last executing test programs: 4.101465295s ago: executing program 1 (id=414): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 3.616510082s ago: executing program 1 (id=420): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x10, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x60, &(0x7f0000000c00)=ANY=[], 0x0) 3.448997308s ago: executing program 1 (id=425): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff03", 0x2c}], 0x1) 3.255485643s ago: executing program 3 (id=427): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xa, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) syz_emit_ethernet(0x5a, &(0x7f0000000380)={@local, @random='\x00\x00\x00%\x00', @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "cd364c", 0x24, 0x2b, 0x0, @local, @local, {[@hopopts={0x3c}, @dstopts={0x2b}], {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}}}}, 0x0) 3.200102991s ago: executing program 0 (id=428): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) accept(r0, &(0x7f0000000080)=@can, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)="50ce5d", 0x3, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.187633424s ago: executing program 1 (id=429): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r2, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) 3.00606106s ago: executing program 3 (id=432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.918888297s ago: executing program 1 (id=433): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback, 0x10000}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)=ANY=[], 0x8) 2.739898856s ago: executing program 4 (id=435): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000c80)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) 2.651413494s ago: executing program 0 (id=436): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r7, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r8, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r9, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r10, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 2.651122568s ago: executing program 2 (id=437): socket(0x2a, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001000088be"], 0xfdef) 2.594083055s ago: executing program 4 (id=438): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, 0x0, &(0x7f00000006c0)=""/73, 0x4}, 0x20) 2.491590081s ago: executing program 0 (id=439): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff03", 0x2c}], 0x1) 2.339993035s ago: executing program 1 (id=440): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000400000005000000080009000200000008000c00a50a000008000b00000000000600010007dc"], 0x40}}, 0x20) 2.000010272s ago: executing program 0 (id=441): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) read(r0, &(0x7f00000027c0)=""/4073, 0xfe9) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040) 1.999050387s ago: executing program 2 (id=442): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) 1.97550511s ago: executing program 3 (id=443): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="5800000010003904faffffff0000000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000003800128008000100677265002c00028008000400", @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) 1.9748656s ago: executing program 4 (id=444): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0xde9e193c92a470a8, {0x2, 0x4e1f, @broadcast}, 'sit0\x00'}) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000800)="240000001e005f031420654400000000000000000100000001000800080008c01300ff00", 0x24) 1.789586528s ago: executing program 4 (id=445): socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.748007863s ago: executing program 0 (id=446): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast1}}, 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000b, 0xc3072, 0xffffffffffffffff, 0x36cb2000) 1.516626968s ago: executing program 4 (id=447): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0x4d}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x76171c1, @mcast2}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}]}, 0x110) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x800, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000580)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "04c2ad", 0x10, 0x11, 0x0, @private1, @mcast2, {[], {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 1.510261765s ago: executing program 3 (id=448): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000c80)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) 1.288556309s ago: executing program 3 (id=449): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 955.911896ms ago: executing program 2 (id=450): r0 = socket$pptp(0x18, 0x1, 0x2) socket$kcm(0x10, 0x2, 0x0) bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x7fc, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000880)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410072786500140033006c6f00000000000000000000000000002bf3b1417d175791ff2f595dc8a73583096adb867d153132f5cdd7ce8403f0900d5fd70bbfad49f416464d115a28f0129610008fdef62f598b67ea494c701f9127660fd7500b4305746ab0e1757e4a0d17ec4e3ccf55f0f64ad65aec6b7f6ae94b1ad72bb63d922365e886"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000003c0)) 814.84778ms ago: executing program 2 (id=451): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1) 658.681686ms ago: executing program 2 (id=452): socket(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec970200140400fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 641.274321ms ago: executing program 0 (id=453): syz_80211_inject_frame(0x0, &(0x7f0000000000)=ANY=[], 0xb5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 107.918604ms ago: executing program 3 (id=454): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, 