Warning: Permanently added '10.128.1.103' (ED25519) to the list of known hosts. 2024/05/16 20:43:02 fuzzer started 2024/05/16 20:43:02 dialing manager at 10.128.0.169:30008 [ 69.247242][ T5095] cgroup: Unknown subsys name 'net' [ 69.434628][ T5095] cgroup: Unknown subsys name 'rlimit' 2024/05/16 20:43:04 starting 5 executor processes [ 70.929569][ T5101] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.737062][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.743701][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.872635][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.881685][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.889752][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.898709][ T5116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.924441][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.932099][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.960059][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.974252][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.982203][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.990620][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.998348][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.007423][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.009115][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.023274][ T5119] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.030716][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.030911][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.046992][ T5119] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.054419][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.130571][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.140519][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.148203][ T4489] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.157590][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.166072][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.167309][ T4489] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.174328][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.181557][ T4489] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.188467][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.196606][ T4489] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.216377][ T4489] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.224190][ T4489] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.799505][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 72.889336][ T5117] chnl_net:caif_netlink_parms(): no params data found [ 72.971867][ T5121] chnl_net:caif_netlink_parms(): no params data found [ 72.992665][ T5125] chnl_net:caif_netlink_parms(): no params data found [ 73.076805][ T5124] chnl_net:caif_netlink_parms(): no params data found [ 73.221764][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.229849][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.237865][ T5114] bridge_slave_0: entered allmulticast mode [ 73.245083][ T5114] bridge_slave_0: entered promiscuous mode [ 73.261313][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.269244][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.276820][ T5114] bridge_slave_1: entered allmulticast mode [ 73.283951][ T5114] bridge_slave_1: entered promiscuous mode [ 73.315777][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.323241][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.330757][ T5117] bridge_slave_0: entered allmulticast mode [ 73.339218][ T5117] bridge_slave_0: entered promiscuous mode [ 73.348143][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.355313][ T5121] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.362939][ T5121] bridge_slave_0: entered allmulticast mode [ 73.370312][ T5121] bridge_slave_0: entered promiscuous mode [ 73.379634][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.387124][ T5121] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.394449][ T5121] bridge_slave_1: entered allmulticast mode [ 73.402511][ T5121] bridge_slave_1: entered promiscuous mode [ 73.453160][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.460561][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.467980][ T5117] bridge_slave_1: entered allmulticast mode [ 73.475025][ T5117] bridge_slave_1: entered promiscuous mode [ 73.510058][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.517344][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.524760][ T5125] bridge_slave_0: entered allmulticast mode [ 73.532957][ T5125] bridge_slave_0: entered promiscuous mode [ 73.541296][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.550021][ T5125] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.557789][ T5125] bridge_slave_1: entered allmulticast mode [ 73.565058][ T5125] bridge_slave_1: entered promiscuous mode [ 73.588663][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.679335][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.690036][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.698123][ T5124] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.705336][ T5124] bridge_slave_0: entered allmulticast mode [ 73.712969][ T5124] bridge_slave_0: entered promiscuous mode [ 73.727142][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.741025][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.753106][ T5121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.767703][ T5125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.780564][ T5125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.801193][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.808617][ T5124] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.815868][ T5124] bridge_slave_1: entered allmulticast mode [ 73.823812][ T5124] bridge_slave_1: entered promiscuous mode [ 73.860441][ T5121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.957094][ T4489] Bluetooth: hci0: command tx timeout [ 73.978464][ T5125] team0: Port device team_slave_0 added [ 73.988089][ T5114] team0: Port device team_slave_0 added [ 73.997516][ T5125] team0: Port device team_slave_1 added [ 74.018346][ T5124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.031796][ T5124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.044750][ T5117] team0: Port device team_slave_0 added [ 74.056776][ T5117] team0: Port device team_slave_1 added [ 74.065389][ T5121] team0: Port device team_slave_0 added [ 74.074014][ T5114] team0: Port device team_slave_1 added [ 74.117611][ T5121] team0: Port device team_slave_1 added [ 74.123671][ T4489] Bluetooth: hci1: command tx timeout [ 74.123711][ T5116] Bluetooth: hci2: command tx timeout [ 74.161337][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.168645][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.195048][ T5125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.258960][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.266130][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.276594][ T4489] Bluetooth: hci4: command tx timeout [ 74.293702][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.297974][ T5116] Bluetooth: hci3: command tx timeout [ 74.312207][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.321271][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.347905][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.361047][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.368830][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.395152][ T5125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.409762][ T5124] team0: Port device team_slave_0 added [ 74.418157][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.425132][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.451302][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.463339][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.470785][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.497600][ T5121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.510626][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.517799][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.544137][ T5121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.570273][ T5124] team0: Port device team_slave_1 added [ 74.589396][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.596501][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.622485][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.692561][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.699799][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.726406][ T5124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.807936][ T5114] hsr_slave_0: entered promiscuous mode [ 74.814751][ T5114] hsr_slave_1: entered promiscuous mode [ 74.823754][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.831154][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.858159][ T5124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.910739][ T5117] hsr_slave_0: entered promiscuous mode [ 74.917386][ T5117] hsr_slave_1: entered promiscuous mode [ 74.923644][ T5117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.931798][ T5117] Cannot create hsr debugfs directory [ 74.942465][ T5125] hsr_slave_0: entered promiscuous mode [ 74.949791][ T5125] hsr_slave_1: entered promiscuous mode [ 74.956227][ T5125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.963813][ T5125] Cannot create hsr debugfs directory [ 75.002113][ T5121] hsr_slave_0: entered promiscuous mode [ 75.009997][ T5121] hsr_slave_1: entered promiscuous mode [ 75.016609][ T5121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.024201][ T5121] Cannot create hsr debugfs directory [ 75.207418][ T5124] hsr_slave_0: entered promiscuous mode [ 75.213998][ T5124] hsr_slave_1: entered promiscuous mode [ 75.221199][ T5124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.229533][ T5124] Cannot create hsr debugfs directory [ 75.658915][ T5125] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.673121][ T5125] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.683382][ T5125] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.694503][ T5125] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.768411][ T5117] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.782355][ T5117] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.793101][ T5117] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.811671][ T5117] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.913773][ T5114] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.930177][ T5114] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.964928][ T5114] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.998674][ T5114] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.036643][ T4489] Bluetooth: hci0: command tx timeout [ 76.062331][ T5121] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.085624][ T5121] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.100473][ T5121] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.114569][ T5121] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.193142][ T5125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.200522][ T4489] Bluetooth: hci1: command tx timeout [ 76.206404][ T4489] Bluetooth: hci2: command tx timeout [ 76.231846][ T5124] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.243771][ T5124] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.288573][ T5125] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.295600][ T5124] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.307616][ T5124] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.359052][ T4489] Bluetooth: hci4: command tx timeout [ 76.359647][ T5116] Bluetooth: hci3: command tx timeout [ 