+0x10/0x10 [ 382.311922][T17685] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 382.317847][T17685] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 382.324127][T17685] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 382.330406][T17685] ? __kthread_parkme+0x169/0x1d0 [ 382.335451][T17685] ? __pfx_hidp_session_thread+0x10/0x10 [ 382.341191][T17685] kthread+0x2f0/0x390 [ 382.345334][T17685] ? __pfx_hidp_session_thread+0x10/0x10 [ 382.351008][T17685] ? __pfx_kthread+0x10/0x10 [ 382.355626][T17685] ret_from_fork+0x4b/0x80 [ 382.360094][T17685] ? __pfx_kthread+0x10/0x10 [ 382.364721][T17685] ret_from_fork_asm+0x1a/0x30 [ 382.369514][T17685] [ 382.372556][T17685] [ 382.374888][T17685] Allocated by task 17541: [ 382.379309][T17685] kasan_save_track+0x3f/0x80 [ 382.384096][T17685] __kasan_kmalloc+0x98/0xb0 [ 382.388698][T17685] __kmalloc_noprof+0x285/0x4c0 [ 382.393603][T17685] hci_alloc_dev_priv+0x27/0x2030 [ 382.398649][T17685] vhci_create_device+0x116/0x6a0 [ 382.403722][T17685] vhci_write+0x3cf/0x490 [ 382.408173][T17685] vfs_write+0xaeb/0xd30 [ 382.412428][T17685] ksys_write+0x18f/0x2b0 [ 382.416767][T17685] do_syscall_64+0xf3/0x230 [ 382.421287][T17685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.427215][T17685] [ 382.429549][T17685] Freed by task 17541: [ 382.433624][T17685] kasan_save_track+0x3f/0x80 [ 382.438326][T17685] kasan_save_free_info+0x40/0x50 [ 382.443378][T17685] __kasan_slab_free+0x59/0x70 [ 382.448157][T17685] kfree+0x196/0x430 [ 382.452158][T17685] hci_release_dev+0x1525/0x16b0 [ 382.457104][T17685] bt_host_release+0x83/0x90 [ 382.461721][T17685] device_release+0x99/0x1c0 [ 382.466347][T17685] kobject_put+0x22f/0x480 [ 382.470787][T17685] vhci_release+0x88/0xd0 [ 382.475130][T17685] __fput+0x23c/0xa50 [ 382.479128][T17685] task_work_run+0x24f/0x310 [ 382.483735][T17685] do_exit+0xa2f/0x28e0 [ 382.487908][T17685] do_group_exit+0x207/0x2c0 [ 382.492513][T17685] __x64_sys_exit_group+0x3f/0x40 [ 382.497554][T17685] x64_sys_call+0x26a8/0x26b0 [ 382.502254][T17685] do_syscall_64+0xf3/0x230 [ 382.506777][T17685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.512689][T17685] [ 382.515018][T17685] Last potentially related work creation: [ 382.520755][T17685] kasan_save_stack+0x3f/0x60 [ 382.525456][T17685] __kasan_record_aux_stack+0xac/0xc0 [ 382.530902][T17685] insert_work+0x3e/0x330 [ 382.535265][T17685] __queue_work+0xb66/0xf50 [ 382.539794][T17685] queue_work_on+0x1c2/0x380 [ 382.544405][T17685] process_scheduled_works+0xa66/0x1840 [ 382.549966][T17685] worker_thread+0x870/0xd30 [ 382.554576][T17685] kthread+0x2f0/0x390 [ 382.558666][T17685] ret_from_fork+0x4b/0x80 [ 382.563105][T17685] ret_from_fork_asm+0x1a/0x30 [ 382.567892][T17685] [ 382.570251][T17685] Second to last potentially related work creation: [ 382.576840][T17685] kasan_save_stack+0x3f/0x60 [ 382.581530][T17685] __kasan_record_aux_stack+0xac/0xc0 [ 382.586918][T17685] insert_work+0x3e/0x330 [ 382.591266][T17685] __queue_work+0xc8b/0xf50 [ 382.595788][T17685] call_timer_fn+0x187/0x650 [ 382.600405][T17685] __run_timer_base+0x695/0x8e0 [ 382.605268][T17685] run_timer_softirq+0xb7/0x170 [ 382.610132][T17685] handle_softirqs+0x2d4/0x9b0 [ 382.614957][T17685] __irq_exit_rcu+0xf7/0x220 [ 382.619566][T17685] irq_exit_rcu+0x9/0x30 [ 382.623822][T17685] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 382.629467][T17685] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 382.635464][T17685] [ 382.637794][T17685] The buggy address belongs to the object at ffff888012aa0000 [ 382.637794][T17685] which belongs to the cache kmalloc-8k of size 8192 [ 382.651859][T17685] The buggy address is located 96 bytes inside of [ 382.651859][T17685] freed 8192-byte region [ffff888012aa0000, ffff888012aa2000) [ 382.665672][T17685] [ 382.668010][T17685] The buggy address belongs to the physical page: [ 382.674432][T17685] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12aa0 [ 382.683201][T17685] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 382.691800][T17685] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 382.699784][T17685] page_type: f5(slab) [ 382.703777][T17685] raw: 00fff00000000040 ffff88801ac42280 0000000000000000 dead000000000001 [ 382.712364][T17685] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 382.720959][T17685] head: 00fff00000000040 ffff88801ac42280 0000000000000000 dead000000000001 [ 382.729640][T17685] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 382.738407][T17685] head: 00fff00000000003 ffffea00004aa801 ffffffffffffffff 0000000000000000 [ 382.747084][T17685] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 382.755850][T17685] page dumped because: kasan: bad access detected [ 382.762277][T17685] page_owner tracks the page as allocated [ 382.768002][T17685] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5499, tgid 5499 (dhcpcd), ts 47113930230, free_ts 47000058726 [ 382.788695][T17685] post_alloc_hook+0x1f3/0x230 [ 382.793486][T17685] get_page_from_freelist+0x365c/0x37a0 [ 382.799043][T17685] __alloc_pages_noprof+0x292/0x710 [ 382.804250][T17685] alloc_pages_mpol_noprof+0x3e8/0x680 [ 382.809734][T17685] alloc_slab_page+0x6a/0x110 [ 382.814431][T17685] allocate_slab+0x5a/0x2b0 [ 382.818941][T17685] ___slab_alloc+0xc27/0x14a0 [ 382.823634][T17685] __slab_alloc+0x58/0xa0 [ 382.827977][T17685] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 382.834408][T17685] kmalloc_reserve+0x111/0x2a0 [ 382.839180][T17685] __alloc_skb+0x1f3/0x440 [ 382.843603][T17685] netlink_dump+0x1ee/0xe10 [ 382.848120][T17685] netlink_recvmsg+0x6bb/0x11d0 [ 382.852977][T17685] sock_recvmsg+0x22f/0x280 [ 382.857494][T17685] ____sys_recvmsg+0x1c6/0x480 [ 382.862271][T17685] __sys_recvmsg+0x291/0x390 [ 382.866872][T17685] page last free pid 5610 tgid 5610 stack trace: [ 382.873209][T17685] free_unref_page+0xd3f/0x1010 [ 382.878103][T17685] __put_partials+0x160/0x1c0 [ 382.882801][T17685] put_cpu_partial+0x17c/0x250 [ 382.887578][T17685] __slab_free+0x290/0x380 [ 382.892002][T17685] qlist_free_all+0x9a/0x140 [ 382.896620][T17685] kasan_quarantine_reduce+0x14f/0x170 [ 382.902092][T17685] __kasan_slab_alloc+0x23/0x80 [ 382.906961][T17685] kmem_cache_alloc_noprof+0x1d9/0x380 [ 382.912435][T17685] getname_flags+0xb7/0x540 [ 382.916950][T17685] do_sys_openat2+0xd2/0x1d0 [ 382.921570][T17685] __x64_sys_openat+0x247/0x2a0 [ 382.926455][T17685] do_syscall_64+0xf3/0x230 [ 382.930985][T17685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.936906][T17685] [ 382.939239][T17685] Memory state around the buggy address: [ 382.944875][T17685] ffff888012a9ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 382.952980][T17685] ffff888012a9ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 382.961059][T17685] >ffff888012aa0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 382.969127][T17685] ^ [ 382.976337][T17685] ffff888012aa0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 382.984416][T17685] ffff888012aa0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 382.992589][T17685] ================================================================== [ 383.001158][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 383.009111][T17685] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 383.016488][T17685] CPU: 1 UID: 0 PID: 17685 Comm: khidpd_0c451010 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 383.027722][T17685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 383.037848][T17685] Call Trace: [ 383.041159][T17685] [ 383.044116][T17685] dump_stack_lvl+0x241/0x360 [ 383.048846][T17685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.054096][T17685] ? __pfx__printk+0x10/0x10 [ 383.058736][T17685] ? vscnprintf+0x5d/0x90 [ 383.063102][T17685] panic+0x349/0x880 [ 383.067043][T17685] ? check_panic_on_warn+0x21/0xb0 [ 383.072191][T17685] ? __pfx_panic+0x10/0x10 [ 383.076642][T17685] ? mark_lock+0x9a/0x360 [ 383.081010][T17685] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 383.086950][T17685] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 383.092892][T17685] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 383.099252][T17685] ? print_report+0x502/0x550 [ 383.103981][T17685] check_panic_on_warn+0x86/0xb0 [ 383.108959][T17685] ? __mutex_lock+0x7fb/0xee0 [ 383.113768][T17685] end_report+0x77/0x160 [ 383.118103][T17685] kasan_report+0x154/0x180 [ 383.122643][T17685] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 383.128574][T17685] ? __mutex_lock+0x7fb/0xee0 [ 383.133299][T17685] __mutex_lock+0x7fb/0xee0 [ 383.137844][T17685] ? __mutex_lock+0x5ef/0xee0 [ 383.142577][T17685] ? l2cap_unregister_user+0x6a/0x1c0 [ 383.148009][T17685] ? __pfx___mutex_lock+0x10/0x10 [ 383.153178][T17685] ? __pfx___timer_delete_sync+0x10/0x10 [ 383.158858][T17685] l2cap_unregister_user+0x6a/0x1c0 [ 383.164106][T17685] hidp_session_thread+0x450/0x490 [ 383.169254][T17685] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 383.175193][T17685] ? __pfx_hidp_session_thread+0x10/0x10 [ 383.180871][T17685] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 383.186805][T17685] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 383.193089][T17685] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 383.199718][T17685] ? __kthread_parkme+0x169/0x1d0 [ 383.204773][T17685] ? __pfx_hidp_session_thread+0x10/0x10 [ 383.210430][T17685] kthread+0x2f0/0x390 [ 383.214519][T17685] ? __pfx_hidp_session_thread+0x10/0x10 [ 383.220173][T17685] ? __pfx_kthread+0x10/0x10 [ 383.224780][T17685] ret_from_fork+0x4b/0x80 [ 383.229212][T17685] ? __pfx_kthread+0x10/0x10 [ 383.233822][T17685] ret_from_fork_asm+0x1a/0x30 [ 383.238600][T17685] [ 383.242020][T17685] Kernel Offset: disabled [ 383.246376][T17685] Rebooting in 86400 seconds..