0x0, &(0x7f00000006c0)=""/73, 0x4}, 0x20) 4.155973ms ago: executing program 4 (id=455): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a8008000400050000001400020029"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 0s ago: executing program 2 (id=456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.64' (ED25519) to the list of known hosts. [ 91.008034][ T5834] cgroup: Unknown subsys name 'net' [ 91.148911][ T5834] cgroup: Unknown subsys name 'cpuset' [ 91.158698][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.174581][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.195519][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.208178][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.222214][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.235486][ T24] cfg80211: failed to load regulatory.db [ 97.243788][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.255297][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.286776][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.298234][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.309514][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.319798][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.350329][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.361617][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.363450][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.379002][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.387551][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.411314][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.422365][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.431193][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.441432][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.451628][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.462116][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.490714][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.504337][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.516724][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.529496][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.538163][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.132497][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 98.274245][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 98.483792][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 98.531376][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 98.672585][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 98.688633][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.700779][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.718503][ T5845] bridge_slave_0: entered allmulticast mode [ 98.728004][ T5845] bridge_slave_0: entered promiscuous mode [ 98.792825][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.801257][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.810478][ T5845] bridge_slave_1: entered allmulticast mode [ 98.820610][ T5845] bridge_slave_1: entered promiscuous mode [ 98.845923][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.854972][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.867266][ T5851] bridge_slave_0: entered allmulticast mode [ 98.875869][ T5851] bridge_slave_0: entered promiscuous mode [ 98.895011][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.909517][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.918639][ T5851] bridge_slave_1: entered allmulticast mode [ 98.928460][ T5851] bridge_slave_1: entered promiscuous mode [ 99.052746][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.095921][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.105107][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.112958][ T5852] bridge_slave_0: entered allmulticast mode [ 99.121896][ T5852] bridge_slave_0: entered promiscuous mode [ 99.154823][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.205264][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.213423][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.226208][ T5852] bridge_slave_1: entered allmulticast mode [ 99.235216][ T5852] bridge_slave_1: entered promiscuous mode [ 99.254951][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.285500][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.293750][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.303050][ T5850] bridge_slave_0: entered allmulticast mode [ 99.311880][ T5850] bridge_slave_0: entered promiscuous mode [ 99.328526][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.339961][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.349061][ T5850] bridge_slave_1: entered allmulticast mode [ 99.358023][ T5850] bridge_slave_1: entered promiscuous mode [ 99.375670][ T5853] Bluetooth: hci0: command tx timeout [ 99.382394][ T5849] Bluetooth: hci2: command tx timeout [ 99.401027][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.506745][ T5845] team0: Port device team_slave_0 added [ 99.534661][ T5849] Bluetooth: hci3: command tx timeout [ 99.538988][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.542591][ T5849] Bluetooth: hci1: command tx timeout [ 99.567773][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.614576][ T5849] Bluetooth: hci4: command tx timeout [ 99.630982][ T5845] team0: Port device team_slave_1 added [ 99.644260][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.676131][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.684295][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.694029][ T5862] bridge_slave_0: entered allmulticast mode [ 99.703963][ T5862] bridge_slave_0: entered promiscuous mode [ 99.716932][ T5851] team0: Port device team_slave_0 added [ 