last executing test programs: 883.910278ms ago: executing program 0 (id=71): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x38, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0xcb}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_FLAGS={0x8, 0x8, 0x311}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010100}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x38}}, 0x0) 882.42525ms ago: executing program 3 (id=72): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x6}]}) write$ppp(r0, &(0x7f0000000480)='3I', 0x2) 828.448327ms ago: executing program 1 (id=74): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, 0x0, 0x0) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1d, r1, 0x0, {0x2, 0x0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x805}, 0x88d4) 777.860121ms ago: executing program 4 (id=76): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) 776.611577ms ago: executing program 0 (id=77): getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000004c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x1, 0xfffff00c}, {0x20, 0x0, 0x0, 0xdffff010}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) 722.662143ms ago: executing program 1 (id=78): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) 682.151533ms ago: executing program 0 (id=80): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002000000000000000000000008500000027000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x2e, 0x0, &(0x7f0000000280)="f525690f58114cb0293a65be63928457af71b7ffb3ac69868ec3eec2c0b70c34d72bb2df926ea4a6866ac26523f9", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 671.174482ms ago: executing program 1 (id=81): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="db", 0x1}], 0x1}}], 0x1, 0x4000000) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000180)="0cc2d602b6562d911b6a596d9b", 0xd}, {&(0x7f0000000240)="8e26a017a5577893c0e231c7c330a22e", 0x10}, {&(0x7f00000038c0)="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", 0xc24}], 0x3) 658.965481ms ago: executing program 3 (id=82): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff"], 0x0) 583.036592ms ago: executing program 2 (id=83): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000004) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}, {0xe}}}, 0x24}}, 0x0) 582.37828ms ago: executing program 0 (id=84): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 581.830155ms ago: executing program 4 (id=85): syz_emit_ethernet(0x4a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000400)={0x0, 0xe, 0x20, 0x2, 0xff}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 567.878549ms ago: executing program 1 (id=86): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0xdb, &(0x7f0000000700)=""/219, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 503.770925ms ago: executing program 0 (id=87): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='contention_end\x00', r1}, 0x18) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x9, [0xa5a, 0x0, 0x1, 0x3, 0x7]}) 502.409437ms ago: executing program 2 (id=88): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, 0x0, 0x0) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1d, r1, 0x0, {0x2, 0x0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x805}, 0x88d4) 438.281646ms ago: executing program 1 (id=89): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r1, 0x1, 0x2, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x359}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008c0}, 0x50) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) r4 = socket(0x1f, 0x6, 0xa) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f0000000100)=@sco={0x1f, @none}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="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", 0xff}], 0x1, &(0x7f0000000380)=[{0x100, 0x118, 0x7, "a926a6ef7ebb1c51fd567da97ea755673ed86500fda41d22f14a5c984e9d07aa46a777872c5251f215c369e6b32cb36b3c8e9fda97934dad0fc9aee4f51fa0db8afe804d5cdb23deaf657b2bcfa3592854df8f59651d8ba202145667194b6cd694c4a47be25b6d13e6cbd2279780a4b8d62e52b2e737f90eda228fd2a13afdc31105cc0df3ed510515c4a85dacb47ebbd79df9833d6a563ad5a4e346bc490d9271ca1c309f717beeae79471e50cec8321f708cda1f20ceca10ff5338cc293f58f1310136ff6b6ca7f471a736d55fae28b6a9a5de423aeea6c4bac49a84b86542899199b6ac9f9f80ca"}], 0x100}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0xd4, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x81}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xe}, @CTA_PROTOINFO_DCCP_STATE={0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xc}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x200}]}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}]}, 