76.409283][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.416692][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.531350][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.541296][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.548514][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.652210][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.682674][ T5124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.710476][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.721549][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.728759][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.752577][ T5121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.779599][ T5124] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.811257][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.818448][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.857614][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.868762][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.876889][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.894207][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.901462][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.959353][ T5121] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.007795][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.015001][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.067378][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.074509][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.094845][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.102074][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.114710][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.121874][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.275793][ T5121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.325625][ T5125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.629601][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.772253][ T5124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.844790][ T5117] veth0_vlan: entered promiscuous mode [ 77.924651][ T5117] veth1_vlan: entered promiscuous mode [ 77.957392][ T5121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.004254][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.049748][ T5124] veth0_vlan: entered promiscuous mode [ 78.095304][ T5124] veth1_vlan: entered promiscuous mode [ 78.113990][ T5121] veth0_vlan: entered promiscuous mode [ 78.119773][ T5116] Bluetooth: hci0: command tx timeout [ 78.142230][ T5117] veth0_macvtap: entered promiscuous mode [ 78.181237][ T5117] veth1_macvtap: entered promiscuous mode [ 78.215654][ T5125] veth0_vlan: entered promiscuous mode [ 78.259951][ T5121] veth1_vlan: entered promiscuous mode [ 78.278545][ T5116] Bluetooth: hci2: command tx timeout [ 78.278555][ T4489] Bluetooth: hci1: command tx timeout [ 78.289865][ T5124] veth0_macvtap: entered promiscuous mode [ 78.314020][ T5125] veth1_vlan: entered promiscuous mode [ 78.335840][ T5124] veth1_macvtap: entered promiscuous mode [ 78.344105][ T5114] veth0_vlan: entered promiscuous mode [ 78.364869][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.397076][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.420141][ T5114] veth1_vlan: entered promiscuous mode [ 78.436261][ T4489] Bluetooth: hci4: command tx timeout [ 78.437264][ T5116] Bluetooth: hci3: command tx timeout [ 78.451833][ T5117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.463171][ T5117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.473400][ T5117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.482347][ T5117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.505110][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.518499][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.530705][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.542824][ T5121] veth0_macvtap: entered promiscuous mode [ 78.560138][ T5121] veth1_macvtap: entered promiscuous mode [ 78.583879][ T5125] veth0_macvtap: entered promiscuous mode [ 78.621812][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.633301][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.645305][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.659845][ T5125] veth1_macvtap: entered promiscuous mode [ 78.701849][ T5114] veth0_macvtap: entered promiscuous mode [ 78.711600][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.722412][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.732554][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.745961][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.759466][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.773972][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.784945][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.799440][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.810026][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.822530][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.831232][ T5124] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.841698][ T5124] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.850692][ T5124] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.859871][ T5124] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.903288][ T5121] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.912339][ T5121] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.929499][ T5121] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.938809][ T5121] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.960565][ T5114] veth1_macvtap: entered promiscuous mode [ 