last executing test programs: 3.609725286s ago: executing program 2 (id=45): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 3.462571341s ago: executing program 0 (id=47): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, 0x0) 3.266600054s ago: executing program 0 (id=48): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendmsg$inet6(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x30}, 0x0) 3.138829455s ago: executing program 0 (id=49): r0 = socket(0x1e, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) sendmmsg$sock(r0, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0) 2.941252238s ago: executing program 3 (id=51): unshare(0x22020600) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000080)=0x84, 0x4) 2.939966638s ago: executing program 0 (id=52): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xe0000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0x4}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x1, 0xffffffffffffffff, 0x6, 0x77}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 2.746582931s ago: executing program 3 (id=53): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x7fffffff, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) 2.69045743s ago: executing program 1 (id=54): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'dummy0\x00', 0x41}, 0x18) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="80935a5d0a3ce1d7a2f2f506729419f1068705bb22160750687529197c22280000001400030002000000000000000000210014000100ff020000000000000000000000000001000000003408fc70707a909bb09312fd13d18364bbb159e1f0166677b386715fa6e9d1fc3eb6d46dfbf2d95b48e6c33bafb2bfb112a2821a483fc7d6e25d7fc7e39017d585cbaf9c00e40e5a152d4dcd27d3d6"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0xc, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) r3 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=@newqdisc={0x24, 0x24, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004001) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_DIVISOR={0x8, 0x4, 0x10}]}}]}, 0x40}}, 0x40808c4) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.183780562s ago: executing program 1 (id=55): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast1, 0x0, 0x0, 'ovf\x00', 0x9, 0xc, 0x400059}, 0x2c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r1, 0x1, 0x0, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x40000000) 1.078627859s ago: executing program 2 (id=56): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1.050750914s ago: executing program 0 (id=57): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4004080) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0xfff, 0x7, 0x8, 0x24ed, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x200488c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) 1.048948504s ago: executing program 3 (id=58): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x7f, &(0x7f0000000780)={@local, @multicast, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x2, 0x71, 0x65, 0x0, 0x0, 0x21, 0x0, @multicast2, @local}, {{0x4e23, 0x4e21, 0x4, 0x1, 0xd, 0x0, 0x0, 0x0, 0x4, "ef6bbd", 0x7, "dbd544"}, "c77c7efab661d8776670244e54a442aeab376f595c97dbd31a5e79260f22366f6eb2d648b670d8d1063c7da5bad457c9b91c8249841d039e1c1572ccab70bfbb270b9aea89b9e936042f821794"}}}}}, 0x0) 918.572286ms ago: executing program 1 (id=59): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000006b1bdbb61100"/28], 0x50) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44891}, 0x44) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}]}, 0x50}}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x38, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 830.677371ms ago: executing program 2 (id=60): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001440), 0x0, &(0x7f00000014c0)=[{0x10, 0x111, 0x80000001}, {0x10, 0x10f, 0x7}, {0x398, 0x101, 0xb, "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"}, {0xe0, 0x3a, 0x100, "c838af48270aa49d01a4dbe2b8758c24ea2eef1229f97e4c8986f6ea59ba4561a02e9cdf41629664e33eb4ed82373c8dfd8cff9e94b469000b27ae0d2e7f4ed2994b5958976248f6f21c66d6f2c1915dde1859550494a63a7ff3d025ee2544c80ed5e19e21aa570a86a0b1d0fc905c2b5ac19a3038091b749ff695c971e72ed6985359b634e2fce749b217ddb93b89cb00ab699a40f7021d21b7eb03ffe9f52c469cfe0d16c73239e98e5c57fcd6be1976a40fa16cea022b833a9639ae2aec00a805954def1d2d17b2727d5d0b2157"}], 0x498}}], 0x2, 0x20000040) 821.012533ms ago: executing program 3 (id=61): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x400000000}, {0x0, 0x8000, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0xffffffec, 0x3c}, 0xa, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000040}, 0xc004004) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0xa, 0x3a, 0x4, @mcast2}, 0x1c, 0x0}, 0x922bac8556bdad8e) 688.263654ms ago: executing program 3 (id=62): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e) connect$pptp(r0, 0x0, 0x0) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x4, @rand_addr=0x64010100}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) close(0x4) 647.888561ms ago: executing program 0 (id=63): bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000006000020410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="054000000400"/21], 0x50) r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000240)=0x4) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x1, 0x1, {0xa, 0x4e22, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff8}}}, 0x32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x4) r2 = socket$kcm(0x10, 