0xd4}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0x3, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xc, 0x8, 0x3, 0xfffff312, 0xd21e, 0xfffffffb}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x55}, 0x4004040) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 437.759333ms ago: executing program 3 (id=90): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x66f, @remote, 0x1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000290000003200"], 0x18}}], 0x1, 0x4000010) 437.450364ms ago: executing program 2 (id=91): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) 381.123347ms ago: executing program 2 (id=92): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x6}]}) write$ppp(r0, &(0x7f0000000480)='3I', 0x2) 334.495071ms ago: executing program 3 (id=93): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0xfc0, 0x0, 0x11, 0x0, 0x21, 0x0, @dev, @broadcast}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "50726483718ba3e6d08f7571cc59e627d3ed353e879da15784c220746fc2eba11f56fe932b544f53b43a34b265bd5d44fd38791b56b3b8767c382bc52ee2b8fcbbd661f151afd5315d5f502920c297a3916d7ea039eb558ebb06336662367e15363058de9b806035d5c980832248d1fc96c6b2fb2a4dffa91026dd0228974f70bea2a8e3fe0c9aae345d6e19f211b834f1"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "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"}, {}, {}, {0x8, 0x6558, 0xfffffffd, "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"}}}}}, 0xfce) 332.718736ms ago: executing program 4 (id=94): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002000000000000000000000008500000027000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x2e, 0x0, &(0x7f0000000280)="f525690f58114cb0293a65be63928457af71b7ffb3ac69868ec3eec2c0b70c34d72bb2df926ea4a6866ac26523f9", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 268.163699ms ago: executing program 4 (id=95): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x12, 0x0, &(0x7f0000000540)="e02742e80f1c335a9782762f88a8c47e2a38", 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 234.495284ms ago: executing program 1 (id=96): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) sendmsg$nl_route(r1, 0x0, 0x24008000) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x408d4) syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) 168.810738ms ago: executing program 4 (id=97): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) listen(r0, 0x3ff) 167.634192ms ago: executing program 2 (id=98): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000240)='x', 0xfc1c, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) 94.580028ms ago: executing program 3 (id=99): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000004) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}, {0xe}}}, 0x24}}, 0x0) 94.221864ms ago: executing program 0 (id=100): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0xdb, &(0x7f0000000700)=""/219, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 80.29061ms ago: executing program 4 (id=101): syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) 31.842567ms ago: executing program 2 (id=102): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) 0s ago: executing program 3 (id=103): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x66f, @remote, 0x1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000290000003200"], 0x18}}], 0x1, 0x4000010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts. [ 36.237348][ T6506] cgroup: Unknown subsys name 'net' [ 36.361909][ T6506] cgroup: Unknown subsys name 'cpuset' [ 36.365639][ T6506] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 36.571044][ T6506] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 38.843455][ T6519] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.846380][ T6519] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.849302][ T6519] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.851888][ T6519] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.855043][ T6519] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.857633][ T6519] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.860748][ T6519] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.863687][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.865905][ T6522] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.875105][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.887311][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.898219][ T6085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 38.898741][ T6085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.902018][ T6522] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.902737][ T6522] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.904170][ T6522] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.908200][ T6518] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.908892][ T6518] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.914786][ T6518] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 38.917713][ T6518] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.918718][ T6518] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.919129][ T6518] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.920288][ T6518] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 38.927670][ T6518] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 38.948040][ T6518] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 39.243915][ T6516] chnl_net:caif_netlink_parms(): no params data found [ 39.301335][ T6524] chnl_net:caif_netlink_parms(): no params data found [ 39.309778][ T6523] chnl_net:caif_netlink_parms(): no params data found [ 39.442524][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.444810][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.447050][ T6516] bridge_slave_0: entered allmulticast mode [ 39.449119][ T6516] bridge_slave_0: entered promiscuous mode [ 39.457046][ T6525] chnl_net:caif_netlink_parms(): no params data found [ 39.469196][ T6524] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.471350][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.473467][ T6524] bridge_slave_0: entered allmulticast mode [ 39.475905][ T6524] bridge_slave_0: entered promiscuous mode [ 39.477703][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.477878][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.478017][ T6516] bridge_slave_1: entered allmulticast mode [ 39.481580][ T6516] bridge_slave_1: entered promiscuous mode [ 39.504622][ T6524] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.504715][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.504836][ T6524] bridge_slave_1: entered allmulticast mode [ 39.505733][ T6524] bridge_slave_1: entered promiscuous mode [ 39.539387][ T6523] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.541542][ T6523] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.543971][ T6523] bridge_slave_0: entered allmulticast mode [ 39.546762][ T6523] bridge_slave_0: entered promiscuous mode [ 39.548501][ T6523] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.548548][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.548660][ T6523] bridge_slave_1: entered allmulticast mode [ 39.549624][ T6523] bridge_slave_1: entered promiscuous mode [ 39.561671][ T6516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.565583][ T6517] chnl_net:caif_netlink_parms(): no params data found [ 39.573322][ T6524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.593758][ T6516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.612748][ T6524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.623922][ T6523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.663120][ T6523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.689420][ T6524] team0: Port device team_slave_0 added [ 39.693031][ T6524] team0: Port device team_slave_1 added [ 39.716129][ T6516] team0: Port device team_slave_0 added [ 39.723613][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.723722][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.723838][ T6525] bridge_slave_0: entered allmulticast mode [ 39.724732][ T6525] bridge_slave_0: entered promiscuous mode [ 39.742884][ T6523] team0: Port device team_slave_0 added [ 39.746035][ T6516] team0: Port device team_slave_1 added [ 39.757492][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.758772][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.758893][ T6525] bridge_slave_1: entered allmulticast mode [ 39.759788][ T6525] bridge_slave_1: entered promiscuous mode [ 39.770696][ T6524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.772417][ T6524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.772462][ T6524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.774310][ T6524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.774338][ T6524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.774374][ T6524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.798846][ T6523] team0: Port device team_slave_1 added [ 39.821677][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.821744][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.821781][ T6516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.822870][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.822899][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.822931][ T6516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.866085][ T6523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.866142][ T6523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.866179][ T6523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.867293][ T6523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.867319][ T6523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.867352][ T6523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.886759][ T6516] hsr_slave_0: entered promiscuous mode [ 39.887409][ T6516] hsr_slave_1: entered promiscuous mode [ 39.890500][ T6525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.897081][ T6525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.919093][ T6524] hsr_slave_0: entered promiscuous mode [ 39.919687][ T6524] hsr_slave_1: entered promiscuous mode [ 39.920041][ T6524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.920139][ T6524] Cannot create hsr debugfs directory [ 39.941699][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.943901][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.946112][ T6517] bridge_slave_0: entered allmulticast mode [ 39.949391][ T6517] bridge_slave_0: entered promiscuous mode [ 39.950834][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.950886][ T6517] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.950993][ T6517] bridge_slave_1: entered allmulticast mode [ 39.951943][ T6517] bridge_slave_1: entered promiscuous mode [ 39.964641][ T6523] hsr_slave_0: entered promiscuous mode [ 39.965329][ T6523] hsr_slave_1: entered promiscuous mode [ 39.965831][ T6523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.965863][ T6523] Cannot create hsr debugfs directory [ 39.979743][ T6525] team0: Port device team_slave_0 added [ 40.006742][ T6525] team0: Port device team_slave_1 added [ 40.022135][ T6517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.056172][ T6517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.112966][ T6517] team0: Port device team_slave_0 added [ 40.113522][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.113547][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.113586][ T6525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.118595][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.118627][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.118673][ T6525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.155948][ T6517] team0: Port device team_slave_1 added [ 40.171024][ T6525] hsr_slave_0: entered promiscuous mode [ 40.173385][ T6525] hsr_slave_1: entered promiscuous mode [ 40.175443][ T6525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.177837][ T6525] Cannot create hsr debugfs directory [ 40.253746][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.256078][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.258048][ T6517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.287475][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.289717][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.292608][ T6517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.388969][ T6517] hsr_slave_0: entered promiscuous mode [ 40.391849][ T6517] hsr_slave_1: entered promiscuous mode [ 40.392980][ T6517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.393012][ T6517] Cannot create hsr debugfs directory [ 40.487004][ T6516] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.492577][ T6516] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.506496][ T6516] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.529633][ T6516] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.540135][ T6523] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.552785][ T6523] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.557478][ T6523] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.571181][ T6523] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.610721][ T6524] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.617165][ T6524] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.624385][ T6524] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.629525][ T6524] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.684886][ T6525] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.705079][ T6525] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.709857][ T6525] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.730398][ T6516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.732706][ T6525] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.770622][ T6517] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.772550][ T6517] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.774669][ T6517] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.793086][ T6517] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.823521][ T6516] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.843428][ T6524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.848799][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.848942][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.850184][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.850232][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.884686][ T6524] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.891848][ T6523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.897658][ T6516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.915125][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.915242][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.916460][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.916522][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.935000][ T6523] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.941320][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.941413][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.958673][ T6518] Bluetooth: hci2: command tx timeout [ 40.959709][ T6518] Bluetooth: hci0: command tx timeout [ 40.959814][ T6518] Bluetooth: hci3: command tx timeout [ 40.964677][ T52] Bluetooth: hci1: command tx timeout [ 40.970286][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.970361][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.993795][ T6525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.006736][ T6525] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.037934][ T52] Bluetooth: hci4: command tx timeout [ 41.045542][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.045645][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.060495][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.060602][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.080969][ T6525] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.084395][ T6525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.137984][ T6523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.155887][ T6517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.179693][ T6516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.235470][ T6516] veth0_vlan: entered promiscuous mode [ 41.246161][ T6517] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.252600][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.252700][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.261351][ T2239] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.261437][ T2239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.276111][ T6516] veth1_vlan: entered promiscuous mode [ 41.292756][ T6525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.338850][ T6524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.347026][ T6523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.380142][ T6516] veth0_macvtap: entered promiscuous mode [ 41.395291][ T6516] veth1_macvtap: entered promiscuous mode [ 41.406175][ T6525] veth0_vlan: entered promiscuous mode [ 41.415367][ T6524] veth0_vlan: entered promiscuous mode [ 41.426363][ T6524] veth1_vlan: entered promiscuous mode [ 41.439356][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.440527][ T6525] veth1_vlan: entered promiscuous mode [ 41.451688][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.464046][ T6516] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.466803][ T6516] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.470377][ T6516] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.472940][ T6516] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.493829][ T6523] veth0_vlan: entered promiscuous mode [ 41.499376][ T6523] veth1_vlan: entered promiscuous mode [ 41.524199][ T6525] veth0_macvtap: entered promiscuous mode [ 41.562919][ T6525] veth1_macvtap: entered promiscuous mode [ 41.594941][ T6523] veth0_macvtap: entered promiscuous mode [ 41.599517][ T6523] veth1_macvtap: entered promiscuous mode [ 41.617406][ T6524] veth0_macvtap: entered promiscuous mode [ 41.620574][ T6524] veth1_macvtap: entered promiscuous mode [ 41.632965][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.635026][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.636569][ T6525] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.636611][ T6525] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.636642][ T6525] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.636680][ T6525] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.654207][ T6523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.661357][ T6523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.666927][ T6524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.683146][ T6524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.687321][ T6523] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.690700][ T6523] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.693325][ T6523] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.695948][ T6523] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.701446][ T2239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.701552][ T2239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.729623][ T6524] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.732495][ T6524] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.734043][ T6524] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.734077][ T6524] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.794086][ T188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.794156][ T188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.810621][ T505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.810686][ T505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.865818][ T6517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.870412][ T505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.870497][ T505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.903209][ T505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.903274][ T505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.915558][ T6516] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.957199][ T188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.962860][ T188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.997344][ T188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.997412][ T188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.016082][ T237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.016159][ T237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.182199][ T6634] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6'. [ 42.319948][ T6630] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 42.330915][ T6517] veth0_vlan: entered promiscuous mode [ 42.349553][ T6630] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4'. [ 42.356031][ T6517] veth1_vlan: entered promiscuous mode [ 42.370589][ T6644] tipc: Started in network mode [ 42.370694][ T6644] tipc: Node identity 82b0790a78ad, cluster identity 4711 [ 42.370838][ T6644] tipc: Enabled bearer , priority 0 [ 42.415775][ T6644] syzkaller0: entered promiscuous mode [ 42.415859][ T6644] syzkaller0: entered allmulticast mode [ 42.429846][ T6644] tipc: Resetting bearer [ 42.513147][ T6642] tipc: Resetting bearer [ 42.574357][ T6651] netlink: 'syz.0.9': attribute type 1 has an invalid length. [ 43.038135][ T6522] Bluetooth: hci3: command tx timeout [ 43.038211][ T6522] Bluetooth: hci2: command tx timeout [ 43.041957][ T52] Bluetooth: hci1: command tx timeout [ 43.052937][ T6653] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11'. [ 43.055728][ T6653] Bluetooth: MGMT ver 1.23 [ 43.118029][ T52] Bluetooth: hci4: command tx timeout [ 43.488822][ T26] tipc: Node number set to 4196235530 [ 45.118587][ T52] Bluetooth: hci1: command tx timeout [ 45.118672][ T6518] Bluetooth: hci2: command tx timeout [ 45.118685][ T52] Bluetooth: hci3: command tx timeout [ 45.197957][ T6522] Bluetooth: hci4: command tx timeout [ 47.198666][ T6522] Bluetooth: hci3: command tx timeout [ 47.198744][ T6522] Bluetooth: hci2: command tx timeout [ 47.198807][ T6522] Bluetooth: hci1: command tx timeout [ 47.277984][ T6518] Bluetooth: hci4: command tx timeout [ 53.750531][ T6642] tipc: Disabling bearer [ 53.784859][ T6517] veth0_macvtap: entered promiscuous mode [ 53.788759][ T6517] veth1_macvtap: entered promiscuous mode [ 53.892823][ T6655] dvmrp8: entered allmulticast mode [ 53.897107][ T6655] dvmrp8: left allmulticast mode [ 53.902423][ T6669] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.991224][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.995765][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.024117][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 54.034318][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 54.039880][ T6517] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.042526][ T6517] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.045531][ T6517] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.048283][ T6517] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.273083][ T188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.273601][ T188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.352864][ T6685] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 