99.744247][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.791508][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.799997][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.808890][ T5862] bridge_slave_1: entered allmulticast mode [ 99.817035][ T5862] bridge_slave_1: entered promiscuous mode [ 99.844433][ T5851] team0: Port device team_slave_1 added [ 99.869249][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.877825][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.911280][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.946130][ T5852] team0: Port device team_slave_0 added [ 100.003815][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.011925][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.044619][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.071926][ T5850] team0: Port device team_slave_0 added [ 100.082467][ T5850] team0: Port device team_slave_1 added [ 100.092170][ T5852] team0: Port device team_slave_1 added [ 100.116488][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.128454][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.138164][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.167253][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.182893][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.190653][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.222473][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.291980][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.338910][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.347325][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.377157][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.433794][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.441047][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.471277][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.484205][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.493998][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.528320][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.561399][ T5862] team0: Port device team_slave_0 added [ 100.588784][ T5845] hsr_slave_0: entered promiscuous mode [ 100.596505][ T5845] hsr_slave_1: entered promiscuous mode [ 100.605089][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.612078][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.639920][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.663825][ T5862] team0: Port device team_slave_1 added [ 100.677000][ T5851] hsr_slave_0: entered promiscuous mode [ 100.683609][ T5851] hsr_slave_1: entered promiscuous mode [ 100.690003][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.697993][ T5851] Cannot create hsr debugfs directory [ 100.843637][ T5852] hsr_slave_0: entered promiscuous mode [ 100.850717][ T5852] hsr_slave_1: entered promiscuous mode [ 100.858304][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.866830][ T5852] Cannot create hsr debugfs directory [ 100.882956][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.890616][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.919101][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.983545][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.991837][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.029785][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.089355][ T5850] hsr_slave_0: entered promiscuous mode [ 101.096752][ T5850] hsr_slave_1: entered promiscuous mode [ 101.104165][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.117253][ T5850] Cannot create hsr debugfs directory [ 101.389623][ T5862] hsr_slave_0: entered promiscuous mode [ 101.397322][ T5862] hsr_slave_1: entered promiscuous mode [ 101.404977][ T5862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.412985][ T5862] Cannot create hsr debugfs directory [ 101.458800][ T5849] Bluetooth: hci2: command tx timeout [ 101.458813][ T5853] Bluetooth: hci0: command tx timeout [ 101.614939][ T5853] Bluetooth: hci1: command tx timeout [ 101.615006][ T5849] Bluetooth: hci3: command tx timeout [ 101.694589][ T5849] Bluetooth: hci4: command tx timeout [ 101.746916][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.769308][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.813661][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.838350][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.905639][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.927514][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.942350][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.980223][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.070181][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.083028][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.122421][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.136406][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.256678][ T5850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.270777][ T5850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.287163][ T5850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.299651][ T5850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.370270][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.449097][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.487451][ T5862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.500773][ T5862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.518104][ T5862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.535617][ T5862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.587440][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.595398][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.620678][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.651746][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.659919][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.721178][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.753046][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.760533][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.818574][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.825895][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.867003][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.899912][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.002565][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.079020][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.099700][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.107438][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.152189][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.159642][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.205751][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.278034][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.285910][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.298168][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.305944][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.474274][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.494058][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.534670][ T5849] Bluetooth: hci0: command tx timeout [ 103.534764][ T5853] Bluetooth: hci2: command tx timeout [ 103.583784][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.602680][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.657699][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.665050][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.696131][ T5853] Bluetooth: hci3: command tx timeout [ 103.701107][ T5849] Bluetooth: hci1: command tx timeout [ 103.715798][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.723449][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.775380][ T5849] Bluetooth: hci4: command tx timeout [ 103.872922][ T5851] veth0_vlan: entered promiscuous mode [ 103.892747][ T5851] veth1_vlan: entered promiscuous mode [ 103.940786][ T5845] veth0_vlan: entered promiscuous mode [ 104.022982][ T5845] veth1_vlan: entered promiscuous mode [ 104.048670][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.128656][ T5851] veth0_macvtap: entered promiscuous mode [ 104.149679][ T5851] veth1_macvtap: entered promiscuous mode [ 104.251093][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.279407][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.294137][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.316403][ T5845] veth0_macvtap: entered promiscuous mode [ 104.363929][ T5851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.387604][ T5851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.400965][ T5851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.411340][ T5851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.432980][ T5845] veth1_macvtap: entered promiscuous mode [ 104.570099][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.663474][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.683451][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.701339][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.712965][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.725721][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.803176][ T5852] veth0_vlan: entered promiscuous mode [ 104.842173][ T5852] veth1_vlan: entered promiscuous mode [ 104.867332][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.883165][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.961871][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.970149][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.981201][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.063161][ T5852] veth0_macvtap: entered promiscuous mode [ 105.116432][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.131589][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.166441][ T5852] veth1_macvtap: entered promiscuous mode [ 105.177603][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.233208][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.249873][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.253933][ T5850] veth0_vlan: entered promiscuous mode [ 105.330406][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.362426][ T5850] veth1_vlan: entered promiscuous mode [ 105.402105][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.429321][ T5862] veth0_vlan: entered promiscuous mode [ 105.452876][ T5852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.477104][ T5852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.491512][ T5852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.511887][ T5852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.590908][ T5862] veth1_vlan: entered promiscuous mode [ 105.616007][ T5849] Bluetooth: hci0: command tx timeout [ 105.630549][ T5849] Bluetooth: hci2: command tx timeout [ 105.776285][ T5849] Bluetooth: hci3: command tx timeout [ 105.776295][ T5853] Bluetooth: hci1: command tx timeout [ 105.793405][ T5850] veth0_macvtap: entered promiscuous mode [ 105.831812][ T5862] veth0_macvtap: entered promiscuous mode [ 105.844985][ T5850] veth1_macvtap: entered promiscuous mode [ 105.855202][ T5849] Bluetooth: hci4: command tx timeout [ 105.883731][ T5862] veth1_macvtap: entered promiscuous mode [ 105.924028][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.978581][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.037176][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.062858][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.089939][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.100611][ T5976] warning: `syz.1.