79.020161][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.030911][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.041286][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.055984][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.065860][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.078821][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.090889][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.113601][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.132765][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.163660][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.174699][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.185027][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.195750][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.206327][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.217225][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.230810][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.252148][ T5125] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.261505][ T5125] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.270922][ T5125] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.282934][ T5125] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.333832][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.351026][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.361595][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.372145][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.382413][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.393249][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.404128][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.415260][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.427586][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.453949][ T2874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.466300][ T2874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.481967][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.492606][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.503312][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.516278][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.526729][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.541105][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.551113][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.562659][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.575289][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.620530][ T5114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.639430][ T5114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.648951][ T5114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.664702][ T5114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x8000, 0x0, 0x0, 0x0, @empty, @multicast1}}}}) [ 79.709064][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.718195][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4080000000000007311310000000046460000000000000020009500c200009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1, 0x0) write$binfmt_elf64(r1, 0x0, 0x78) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080011001d000000", 0x24) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfdef, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x8, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'lo\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 79.809381][ T784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.828625][ T784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.923208][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.954798][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, 0x0, r1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e0800050000000000ec010880800000801400040002000000e000000100000000000000001400040002000000e0000001000000000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a00000000000000fe880000000000000000000000000001000000000800030000000000060005000000000068010080fc00098070000080060001000200000008000200ac1414bb0500030000000000060001000a00000014000200ff01000000000000000000000000000105000300000000000600010002000000080002000000000005000300000000000600010002000000080002000a010102050003000200000088000080060001000200000008000200e00000020500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000000500030000000000060001000a0000001400020000000000000000000000ffffac1414000500030000000000240002002767b524f45e9dfaf001c414581741c92349c3b6661d9864680582bd184ef1a6200004000a00000000000000fe8000000000000000000000000000aa0000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080007000000000008000100", @ANYRES32=r4], 0x23c}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x4) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f00000001c0)="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", 0x118) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000140)=ANY=[@ANYBLOB="00010000000000000401"], 0x18) write$binfmt_aout(r6, 0x0, 0x0) [ 79.994815][ T2874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.018001][ T2874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.096404][ T5198] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.138882][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.159254][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 2: r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x6c, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000540)="96bc1480bb58", 0x6}], 0x2}, 0x0) [ 80.199954][ T5116] Bluetooth: hci0: command tx timeout [ 80.220860][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.243317][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21000000}, 0x50) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x50) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)='s', 0x1}], 0x1, 0x2) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r3, 0x101, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8, 0xd}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) [ 80.365858][ T5116] Bluetooth: hci1: command tx timeout [ 80.365900][ T4489] Bluetooth: hci2: command tx timeout executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x10, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x21080}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x3c}}, 0x0) executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000200000000000000000085000000070000001801000020646c2500000000002020607b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1410, 0x1}, 0x10}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x2544}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f00000003c0)=0x4000000, &(0x7f0000000400)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="1000000000000000", 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) [ 80.510498][ T2874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.525117][ T4489] Bluetooth: hci4: command tx timeout [ 80.530663][ T5116] Bluetooth: hci3: command tx timeout executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x9) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x20) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r4, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "6af1aa37cc7d03e47584351c65831bc1"}, @NL80211_ATTR_PMK={0x14, 0xfe, "facc272c0b2649d6ddd6c505f64948dc"}, @NL80211_ATTR_PMK={0x14, 0xfe, "5669ca394fd622260c6b14e13d3dfccc"}, @NL80211_ATTR_PMK={0x14, 0xfe, "65165c14028f532826aad1b81eba0f42"}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmmsg$inet6(r3, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000002900000043"], 0x18}}], 0x1, 0x0) sendmmsg$alg(r2, &(0x7f0000001800), 0x4924924924927e3, 0x0) [ 80.554857][ T2874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x400, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xffffffff}]}}}]}, 0x3c}}, 0x0) [ 80.609207][ T5118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.666846][ T5118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 2: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x25f6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@const={0xd, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x61, 0x30, 0x30, 0x61, 0x61]}}, &(0x7f0000000340)=""/30, 0x2b, 0x1e, 0x1, 0x9}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x5, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x14, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffc5, 0x0, 0x0, 0x0, 0x737}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x3, 0x16, &(0x7f0000000240)=""/22, 0x40f00, 0x8, '\x00', r2, 0x69b7e2e913576ddd, r3, 0x8, &(0x7f00000003c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x10, 0x3, 0x92f8}, 0x10, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x90) r6 = socket(0x6, 0x80000, 0x3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'ip6tnl0\x00', r2, 0x0, 0x0, 0x80, 0x6, 0x0, @mcast1, @mcast1, 0x710, 0x700, 0xfff, 0x7}}) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xe0, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_LABELS_MASK={0x28, 0x17, [0x1f, 0x15, 0x4, 0x0, 0x1, 0xf1c, 0x1, 0x8001, 0x7]}, @CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x70a}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3a}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xd6a8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x578e}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xe8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TUPLE_MASTER={0x40, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x75f9}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfffffff8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x5) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000800)=0x5) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000840)={0x7, 0xb, 0x2}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x14, 0x3, 0x8, 0x6, 0x104, r1, 0x4, '\x00', 0x0, r3, 0x2, 0x5}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1d, 0x1e, &(0x7f0000000900)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x101}, @call={0x85, 0x0, 0x0, 0x37}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @ldst={0x0, 0x2, 0x2, 0x8, 0x2, 0xfffffffffffffff4}], &(0x7f0000000a00)='GPL\x00', 0xff800000, 0x60, &(0x7f0000000a40)=""/96, 0x40f00, 0x8, '\x00', r2, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x0, 0x18000000, 0x2}, 0x10, r4, r5, 0x5, 0x0, &(0x7f0000000b40)=[{0x1, 0x3, 0x8, 0x9}, {0x0, 0x2, 0xa, 0x7}, {0x3, 0x2, 0x0, 0x1}, {0x4, 0x3, 0x10, 0x5}, {0x5, 0x3, 0x5, 0x4}], 0x10, 0x4}, 0x90) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000c80)=0x9b5b, 0x8) vmsplice(r6, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)="0ef9f524fbe3bee81c05053281ebaa60789346c1937a914881f438717a204275092cf9df0e4f26d7e35aa0d10e62e05875eb4e681239ed721777b4f77e34dab0d31b57a637abdc6e3c5a9bb82672e55a991300d64f8a6c274e5c80fbe52f0dab3fbaeb9cb645b98612f804a8d8d30486c05e331ef344aff9ec2e5234d48df15b4828f4eb0f440453858a7de880c694f987642ec69011cba0defde83013e8070a25bd0129a84740f7e0c28dd21d5879f6f611", 0xb2}, {&(0x7f0000000d80)="1d70c16d", 0x4}], 0x2, 0x9) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000e00)={0x3, 'wg0\x00', {0x998}, 0xf68}) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000e40)) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000ec0), r6) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x68, r10, 0x10f, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xb9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3747c8c3}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000001000)={0x4, {{0xa, 0x4e20, 0x2, @mcast2, 0x3}}}, 0x88) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) ioctl$BTRFS_IOC_DEFRAG(r8, 0x50009402, 0x0) r11 = epoll_create(0xfffff671) epoll_pwait(r11, &(0x7f00000010c0)=[{}], 0x1, 0xfff, &(0x7f0000001100), 0x8) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd2a, 0x25dfdbfd, {0x2, 0x20, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010102}]}, 0x24}}, 0x10) bind$alg(r6, &(0x7f0000001240)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128-generic\x00'}, 