54.470027][ T6685] netlink: 'syz.0.21': attribute type 1 has an invalid length. [ 54.470152][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 54.505439][ T237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.505521][ T237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.550830][ T6701] netlink: 'syz.1.26': attribute type 1 has an invalid length. [ 54.582654][ T6701] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 54.594546][ T6701] batman_adv: batadv0: Adding interface: gretap1 [ 54.598788][ T6701] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 54.614722][ T6702] syz.2.25 uses obsolete (PF_INET,SOCK_PACKET) [ 54.755520][ T6709] netlink: 'syz.4.29': attribute type 1 has an invalid length. [ 54.897572][ T6713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.30'. [ 55.383942][ T6741] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input2 [ 55.999187][ T6782] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 56.009441][ T11] IPVS: starting estimator thread 0... [ 56.098694][ T6790] IPVS: using max 33 ests per chain, 79200 per kthread [ 56.708941][ T6853] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 57.086884][ T6882] ------------[ cut here ]------------ [ 57.086978][ T6882] memcpy: detected field-spanning write (size 20) of single field "pfx->in6_u.u6_addr8" at ./include/net/ipv6.h:614 (size 16) [ 57.087634][ T6882] WARNING: CPU: 0 PID: 6882 at ./include/net/ipv6.h:614 ipv6_addr_prefix+0x130/0x1dc [ 57.095667][ T6882] Modules linked in: [ 57.096753][ T6882] CPU: 0 UID: 0 PID: 6882 Comm: syz.4.101 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 57.099924][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.102774][ T6882] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 57.104964][ T6882] pc : ipv6_addr_prefix+0x130/0x1dc [ 57.106443][ T6882] lr : ipv6_addr_prefix+0x130/0x1dc [ 57.108012][ T6882] sp : ffff8000a4226820 [ 57.109194][ T6882] x29: ffff8000a4226820 x28: dfff800000000000 x27: 1ffff00014844d2b [ 57.111435][ T6882] x26: 1ffff00014844d2a x25: dfff800000000000 x24: 0000000000000002 [ 57.113721][ T6882] x23: ffff800092c10000 x22: ffff8000a4226964 x21: 0000000000000007 [ 57.115990][ T6882] x20: 0000000000000014 x19: ffff0000f7ee3450 x18: 00000000ffffffff [ 57.118284][ T6882] x17: 20646c6569662065 x16: ffff80008ae31308 x15: ffff700011ed61d4 [ 57.120597][ T6882] x14: 1ffff00011ed61d4 x13: 0000000000000004 x12: ffffffffffffffff [ 57.122863][ T6882] x11: 0000000000080000 x10: 0000000000003e77 x9 : 6944d44e00634c00 [ 57.125176][ T6882] x8 : 6944d44e00634c00 x7 : 0000000000000001 x6 : 0000000000000001 [ 57.127541][ T6882] x5 : ffff8000a4226178 x4 : ffff80008f727060 x3 : ffff80008054db48 [ 57.129831][ T6882] x2 : 0000000000000000 x1 : 0000000000000200 x0 : 0000000000000000 [ 57.132121][ T6882] Call trace: [ 57.133036][ T6882] ipv6_addr_prefix+0x130/0x1dc (P) [ 57.134497][ T6882] ip6_route_info_create+0x3c8/0x718 [ 57.136033][ T6882] ip6_route_add+0x38/0x1bc [ 57.137311][ T6882] addrconf_prefix_route+0x1d4/0x278 [ 57.138769][ T6882] addrconf_prefix_rcv+0x4c8/0x1130 [ 57.140260][ T6882] ndisc_router_discovery+0x184c/0x2b64 [ 57.141803][ T6882] ndisc_rcv+0x3e8/0x5fc [ 57.143048][ T6882] icmpv6_rcv+0xffc/0x1888 [ 57.144280][ T6882] ip6_protocol_deliver_rcu+0x9a4/0x12d4 [ 57.145876][ T6882] ip6_input_finish+0xd8/0x17c [ 57.147203][ T6882] NF_HOOK+0x2c4/0x358 [ 57.148423][ T6882] ip6_input+0x15c/0x270 [ 57.149676][ T6882] ip6_mc_input+0x708/0xa8c [ 57.151074][ T6882] ip6_rcv_finish+0x1f0/0x21c [ 57.152396][ T6882] NF_HOOK+0x2c4/0x358 [ 57.153528][ T6882] ipv6_rcv+0x9c/0xbc [ 57.154656][ T6882] __netif_receive_skb+0xcc/0x2a8 [ 57.156143][ T6882] netif_receive_skb+0x1e0/0x838 [ 57.157689][ T6882] tun_rx_batched+0x478/0x5b4 [ 57.159011][ T6882] tun_get_user+0x2040/0x31dc [ 57.160449][ T6882] tun_chr_write_iter+0xfc/0x204 [ 57.161905][ T6882] vfs_write+0x62c/0x97c [ 57.163110][ T6882] ksys_write+0x120/0x210 [ 57.164375][ T6882] __arm64_sys_write+0x7c/0x90 [ 57.165840][ T6882] invoke_syscall+0x98/0x2b8 [ 57.167193][ T6882] el0_svc_common+0x130/0x23c [ 57.168586][ T6882] do_el0_svc+0x48/0x58 [ 57.169779][ T6882] el0_svc+0x58/0x17c [ 57.170891][ T6882] el0t_64_sync_handler+0x78/0x108 [ 57.172362][ T6882] el0t_64_sync+0x198/0x19c [ 57.173646][ T6882] irq event stamp: 181 [ 57.174888][ T6882] hardirqs last enabled at (180): [] __console_unlock+0x70/0xc4 [ 57.177616][ T6882] hardirqs last disabled at (181): [] el1_dbg+0x24/0x80 [ 57.180096][ T6882] softirqs last enabled at (66): [] local_bh_enable+0x10/0x34 [ 57.182812][ T6882] softirqs last disabled at (68): [] local_bh_disable+0x10/0x34 [ 57.185521][ T6882] ---[ end trace 0000000000000000 ]--- [ 57.187227][ T6882] ------------[ cut here ]------------ [ 57.187277][ T6882] UBSAN: array-index-out-of-bounds in ./include/net/ipv6.h:616:21 [ 57.187307][ T6882] index 20 is out of range for type 'const __u8[16]' (aka 'const unsigned char[16]') [ 57.187337][ T6882] CPU: 0 UID: 0 PID: 6882 Comm: syz.4.101 Tainted: G W 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 57.187356][ T6882] Tainted: [W]=WARN [ 57.187360][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.187367][ T6882] Call trace: [ 57.187371][ T6882] show_stack+0x2c/0x3c (C) [ 57.187392][ T6882] __dump_stack+0x30/0x40 [ 57.187407][ T6882] dump_stack_lvl+0xd8/0x12c [ 57.187421][ T6882] dump_stack+0x1c/0x28 [ 57.187435][ T6882] ubsan_epilogue+0x14/0x48 [ 57.187448][ T6882] __ubsan_handle_out_of_bounds+0xd0/0xfc [ 57.187464][ T6882] ipv6_addr_prefix+0x158/0x1dc [ 57.187478][ T6882] ip6_route_info_create+0x3c8/0x718 [ 57.187504][ T6882] ip6_route_add+0x38/0x1bc [ 57.187517][ T6882] addrconf_prefix_route+0x1d4/0x278 [ 57.187533][ T6882] addrconf_prefix_rcv+0x4c8/0x1130 [ 57.187547][ T6882] ndisc_router_discovery+0x184c/0x2b64 [ 57.187561][ T6882] ndisc_rcv+0x3e8/0x5fc [ 57.187573][ T6882] icmpv6_rcv+0xffc/0x1888 [ 57.187584][ T6882] ip6_protocol_deliver_rcu+0x9a4/0x12d4 [ 57.187599][ T6882] ip6_input_finish+0xd8/0x17c [ 57.187612][ T6882] NF_HOOK+0x2c4/0x358 [ 57.187625][ T6882] ip6_input+0x15c/0x270 [ 57.187639][ T6882] ip6_mc_input+0x708/0xa8c [ 57.187652][ T6882] ip6_rcv_finish+0x1f0/0x21c [ 57.187666][ T6882] NF_HOOK+0x2c4/0x358 [ 57.187679][ T6882] ipv6_rcv+0x9c/0xbc [ 57.187691][ T6882] __netif_receive_skb+0xcc/0x2a8 [ 57.187706][ T6882] netif_receive_skb+0x1e0/0x838 [ 57.187739][ T6882] tun_rx_batched+0x478/0x5b4 [ 57.187752][ T6882] tun_get_user+0x2040/0x31dc [ 57.187763][ T6882] tun_chr_write_iter+0xfc/0x204 [ 57.187773][ T6882] vfs_write+0x62c/0x97c [ 57.187790][ T6882] ksys_write+0x120/0x210 [ 57.187804][ T6882] __arm64_sys_write+0x7c/0x90 [ 57.187818][ T6882] invoke_syscall+0x98/0x2b8 [ 57.187832][ T6882] el0_svc_common+0x130/0x23c [ 57.187847][ T6882] do_el0_svc+0x48/0x58 [ 57.187861][ T6882] el0_svc+0x58/0x17c [ 57.187874][ T6882] el0t_64_sync_handler+0x78/0x108 [ 57.187886][ T6882] el0t_64_sync+0x198/0x19c [ 57.188136][ T6882] ---[ end trace ]--- [ 57.188162][ T6882] ------------[ cut here ]------------ [ 57.188184][ T6882] UBSAN: array-index-out-of-bounds in ./include/net/ipv6.h:616:3 [ 57.188211][ T6882] index 20 is out of range for type '__u8[16]' (aka 'unsigned char[16]') [ 57.188238][ T6882] CPU: 0 UID: 0 PID: 6882 Comm: syz.4.101 Tainted: G W 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 57.188256][ T6882] Tainted: [W]=WARN [ 57.188260][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.188266][ T6882] Call trace: [ 57.188270][ T6882] show_stack+0x2c/0x3c (C) [ 57.188285][ T6882] __dump_stack+0x30/0x40 [ 57.188299][ T6882] dump_stack_lvl+0xd8/0x12c [ 57.188313][ T6882] dump_stack+0x1c/0x28 [ 57.188327][ T6882] ubsan_epilogue+0x14/0x48 [ 57.188340][ T6882] __ubsan_handle_out_of_bounds+0xd0/0xfc [ 57.188354][ T6882] ipv6_addr_prefix+0x188/0x1dc [ 57.188367][ T6882] ip6_route_info_create+0x3c8/0x718 [ 57.188380][ T6882] ip6_route_add+0x38/0x1bc [ 57.188393][ T6882] addrconf_prefix_route+0x1d4/0x278 [ 57.188408][ T6882] addrconf_prefix_rcv+0x4c8/0x1130 [ 57.188423][ T6882] ndisc_router_discovery+0x184c/0x2b64 [ 57.188436][ T6882] ndisc_rcv+0x3e8/0x5fc [ 57.188448][ T6882] icmpv6_rcv+0xffc/0x1888 [ 57.188458][ T6882] ip6_protocol_deliver_rcu+0x9a4/0x12d4 [ 57.188472][ T6882] ip6_input_finish+0xd8/0x17c [ 57.188496][ T6882] NF_HOOK+0x2c4/0x358 [ 57.188509][ T6882] ip6_input+0x15c/0x270 [ 57.188522][ T6882] ip6_mc_input+0x708/0xa8c [ 57.188536][ T6882] ip6_rcv_finish+0x1f0/0x21c [ 57.188549][ T6882] NF_HOOK+0x2c4/0x358 [ 57.188563][ T6882] ipv6_rcv+0x9c/0xbc [ 57.188575][ T6882] __netif_receive_skb+0xcc/0x2a8 [ 57.188589][ T6882] netif_receive_skb+0x1e0/0x838 [ 57.188603][ T6882] tun_rx_batched+0x478/0x5b4 [ 57.188614][ T6882] tun_get_user+0x2040/0x31dc [ 57.188625][ T6882] tun_chr_write_iter+0xfc/0x204 [ 57.188636][ T6882] vfs_write+0x62c/0x97c [ 57.188650][ T6882] ksys_write+0x120/0x210 [ 57.188663][ T6882] __arm64_sys_write+0x7c/0x90 [ 57.188677][ T6882] invoke_syscall+0x98/0x2b8 [ 57.188692][ T6882] el0_svc_common+0x130/0x23c [ 57.188706][ T6882] do_el0_svc+0x48/0x58 [ 57.188726][ T6882] el0_svc+0x58/0x17c [ 57.188738][ T6882] el0t_64_sync_handler+0x78/0x108 [ 57.188751][ T6882] el0t_64_sync+0x198/0x19c [ 57.188961][ T6882] ---[ end trace ]--- [ 64.879861][ T2407] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.879982][ T2407] ieee802154 phy1 wpan1: encryption failed: -22