0x400000002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1d) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r6}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000000c0)="3b7ec34f0db3f893ad29dbe7f66cb369c67bc9b55c24f7489b26d02b67a9985c049d5ed44db5f93fd278ba53d6552ec8133e46843126ab73b29c8af1b2bbcd299b8cb834f63f8ab61b5a0f641308ee03854ba7cf90bb33b79f6f8ad2f1fa765eca53c6d953b5709bf47e0378243f33e9761b796b", 0x74}, {&(0x7f00000001c0)="80854aed8a8b09eead0565d0ed825597ee15550a04adaa0c527583601e50248794f924bfaae67fed7684b684ca3d", 0x2e}, {&(0x7f0000000640)="9a110f2265799c629327153c95506f47ebd24653e2d684719912d1cdc87cec1d493185ff31b1319a5c802fca675c26f8b2fddc61b13d7aa61ed4a652efd8b9c233dc98730687151b3d87c9a85259515d1dbecd90ab33dbb33f8c97863f3cf66696266ac936fb9f6a7f2eecfe2b52b2e2a17eff931df687c49ecc0e5cc8b594e691a310283536be987326b90f0e579ebfa4c271136cf8b49b0dc37f76251febb6da5f99b1828ca831bf4de0f08ba18830f00b59b6e1f5d9ef6595fbdf4340b71d9afc93275ca71c308af1cacf44422b1b2ca00808d8ef4ef00d02e4375c9b3153c6d494034b23b29a50256d09ec", 0xed}, {&(0x7f0000000740)="867117d9b5b80504e9a07faf58f280cfa004a66161bf76cb864ecd9bcf002d34e0ebee3ed011e290d970c6b6db37e933a9210409e89ef8922bc2ac28ede1ef060be65b0d83336a9953828c88c88dffafeac774c675b00b647ba8c0de7a72461cfe211ad509168bfba3a02bb947653f90677756f38c3343d9", 0x78}, {&(0x7f00000007c0)="f90c9980c9cced08acb54623fb77758a082c70dab6ad42973651e70c8b38d94bd2abd6698c793fcceb0f2ba2720139a282c56b7b960740e8423fd3a14cf81261de4a73d4e4f6add7540559e2d7f9d38b2674bdc734a3a3a7e4a794b0a7180021b4143a7f42d3b656a28c6faf0a340f3d719fd4fe5fd3cc1093dacae9c44ed755aa10b051a1efbb53987b6f62e683c741e674a3d1f6f80bbc056341c2f4b2ef064f9cdb48", 0xa4}, {&(0x7f0000000880)="59b0650f69821efcd22dba1f25b5c9d910aee8b791d0065e274a8118fbf85f3a3a85ad22878704cbaa5af487f67dc9e1ac94656b87f8152b4d2f71746f45063144405dbf5f98d17e91c621b45fe02e0e437f4fa5791f23b9ddc009b7ac2b63adca38c911a4ddec02b86d75f8b6cafb52ec395ee7e1807ba640f16553688cb389a34973cc8e2b60de2b3baa65999d6812b2d3732446dff9cae2f4db16c99854d4d194751a86e1d88f99a01b41d96b0a60770e50a4c4", 0xb5}, {&(0x7f0000000940)="d1b77827a069b2a336c4da2f584f74275cea69a82011e5e3de8cd84a082231ed1f4cc83e93a32144e07c8b8f65f788ce4e7bc9fb662c00896cd62424a0223363b7cd87fcd3c20152c29dfa3d302889aecf499054f8e31451ddb6578240f374e8cc1670e63b5255d1e2e89d37a79ed2eb9583e6b26cc1cdf33e85a860bdd7ad71d49630bc007deee1bb614d6b70719895daa622f1441049ac93a6ffd38be6e79e1961c64fe940cc1d4c14913136528fe970b8f8f3ea554c67b7b3d7c2a3cfa0982aa54f64ffc2b0575f6f", 0xca}, {&(0x7f0000000f40)="bce9fe20ea7f24842a591ba73010abc75ec7b8f4b8cb7d89a5399b0ba659120c2c55739f3bd790eefe2852dd4dac4ad988ace7ba9128bff908c1d3359950b2cfeeb77bbc0a5cd370e4b744d49be30a871f502cdb5e09e9ad99ee9ee05cd9d8dd722f07fc99f5bf8a2c8a4f307665a9366a31abe44928ab62e3841096cc996bf46926068d7403b15a6beb6e450e1f6564bdb287fcf5762895a53337545b7c208bb9f40a46419fef57483a01b3f988abe61ea2105f22619fe476826b0902c5a35cf9b66956aae2bacbd480ec04b21adccb35cb22023db0b734f2d1f3eb4a9087ec64d65e4aa89b4a", 0xe7}], 0x8, &(0x7f0000001100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x1e}, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}], 0x38}, 0xc1) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r8], 0x2c}}, 0x4000000) 608.083858ms ago: executing program 1 (id=64): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) 607.854948ms ago: executing program 2 (id=65): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 514.507494ms ago: executing program 3 (id=66): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) close(r3) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$inet(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000011c0)="d1", 0x1}, {0x0}], 0x2}, 0x404c0c4) recvmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10060) 437.753077ms ago: executing program 2 (id=67): recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000180)=0x4) 227.967382ms ago: executing program 2 (id=68): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xa7, 0x807, 0x2, 0x72b2, 0x600, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x7fffffff, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) 158.525583ms ago: executing program 1 (id=69): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast1, 0x0, 0x0, 'ovf\x00', 0x9, 0xc, 0x400059}, 0x2c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r1, 0x1, 0x0, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x40000000) 0s ago: executing program 1 (id=70): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.60' (ED25519) to the list of known hosts. [ 77.988548][ T5758] cgroup: Unknown subsys name 'net' [ 78.124383][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.832745][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.094146][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.102748][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.110929][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.119780][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.128066][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.136000][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.149121][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.158553][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.180074][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.186151][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.191847][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.203006][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.211031][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.232101][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.244011][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.247855][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.258663][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.276529][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.300145][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.318024][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.326537][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.334827][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.342764][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.350467][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.731567][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 