0x58) executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x2, 0x4, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @multicast2}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0xe, 0x4) (fail_nth: 3) executing program 1: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tw'], 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000), 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r5, r4, 0x2, 0x6, 0x4000}, 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@i}]}, &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x27, 0xe80, 0x0, &(0x7f0000000040)="f8ad48cc02cb29fcc800775b86dd", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$int_in(r6, 0x5452, &(0x7f0000000640)=0x7) unshare(0x2000400) executing program 3: unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) recvmsg$can_raw(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000002d40)=""/4106, 0x100a}], 0x2}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000085000400970000001800e400786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500080072000000950000000000000055c5b4dfa7a050810e2d4765cbe5d77bc4a98f6d6296d24fcb5f665d3504874ff46e9e17d5f23b1d80e8a46f8af881d22288070f402fff9583bcd56f69850a97040a0dd8c385debace49ae2a6369e197ade1c5b3630ba6c63f2eaace949d1d6b81e04f0000000000000000000000000000c2a0fac705f763422f501b25358e52dda7c1f1047a2a31"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000340)={0x4, &(0x7f0000000000)=[{0x0, 0x8, 0x0, 0x1}, {0x5, 0x9, 0xfd, 0x7}, {0x46c4, 0x7f, 0x3, 0x8}, {0x6, 0xf1, 0x77, 0x8}]}, 0x10) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x74}}, 0x48001) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x9c, 0x464, 0x0, 0x0, 0x0, "d6a70a7e3b2c1e4bfa1b446fd25d24f8db09e88f58d4d14dcd4741395fb9c076b7e2c9957cccd379936a8ea031714b7f0b932321873313a479ab75d639ef234a94a86c95d38e8d3789b1d10ac5c9c4f1243aa0f50a4cde8e7c8130aa095ae4260a6c9a42c901a0af99e566a6dff35e584e721d11b059870261fbcf1e45de2ef676eaa29fda6af5aef7"}, 0x9c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x2, 0x8, 0x8}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0), 0x100}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 80.878090][ T5219] trusted_key: syz-executor.0 sent an empty control message without MSG_MORE. [ 80.999325][ T5223] pimreg: entered allmulticast mode [ 81.067090][ T5230] pimreg: left allmulticast mode executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x11, &(0x7f0000001000)=ANY=[@ANYBLOB="1800020000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000010000009500000000000000bf91101000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) executing program 4: sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='ext4_ext_remove_space_done\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x18, r1, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x4}]}, 0x18}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRESOCT=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="52000e0080000000ffffffffffff0802110000000802110000000000000088d14be44cd9bed75f7cd542"], 0x78}, 0x1, 0x0, 0x0, 0x40840}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x100, 0x0, 0xff, 0xb}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x100, 0x0, 0x2, 0x2}, 0x20) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000300)=0x2f, 0x4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_netdev_private(r6, 0x8929, &(0x7f0000000080)="3ef2b744f871f304bd39afb83a") bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x7ff}, 0xe) r7 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5"], 0x448}}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001714"], 0x38}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_elf64(r9, &(0x7f0000000440)=ANY=[], 0x78) sendfile(r7, r6, &(0x7f0000000000)=0x4, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES64=r10, @ANYRESHEX=r10, @ANYRES8=r10, @ANYRES8=0x0], 0xc8}}, 0x20004000) [ 81.350770][ T5238] netlink: 'syz-executor.4': attribute type 1 has an invalid length. executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000200", @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf250600000008000300", @ANYRES32=r1, @ANYBLOB="05005300000000000800050008"], 0x2c}}, 0x0) executing program 2: bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6000000000103a002001000000000000000000000000000100018d00907800"/56], 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0xfffffec1) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYRESDEC=r1, @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff04000000bfa200000000000007020000f8ffffffb7033d859434f73775093472d61316000002000000b7040000000000008500005720000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r2], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x923}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000180)={0x1}, 0x8) close(r5) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002e40), &(0x7f0000002e80)=0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0xfffffffffffffcfd, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x4005) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000007480)) socket$kcm(0x29, 0x7, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed0000"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x829975d63389d2e2) getpid() getuid() r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r8 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000000)='bridge0\x00') executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@migrate={0x9c, 0x11, [{@in6=@loopback, @in=@broadcast, @in=@rand_addr=0x64010101, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in6=@loopback, @in=@broadcast, @in, @in=@loopback}]}]}, 0xec}}, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x564}, {&(0x7f0000000400)=""/106, 0x14}, {&(0x7f0000000740)=""/73, 0x60}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400}) recvmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=""/87, 