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.124172][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.147048][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.152260][ T5850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.160601][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.187407][ T5850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.197515][ T5850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.208652][ T5850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.252431][ T5862] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.268689][ T5862] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.286402][ T5862] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.295965][ T5862] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.456596][ T5980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9'. [ 106.828556][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.875558][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.877471][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.903406][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.097262][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.137846][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.221800][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.246994][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.165432][ T6025] IPv6: NLM_F_CREATE should be specified when creating new route [ 108.335991][ T6031] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.474089][ T6035] xt_hashlimit: size too large, truncated to 1048576 [ 108.595422][ T6042] : renamed from bridge_slave_0 (while UP) [ 108.614970][ T6041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.35'. [ 108.686737][ T6037] xt_CT: No such helper "snmp" [ 108.861979][ T6047] syzkaller0: entered promiscuous mode [ 108.874718][ T6047] syzkaller0: entered allmulticast mode [ 109.197813][ T6057] tipc: Enabling of bearer rejected, failed to enable media [ 109.755797][ T6077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.47'. [ 111.257292][ T6132] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.939576][ T6152] tipc: Started in network mode [ 111.972692][ T6152] tipc: Node identity 2253a5d4952c, cluster identity 4711 [ 112.015857][ T6152] tipc: Enabled bearer , priority 0 [ 112.058171][ T6152] tipc: Resetting bearer [ 112.067188][ T6157] netlink: 168 bytes leftover after parsing attributes in process `syz.2.81'. [ 112.125576][ T6151] tipc: Disabling bearer [ 112.861365][ T6185] vxcan1: tx drop: invalid da for name 0xffffffffffffffff [ 113.086159][ T6192] tipc: Started in network mode [ 113.110199][ T6192] tipc: Node identity 722935ffe8e, cluster identity 4711 [ 113.152672][ T6192] tipc: Enabled bearer , priority 0 [ 113.302508][ T6191] tipc: Resetting bearer [ 113.338271][ T6189] tipc: Disabling bearer [ 113.341665][ T6204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.392854][ T6204] netlink: 'syz.2.100': attribute type 10 has an invalid length. [ 113.455224][ T6204] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 113.644468][ T6212] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 114.271083][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 114.280315][ T6233] : left allmulticast mode [ 114.280344][ T6233] : left promiscuous mode [ 114.312610][ T6233] bridge0: port 1() entered disabled state [ 114.375560][ T6233] bridge_slave_1: left allmulticast mode [ 114.410638][ T6233] bridge_slave_1: left promiscuous mode [ 114.420198][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.461397][ T6233] bond0: (slave bond_slave_0): Releasing backup interface [ 114.537761][ T6233] bond0: (slave bond_slave_1): Releasing backup interface [ 114.596204][ T6233] team0: Port device team_slave_0 removed [ 114.677031][ T6233] team0: Port device team_slave_1 removed [ 114.703457][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.711983][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.731988][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.774303][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.971821][ T1217] hid-generic 0005:16BF:5505.0001: item fetching failed at offset 5/7 [ 115.038775][ T1217] hid-generic 0005:16BF:5505.0001: probe with driver hid-generic failed with error -22 [ 115.088350][ T6261] netlink: 'syz.2.127': attribute type 2 has an invalid length. [ 115.107290][ T6261] netlink: 88 bytes leftover after parsing attributes in process `syz.2.127'. [ 115.913364][ T6287] syzkaller0: entered promiscuous mode [ 115.934537][ T6287] syzkaller0: entered allmulticast mode [ 116.204573][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 116.214826][ T6300] bridge_slave_1: left allmulticast mode [ 116.221399][ T6300] bridge_slave_1: left promiscuous mode [ 116.232614][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.279700][ T6300] bridge_slave_0: left allmulticast mode [ 116.287951][ T6300] bridge_slave_0: left promiscuous mode [ 116.302096][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.707095][ T6314] : renamed from bridge_slave_0 (while UP) [ 117.039848][ T6328] tipc: Started in network mode [ 117.074613][ T6328] tipc: Node identity ac14142f, cluster identity 4711 [ 117.110340][ T6328] tipc: New replicast peer: 0.0.0.0 [ 117.147708][ T6328] tipc: Enabled bearer , priority 10 [ 117.169214][ T6331] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 117.470345][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 117.491465][ T6342] bridge_slave_1: left allmulticast mode [ 117.501013][ T6342] bridge_slave_1: left promiscuous mode [ 117.513572][ T6342] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.566117][ T6342] bridge_slave_0: left allmulticast mode [ 117.585453][ T6342] bridge_slave_0: left promiscuous mode [ 117.612292][ T6342] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.829785][ T6344] tipc: Enabled bearer , priority 0 [ 117.839021][ T6351] : renamed from bridge_slave_0 (while UP) [ 117.857168][ T6344] tipc: Resetting bearer [ 117.933012][ T6343] tipc: Disabling bearer [ 118.825490][ T5954] tipc: Node number set to 2886997039 [ 118.942564][ T6391] : renamed from bridge_slave_0 (while UP) [ 119.112797][ T6393] syzkaller0: entered promiscuous mode [ 119.130860][ T6393] syzkaller0: entered allmulticast mode [ 119.401238][ T6398] tipc: Enabled bearer , priority 0 [ 119.413410][ T6398] tipc: Resetting bearer [ 119.526412][ T6397] tipc: Disabling bearer [ 120.169207][ T6428] netlink: 604 bytes leftover after parsing attributes in process `syz.0.195'. [ 120.232457][ T6425] netlink: 'syz.0.195': attribute type 29 has an invalid length. [ 120.253441][ T6427] netlink: 'syz.0.195': attribute type 29 has an invalid length. [ 120.485558][ T6434] syzkaller0: entered promiscuous mode [ 120.491165][ T6434] syzkaller0: entered allmulticast mode [ 120.759526][ T6447] tipc: Started in network mode [ 120.772743][ T6451] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 120.785410][ T6447] tipc: Node identity 661cdff563d4, cluster identity 4711 [ 120.835706][ T6447] tipc: Enabled bearer , priority 0 [ 120.869611][ T6445] tipc: Resetting bearer [ 120.963307][ T6444] tipc: Disabling bearer [ 121.548692][ T6477] syzkaller0: entered promiscuous mode [ 121.590077][ T6477] syzkaller0: entered allmulticast mode [ 121.628842][ T6480] lo speed is unknown, defaulting to 1000 [ 121.719227][ T6480] lo speed is unknown, defaulting to 1000 [ 121.728175][ T6480] lo speed is unknown, defaulting to 1000 [ 121.882039][ T6490] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 121.889013][ T6490] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 121.909158][ T6489] tipc: Enabled bearer , priority 0 [ 121.933129][ T6489] tipc: Resetting bearer [ 122.047054][ T6488] tipc: Disabling bearer [ 122.160839][ T6496] syzkaller1: entered promiscuous mode [ 122.171085][ T6496] syzkaller1: entered allmulticast mode [ 122.404690][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 122.464599][ T6500] bridge_slave_1: left allmulticast mode [ 122.480797][ T6500] bridge_slave_1: left promiscuous mode [ 122.500006][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.541673][ T6500] : left allmulticast mode [ 122.568471][ T6500] : left promiscuous mode [ 122.580065][ T6480] infiniband syz0: set active [ 122.591845][ T6500] bridge0: port 1() entered disabled state [ 122.601903][ T6480] infiniband syz0: added lo [ 122.612423][ T6480] syz0: rxe_create_cq: returned err = -12 [ 122.621056][ T6480] infiniband syz0: Couldn't create ib_mad CQ [ 122.655825][ T6480] infiniband syz0: Couldn't open port 1 [ 122.741859][ T5848] lo speed is unknown, defaulting to 1000 [ 122.749457][ T6504] Zero length message leads to an empty skb [ 122.828950][ T6480] RDS/IB: syz0: added [ 122.857489][ T6480] smc: adding ib device syz0 with port count 1 [ 122.904804][ T6480] smc: ib device syz0 port 1 has pnetid [ 122.912129][ T5848] lo speed is unknown, defaulting to 1000 [ 122.939132][ T6480] lo speed is unknown, defaulting to 1000 [ 123.062703][ T6520] syzkaller0: entered promiscuous mode [ 123.084508][ T6520] syzkaller0: entered allmulticast mode [ 123.555369][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.246'. [ 123.564736][ T6533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.640186][ T6533] netlink: 'syz.4.247': attribute type 10 has an invalid length. [ 123.827342][ T6533] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 123.960541][ T6549] syz.2.251 uses obsolete (PF_INET,SOCK_PACKET) [ 124.049797][ T6480] lo speed is unknown, defaulting to 1000 [ 124.954777][ T6571] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 125.018720][ T6571] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 125.161691][ T6480] lo speed is unknown, defaulting to 1000 [ 126.234501][ T6480] lo speed is unknown, defaulting to 1000 [ 126.360521][ T6613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.280'. [ 126.401339][ T6613] netlink: 'syz.1.280': attribute type 7 has an invalid length. [ 126.438502][ T6613] netlink: 'syz.1.280': attribute type 8 has an invalid length. [ 126.449919][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 126.571662][ T6617] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 126.574184][ T5954] IPVS: starting estimator thread 0... [ 126.614918][ T6618] syzkaller1: entered promiscuous mode [ 126.620515][ T6618] syzkaller1: entered allmulticast mode [ 126.694907][ T6620] IPVS: using max 28 ests per chain, 67200 per kthread [ 127.146565][ T6480] lo speed is unknown, defaulting to 1000 [ 127.327453][ T6639] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 127.374343][ T6639] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 127.708322][ T6653] netlink: 9 bytes leftover after parsing attributes in process `syz.1.296'. [ 127.779874][ T6659] netlink: 5 bytes leftover after parsing attributes in process `syz.1.296'. [ 127.834835][ T6653] gretap0: entered promiscuous mode [ 127.982031][ T6665] netlink: 'syz.2.301': attribute type 10 has an invalid length. [ 128.133339][ T6659] 0ªX¹¦D: renamed from gretap0 [ 128.177838][ T6659] 0ªX¹¦D: left promiscuous mode [ 128.182964][ T6659] 0ªX¹¦D: entered allmulticast mode [ 128.191514][ T6659] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 128.277382][ T6668] dummy0: entered promiscuous mode [ 128.309318][ T6668] batadv0: entered promiscuous mode [ 128.327638][ T6672] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 128.341300][ T6672] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 129.125857][ T6703] netlink: 60 bytes leftover after parsing attributes in process `syz.0.318'. [ 129.182676][ T6705] netlink: 'syz.4.319': attribute type 10 has an invalid length. [ 