82.892530][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.900590][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.909120][ T5772] bridge_slave_0: entered allmulticast mode [ 82.916986][ T5772] bridge_slave_0: entered promiscuous mode [ 82.967133][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.974360][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.982191][ T5772] bridge_slave_1: entered allmulticast mode [ 82.991502][ T5772] bridge_slave_1: entered promiscuous mode [ 83.059185][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.069686][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 83.101712][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.123053][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 83.202448][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 83.217773][ T5772] team0: Port device team_slave_0 added [ 83.238391][ T5772] team0: Port device team_slave_1 added [ 83.345666][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.352668][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.378801][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.403011][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.410456][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.417829][ T5774] bridge_slave_0: entered allmulticast mode [ 83.424905][ T5774] bridge_slave_0: entered promiscuous mode [ 83.441443][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.448571][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.475414][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.497927][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.505347][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.512640][ T5774] bridge_slave_1: entered allmulticast mode [ 83.520235][ T5774] bridge_slave_1: entered promiscuous mode [ 83.541558][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.548863][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.559214][ T5773] bridge_slave_0: entered allmulticast mode [ 83.566448][ T5773] bridge_slave_0: entered promiscuous mode [ 83.600073][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.607385][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.614566][ T5773] bridge_slave_1: entered allmulticast mode [ 83.622670][ T5773] bridge_slave_1: entered promiscuous mode [ 83.653467][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.702166][ T5772] hsr_slave_0: entered promiscuous mode [ 83.710274][ T5772] hsr_slave_1: entered promiscuous mode [ 83.721312][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.730707][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.741372][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.748886][ T5771] bridge_slave_0: entered allmulticast mode [ 83.756324][ T5771] bridge_slave_0: entered promiscuous mode [ 83.774588][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.782054][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.789558][ T5771] bridge_slave_1: entered allmulticast mode [ 83.799380][ T5771] bridge_slave_1: entered promiscuous mode [ 83.834667][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.869532][ T5774] team0: Port device team_slave_0 added [ 83.885092][ T5774] team0: Port device team_slave_1 added [ 83.893512][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.927364][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.940967][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.022987][ T5773] team0: Port device team_slave_0 added [ 84.033043][ T5773] team0: Port device team_slave_1 added [ 84.040375][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.048350][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.074577][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.089572][ T5771] team0: Port device team_slave_0 added [ 84.114203][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.124147][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.150804][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.165183][ T5771] team0: Port device team_slave_1 added [ 84.241626][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.248760][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.275483][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.277636][ T5785] Bluetooth: hci1: command tx timeout [ 84.304424][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.313167][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.339532][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.355527][ T5785] Bluetooth: hci2: command tx timeout [ 84.363339][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.370744][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.396936][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.429248][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.436934][ T5086] Bluetooth: hci0: command tx timeout [ 84.442651][ T5785] Bluetooth: hci3: command tx timeout [ 84.445558][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.477768][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.523521][ T5774] hsr_slave_0: entered promiscuous mode [ 84.530393][ T5774] hsr_slave_1: entered promiscuous mode [ 84.537787][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.546321][ T5774] Cannot create hsr debugfs directory [ 84.635663][ T5773] hsr_slave_0: entered promiscuous mode [ 84.642893][ T5773] hsr_slave_1: entered promiscuous mode [ 84.649824][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.657626][ T5773] Cannot create hsr debugfs directory [ 84.713409][ T5771] hsr_slave_0: entered promiscuous mode [ 84.720572][ T5771] hsr_slave_1: entered promiscuous mode [ 84.727372][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.735069][ T5771] Cannot create hsr debugfs directory [ 84.959116][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.001897][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.052048][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.082197][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.163899][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.184478][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.201135][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.211594][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.331456][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.355158][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.378973][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.412361][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.474901][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.499403][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.524998][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.537623][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.551350][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.605724][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.621409][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.647202][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.654616][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.692926][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.700164][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.753691][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.781452][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.788683][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.846255][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.863935][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.871167][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.941735][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.962332][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.017229][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.044289][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.051544][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.099778][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.107027][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.133138][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.160945][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.168234][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.180862][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.188173][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.348843][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.365253][ T5785] Bluetooth: hci1: command tx timeout [ 86.436500][ T5785] Bluetooth: hci2: command tx timeout [ 86.459461][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.516473][ T5785] Bluetooth: hci3: command tx timeout [ 86.521974][ T5785] Bluetooth: hci0: command tx timeout [ 86.543697][ T5772] veth0_vlan: entered promiscuous mode [ 86.560189][ T5772] veth1_vlan: entered promiscuous mode [ 86.646768][ T5772] veth0_macvtap: entered promiscuous mode [ 86.672722][ T5772] veth1_macvtap: entered promiscuous mode [ 86.720881][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.751626][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.808257][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.824607][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.833972][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.843931][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.864347][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.083319][ T5774] veth0_vlan: entered promiscuous mode [ 87.091352][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.107421][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.133235][ T5774] veth1_vlan: entered promiscuous mode [ 87.147725][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.182886][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.262674][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.278087][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.352983][ T5771] veth0_vlan: entered promiscuous mode [ 87.387737][ T5774] veth0_macvtap: entered promiscuous mode [ 87.423732][ T5774] veth1_macvtap: entered promiscuous mode [ 87.474633][ T5771] veth1_vlan: entered promiscuous mode [ 87.567993][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.606652][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.627143][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.634875][ T5773] veth0_vlan: entered promiscuous mode [ 87.662550][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.674129][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.691279][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.730205][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.739243][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.748592][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.758253][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.771828][ T5771] veth0_macvtap: entered promiscuous mode [ 87.783339][ T5773] veth1_vlan: entered promiscuous mode [ 87.786034][ T5833] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 87.819750][ T5771] veth1_macvtap: entered promiscuous mode [ 87.968193][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.991075][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.002222][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.013153][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.026701][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.068957][ T5773] veth0_macvtap: entered promiscuous mode [ 88.129104][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.160521][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.193343][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.212813][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.225919][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.255624][ T5773] veth1_macvtap: entered promiscuous mode [ 88.266462][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.280842][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.289313][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.298219][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.306778][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.317480][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.436897][ T23] IPVS: starting estimator thread 0... [ 88.449555][ T5785] Bluetooth: hci1: command tx timeout [ 88.456145][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.467226][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.477468][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.488054][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.498053][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.508940][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.519401][ T5785] Bluetooth: hci2: command tx timeout [ 88.525523][ T5840] IPVS: using max 17 ests per chain, 40800 per kthread [ 88.537090][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.561478][ T5841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6'. [ 88.588672][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.602569][ T5785] Bluetooth: hci3: command tx timeout [ 88.609790][ T5785] Bluetooth: hci0: command tx timeout [ 88.616080][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.626415][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.638024][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.648103][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.658855][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.671456][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.683143][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.692086][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.726208][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.734993][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.751084][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.762784][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.042890][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.065905][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.088784][ T5848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 89.164373][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.192268][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.252148][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.271430][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.311223][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.335957][ T5852] syzkaller0: entered promiscuous mode [ 89.341534][ T5852] syzkaller0: entered allmulticast mode [ 89.354308][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.872361][ T5859] syzkaller0: entered promiscuous mode [ 89.882097][ T5859] syzkaller0: entered allmulticast mode [ 90.090311][ T5874] syzkaller0: entered promiscuous mode [ 90.100901][ T5874] syzkaller0: entered allmulticast mode [ 90.525996][ T5086] Bluetooth: hci1: command tx timeout [ 90.607612][ T5086] Bluetooth: hci2: command tx timeout [ 90.689335][ T5086] Bluetooth: hci3: command tx timeout [ 91.952463][ T969] IPVS: starting estimator thread 0... [ 92.079109][ T5889] IPVS: using max 17 ests per chain, 40800 per kthread [ 92.329695][ T9] cfg80211: failed to load regulatory.db [ 93.401467][ T5892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16'. [ 93.534369][ T5895] syzkaller0: entered promiscuous mode [ 93.557269][ T5895] syzkaller0: entered allmulticast mode [ 93.775142][ T5904] Zero length message leads to an empty skb [ 96.313320][ T5927] tipc: Started in network mode [ 96.318868][ T5927] tipc: Node identity ac14140f, cluster identity 4711 [ 96.327753][ T5927] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 96.335086][ T5927] tipc: Enabled bearer , priority 10 [ 96.466865][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 96.605477][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 96.739290][ T5972] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 65, id = 0 [ 96.749169][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 96.759404][ T5965] syzkaller0: entered promiscuous mode [ 96.762673][ T5969] netlink: 40 bytes leftover after parsing attributes in process `syz.3.38'. [ 96.784222][ T5965] syzkaller0: entered allmulticast mode [ 96.885605][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 97.025430][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 97.110673][ T23] IPVS: starting estimator thread 0... [ 97.137805][ T5981] tipc: Started in network mode [ 