129.277856][ T6705] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 129.305498][ T6705] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 129.512910][ T6715] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 129.542283][ T6715] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 129.661607][ T6719] skbuff: bad partial csum: csum=65506/2 headroom=98 headlen=65526 [ 129.760397][ T6721] rdma_rxe: rxe_newlink: failed to add lo [ 130.367156][ T6747] syzkaller0: entered promiscuous mode [ 130.372723][ T6747] syzkaller0: entered allmulticast mode [ 130.684958][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 130.998687][ T6766] : left allmulticast mode [ 131.040926][ T6766] : left promiscuous mode [ 131.085881][ T6766] bridge0: port 1() entered disabled state [ 131.210758][ T6766] bridge_slave_1: left allmulticast mode [ 131.264960][ T6766] bridge_slave_1: left promiscuous mode [ 131.274928][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.307569][ T6766] bond0: (slave bond_slave_0): Releasing backup interface [ 131.322818][ T6766] bond0: (slave bond_slave_1): Releasing backup interface [ 131.343662][ T6766] team0: Port device team_slave_0 removed [ 131.359056][ T6766] team0: Port device team_slave_1 removed [ 131.368422][ T6766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.377467][ T6766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.387565][ T6766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.395591][ T6766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.412919][ T6766] bond0: (slave wlan1): Releasing backup interface [ 132.565700][ T6823] syzkaller1: entered promiscuous mode [ 132.604724][ T6823] syzkaller1: entered allmulticast mode [ 132.832082][ T6835] vlan2: entered allmulticast mode [ 132.840156][ T6835] team0: entered allmulticast mode [ 132.848567][ T6835] team_slave_0: entered allmulticast mode [ 132.891886][ T6835] team_slave_1: entered allmulticast mode [ 132.906178][ T6835] team0: Device vlan2 is already an upper device of the team interface [ 133.335122][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 133.421550][ T6858] gtp0: entered promiscuous mode [ 133.454918][ T6858] gtp0: entered allmulticast mode [ 133.793684][ T6872] syzkaller1: entered promiscuous mode [ 133.803165][ T6872] syzkaller1: entered allmulticast mode [ 134.180365][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.395'. [ 134.703572][ T6912] netlink: 'syz.2.404': attribute type 11 has an invalid length. [ 134.967982][ T6919] netlink: 'syz.1.406': attribute type 29 has an invalid length. [ 134.990288][ T6919] netlink: 'syz.1.406': attribute type 29 has an invalid length. [ 135.024552][ T6919] netlink: 500 bytes leftover after parsing attributes in process `syz.1.406'. [ 135.059984][ T6919] unsupported nla_type 58 [ 135.357851][ T6935] syzkaller0: entered promiscuous mode [ 135.369414][ T6935] syzkaller0: entered allmulticast mode [ 135.538893][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.416'. [ 135.640349][ T6946] syzkaller0: entered promiscuous mode [ 135.658779][ T6946] syzkaller0: entered allmulticast mode [ 135.783188][ T6949] netlink: 28 bytes leftover after parsing attributes in process `syz.2.417'. [ 135.814231][ T6949] netlink: 'syz.2.417': attribute type 7 has an invalid length. [ 135.827090][ T6949] netlink: 'syz.2.417': attribute type 8 has an invalid length. [ 135.839687][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'. [ 136.137308][ T2987] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 136.156159][ T6966] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 136.817510][ T6981] syzkaller0: entered promiscuous mode [ 136.823621][ T6981] syzkaller0: entered allmulticast mode [ 137.084135][ T5851] syz-executor (5851) used greatest stack depth: 19304 bytes left [ 137.309331][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.403237][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.533014][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'. [ 137.582904][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.611256][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.442'. [ 137.637368][ T7011] netlink: 32 bytes leftover after parsing attributes in process `syz.3.443'. [ 137.858162][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.181327][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.303320][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 138.313891][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 138.325996][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 138.339628][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 138.365773][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 138.915787][ T7037] netlink: 'syz.0.453': attribute type 10 has an invalid length. [ 139.037720][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.084607][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.107318][ T12] bond0 (unregistering): Released all slaves [ 139.210321][ T7037] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 139.299194][ T12] tipc: Left network mode [ 139.299382][ T7036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.455791][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.605031][ T7021] lo speed is unknown, defaulting to 1000 [ 139.614148][ T7055] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 139.628601][ T7055] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 139.649227][ T7055] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 139.661201][ T7055] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 139.669687][ T7055] CPU: 1 UID: 0 PID: 7055 Comm: syz.2.456 Not tainted 6.16.0-rc4-syzkaller-00121-g80852774ba0a #0 PREEMPT(full) [ 139.681625][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.691722][ T7055] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480 [ 139.698210][ T7055] Code: 89 ef e8 e0 1a ab f8 4d 89 ef 85 db 74 0d e8 04 98 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 a9 1a ab f8 48 8b [ 139.717862][ T7055] RSP: 0018:ffffc90004116fe8 EFLAGS: 00010202 [ 139.724018][ T7055] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002 [ 139.732045][ T7055] RDX: ffff88807aa43c00 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.740043][ T7055] RBP: 0000000000000000 R08: ffff88807aa43c00 R09: 0000000000000002 [ 139.748042][ T7055] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002 [ 139.756034][ T7055] R13: ffff88802876b000 R14: dffffc0000000000 R15: ffff88802876b000 [ 139.764030][ T7055] FS: 00007f20f0aa66c0(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000 [ 139.773002][ T7055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.779640][ T7055] CR2: 000000110c333f03 CR3: 0000000026fc2000 CR4: 00000000003526f0 [ 139.787637][ T7055] Call Trace: [ 139.790955][ T7055] [ 139.793918][ T7055] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 139.799771][ T7055] fq_change+0x1519/0x1f50 [ 139.804223][ T7055] ? __pfx_fq_change+0x10/0x10 [ 139.809096][ T7055] ? __hrtimer_setup+0x187/0x210 [ 139.814102][ T7055] fq_init+0x699/0x960 [ 139.818248][ T7055] ? __pfx_fq_init+0x10/0x10 [ 139.822865][ T7055] ? lockdep_rtnl_is_held+0x26/0x40 [ 139.828086][ T7055] ? qdisc_lookup+0x36d/0x6d0 [ 139.832784][ T7055] ? __pfx_fq_init+0x10/0x10 [ 139.837393][ T7055] qdisc_create+0x7a9/0xea0 [ 139.841940][ T7055] tc_modify_qdisc+0x1426/0x2010 [ 139.846897][ T7055] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 139.852213][ T7055] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 139.857512][ T7055] rtnetlink_rcv_msg+0x77c/0xb70 [ 139.862471][ T7055] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 139.867639][ T7055] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.873131][ T7055] ? ref_tracker_free+0x63a/0x7d0 [ 139.878179][ T7055] ? __copy_skb_header+0xa7/0x550 [ 139.883229][ T7055] ? __pfx_ref_tracker_free+0x10/0x10 [ 139.888625][ T7055] ? __skb_clone+0x63/0x7a0 [ 139.893164][ T7055] netlink_rcv_skb+0x205/0x470 [ 139.897948][ T7055] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.903436][ T7055] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.909300][ T7055] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.914643][ T7055] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.919907][ T7055] netlink_unicast+0x759/0x8e0 [ 139.924717][ T7055] netlink_sendmsg+0x805/0xb30 [ 139.929592][ T7055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.934584][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 139.934907][ T7055] ? aa_sock_msg_perm+0x94/0x160 [ 139.947444][ T7055] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.952876][ T7055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.958196][ T7055] __sock_sendmsg+0x219/0x270 [ 139.962899][ T7055] ____sys_sendmsg+0x505/0x830 [ 139.967707][ T7055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.973071][ T7055] ? import_iovec+0x74/0xa0 [ 139.977602][ T7055] ___sys_sendmsg+0x21f/0x2a0 [ 139.982304][ T7055] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.987539][ T7055] ? __fget_files+0x2a/0x420 [ 139.992149][ T7055] ? __fget_files+0x3a0/0x420 [ 139.996850][ T7055] __x64_sys_sendmsg+0x19b/0x260 [ 140.001810][ T7055] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.007294][ T7055] ? rcu_is_watching+0x15/0xb0 [ 140.012083][ T7055] ? do_syscall_64+0xbe/0x3b0 [ 140.016810][ T7055] do_syscall_64+0xfa/0x3b0 [ 140.021342][ T7055] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.026680][ T7055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.032778][ T7055] ? clear_bhb_loop+0x60/0xb0 [ 140.037486][ T7055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.043571][ T7055] RIP: 0033:0x7f20efb8e929 [ 140.048105][ T7055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.067733][ T7055] RSP: 002b:00007f20f0aa6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.076173][ T7055] RAX: ffffffffffffffda RBX: 00007f20efdb5fa0 RCX: 00007f20efb8e929 [ 140.084166][ T7055] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000006 [ 140.092220][ T7055] RBP: 00007f20efc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 140.100218][ T7055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.108227][ T7055] R13: 0000000000000000 R14: 00007f20efdb5fa0 R15: 00007fffbc82ed28 [ 140.116231][ T7055] [ 140.119263][ T7055] Modules linked in: [ 140.123281][ T7055] ---[ end trace 0000000000000000 ]--- [ 140.129193][ T7055] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480 [ 140.135693][ T7055] Code: 89 ef e8 e0 1a ab f8 4d 89 ef 85 db 74 0d e8 04 98 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 a9 1a ab f8 48 8b [ 140.155385][ T7055] RSP: 0018:ffffc90004116fe8 EFLAGS: 00010202 [ 140.161506][ T7055] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002 [ 140.169573][ T7055] RDX: ffff88807aa43c00 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.177630][ T7055] RBP: 0000000000000000 R08: ffff88807aa43c00 R09: 0000000000000002 [ 140.185676][ T7055] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002 [ 140.193683][ T7055] R13: ffff88802876b000 R14: dffffc0000000000 R15: ffff88802876b000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 140.201739][ T7055] FS: 00007f20f0aa66c0(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000 [ 140.210751][ T7055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.217427][ T7055] CR2: 000000110c333f03 CR3: 0000000026fc2000 CR4: 00000000003526f0 [ 140.225564][ T7055] Kernel panic - not syncing: Fatal exception in interrupt [ 140.233079][ T7055] Kernel Offset: disabled [ 140.237421][ T7055] Rebooting in 86400 seconds..