97.142779][ T5981] tipc: Node identity ac14140f, cluster identity 4711 [ 97.165535][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 97.186866][ T5981] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 97.193984][ T5981] tipc: Enabled bearer , priority 10 [ 97.229357][ T5982] IPVS: using max 23 ests per chain, 55200 per kthread [ 97.305374][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 97.314187][ T5984] TC_ACT_REPEAT abuse ? [ 97.683690][ T969] tipc: Node number set to 2886997007 [ 98.374093][ T6022] netlink: 40 bytes leftover after parsing attributes in process `syz.1.54'. [ 99.713253][ T969] tipc: Node number set to 2886997007 [ 99.865533][ T6028] tipc: Started in network mode [ 99.888827][ T6028] tipc: Node identity ac14140f, cluster identity 4711 [ 99.906777][ T6028] tipc: Enabled bearer , priority 10 [ 100.017821][ T6032] syzkaller0: entered promiscuous mode [ 100.023421][ T6032] syzkaller0: entered allmulticast mode [ 100.620885][ T6059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.63'. [ 100.648134][ T6059] netlink: 32 bytes leftover after parsing attributes in process `syz.0.63'. [ 100.665376][ T6059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.63'. [ 100.693201][ T6059] netlink: 32 bytes leftover after parsing attributes in process `syz.0.63'. [ 100.831395][ T6064] syzkaller0: entered promiscuous mode [ 100.838677][ T6064] syzkaller0: entered allmulticast mode [ 100.847034][ T6065] tipc: Enabling of bearer rejected, already enabled [ 100.990732][ T6067] [ 100.993279][ T6067] ============================= [ 100.999213][ T6067] WARNING: suspicious RCU usage [ 101.004269][ T6067] syzkaller #0 Not tainted [ 101.009016][ T6067] ----------------------------- [ 101.013918][ T6067] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 101.022491][ T6067] [ 101.022491][ T6067] other info that might help us debug this: [ 101.022491][ T6067] [ 101.033059][ T6067] [ 101.033059][ T6067] rcu_scheduler_active = 2, debug_locks = 1 [ 101.041297][ T6067] 1 lock held by syz.1.70/6067: [ 101.046352][ T6067] #0: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 101.055523][ T6067] [ 101.055523][ T6067] stack backtrace: [ 101.061505][ T6067] CPU: 0 PID: 6067 Comm: syz.1.70 Not tainted syzkaller #0 [ 101.068766][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 101.078900][ T6067] Call Trace: [ 101.082265][ T6067] [ 101.085271][ T6067] dump_stack_lvl+0x18c/0x250 [ 101.090543][ T6067] ? show_regs_print_info+0x20/0x20 [ 101.095799][ T6067] ? load_image+0x420/0x420 [ 101.100371][ T6067] lockdep_rcu_suspicious+0x1e1/0x300 [ 101.105825][ T6067] ieee80211_check_concurrent_iface+0x475/0x950 [ 101.112141][ T6067] ieee80211_open+0xc1/0x200 [ 101.116777][ T6067] __dev_open+0x2cb/0x430 [ 101.121152][ T6067] ? dev_open+0x190/0x190 [ 101.125628][ T6067] __dev_change_flags+0x211/0x6a0 [ 101.130710][ T6067] ? dev_get_flags+0x1c0/0x1c0 [ 101.135532][ T6067] ? mutex_lock_nested+0x20/0x20 [ 101.140611][ T6067] dev_change_flags+0x88/0x1a0 [ 101.145445][ T6067] dev_ioctl+0x7b4/0x1140 [ 101.149910][ T6067] sock_do_ioctl+0x239/0x310 [ 101.154624][ T6067] ? sock_show_fdinfo+0xb0/0xb0 [ 101.159881][ T6067] sock_ioctl+0x5ba/0x7e0 [ 101.164269][ T6067] ? sock_poll+0x3e0/0x3e0 [ 101.168769][ T6067] ? bpf_lsm_file_ioctl+0x9/0x10 [ 101.173945][ T6067] ? security_file_ioctl+0x80/0xa0 [ 101.179099][ T6067] ? sock_poll+0x3e0/0x3e0 [ 101.183575][ T6067] __se_sys_ioctl+0xfd/0x170 [ 101.188223][ T6067] do_syscall_64+0x55/0xa0 [ 101.192682][ T6067] ? clear_bhb_loop+0x40/0x90 [ 101.197425][ T6067] ? clear_bhb_loop+0x40/0x90 [ 101.202357][ T6067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.208294][ T6067] RIP: 0033:0x7f4e91b9c819 [ 101.212767][ T6067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.232419][ T6067] RSP: 002b:00007f4e929f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.240893][ T6067] RAX: ffffffffffffffda RBX: 00007f4e91e15fa0 RCX: 00007f4e91b9c819 [ 101.248929][ T6067] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000007 [ 101.257077][ T6067] RBP: 00007f4e91c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 101.265163][ T6067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.273402][ T6067] R13: 00007f4e91e16038 R14: 00007f4e91e15fa0 R15: 00007ffd9638d538 [ 101.281515][ T6067] [ 101.311497][ T5761] tipc: Node number set to 2886997007 [ 101.635492][ C1] net_ratelimit: 15 callbacks suppressed [ 101.635512][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 101.715541][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 102.675385][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 102.755487][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 103.715414][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 103.795652][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 104.755388][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 104.835493][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 105.805399][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 105.875542][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 106.835395][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 106.915462][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 107.875426][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 107.955539][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 108.916018][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 108.995486][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 109.955417][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 110.035479][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available