0x57}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000020c0)=ANY=[@ANYBLOB="04b10200", @ANYRES16=r3, @ANYBLOB="010000000000000000006500000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000001fc0)={0x768, r3, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2bc, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2a}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1ffe00000000}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1f0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x2}, {0x0, 0x7}, {0x4}, {0x7, 0x9}, {0x0, 0x4}, {0x6, 0x7}, {0x2, 0x8}, {0x4, 0x8}, {0x7}, {0x7, 0x7}, {0x0, 0x3}, {0x2, 0xa}, {0x2, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfa, 0x0, 0x2, 0x9, 0x3, 0x7, 0x3ff, 0x4]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1ff, 0x9, 0x9, 0x401, 0x8, 0x6, 0x1ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xd30, 0xfe01, 0x7f, 0x52, 0x1, 0xfff7, 0x84]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x7, 0x81, 0x101, 0x9, 0x1, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x5, 0x0, 0x7, 0x0, 0x400, 0x2, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0xfff, 0x7, 0x800, 0x200, 0xebc1, 0x81]}}]}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x2eb, 0x40, 0x8, 0x0, 0x1, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x8001, 0x8, 0x7, 0x3, 0x3, 0xffff, 0x5]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x4}, {0x5}, {0x1, 0x5}, {0x7, 0x2}, {0x0, 0x7}, {0x5, 0x9}, {0x6, 0x5}, {0x1, 0x5}, {0x0, 0x3}, {0x2, 0xa}, {0x2, 0x5}, {0x6, 0xa}, {0x7, 0x5}, {0x5, 0x7}, {0x5, 0x6}, {0x0, 0x3}, {0x5}, {0x3, 0x4}, {0x0, 0x2}, {0x4, 0xa}, {0x7, 0x4}, {0x6, 0x6}, {0x4, 0x4}, {0x2, 0x2}, {0x1}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0x9}, {0x0, 0x7}, {0x0, 0x3}, {0x1, 0x6}, {0x2}, {0x1, 0xa}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x7, 0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x5}, {0x5, 0x3}, {0x2, 0x9}, {0x7, 0x9}, {0x2, 0x4}, {0x4, 0x7}, {0x4, 0x9}, {0x0, 0x4}, {0x1, 0xa}, {0x2, 0x3}, {0x7, 0x2}, {0x6, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x6, 0x7, 0x7fff, 0x8001, 0x7ff, 0x100]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x3, 0x3, 0x100, 0x3, 0xacab, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x11}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x28, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x68e7, 0x2, 0x6, 0xffff, 0x6, 0x0, 0x4, 0x81]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x260, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x50}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1e}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x84}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x1d4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x12, 0x1b, 0x6, 0x3, 0x48, 0xc, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x0, 0x2, 0x9, 0x3, 0x9, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x7ff, 0x6, 0xffe3, 0x4, 0x3, 0x8, 0xd8b6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8001, 0x7, 0x1000, 0x8, 0x101, 0xa4, 0x3ff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0xfffd, 0x19, 0x400, 0x7874, 0x7, 0x6, 0xca75]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x48, 0x3, 0x12, 0x2, 0x30, 0x36, 0xc]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x3}, {0x4}, {0x0, 0x4}, {0x6, 0x1}, {0x1, 0x3}, {0x3, 0x6}, {0x4, 0x4}, {0x3}, {0x1, 0xa}, {0x7}, {0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x4}, {0x3}, {0x1, 0xa}, {0x4, 0x4}, {0x4, 0x3}, {0x6, 0x6}, {0x1, 0x3}, {0x3, 0x9}, {0x7, 0x2}, {0x6, 0x6}, {0x0, 0x6}, {0x7, 0x8}, {0x6, 0x8}, {0x0, 0x7}, {0x2, 0x2}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x8}, {0x0, 0x3}, {0x4, 0x8}, {0x6, 0x4}, {0x6, 0x8}, {0x0, 0x2}, {0x7, 0x6}, {0x3}, {0x2, 0x5}, {0x3, 0x5}, {0x6, 0x2}, {0x6, 0x9}, {0x2, 0x9}, {0x7, 0xa}, {0x4, 0x3}, {0x1, 0x1}, {0x3, 0x5}]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x2, 0x7, 0x1, 0x8, 0x8000, 0x1f, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x2, 0x9, 0x1ff, 0x8b9, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x6, 0x3, 0x30, 0x16, 0x36, 0x6, 0x6, 0x36, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x1, 0x1}, {0x2, 0x8}, {0x1, 0x5}, {0x6, 0x7}, {0x7, 0x6}, {0x5, 0x3}, {0x3}, {0x6}, {0x0, 0x2}, {0x3, 0x8}, {0x1}, {0x7, 0x1}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x60, 0x3, 0x3, 0x2, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x217e, 0x3, 0x40, 0x74a6, 0x7b91, 0x0, 0x5, 0x50c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ab8, 0xff, 0x3, 0x9, 0x7, 0x3f, 0x5, 0x85]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x20, 0x401, 0x20, 0x2, 0x1, 0x385b]}}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xac}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2c}]}]}, @NL80211_ATTR_TID_CONFIG={0x204, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x67}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x39}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x200}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x401}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x79}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xf8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x0, 0x1, 0x36, 0x18, 0x2f, 0xb, 0x6, 0x16, 0x6c, 0x18, 0xc, 0x16, 0x18, 0x4, 0x9, 0x4, 0x6, 0x60, 0x18, 0x0, 0x4, 0x59, 0x9, 0x9]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0x2, 0x18, 0x3, 0x18, 0x2, 0x16, 0x16, 0x9, 0xc, 0x36, 0x36, 0x24, 0x30, 0xc, 0x4b, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xc95, 0x6, 0x8, 0x3f, 0x0, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x484f01e40a2d97d0, 0x36, 0xc, 0x48, 0x2, 0x6, 0x1, 0x1, 0x3, 0x30, 0x12, 0x36, 0x48, 0x6c, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x5, 0x83c8, 0x8001, 0x6, 0x8a, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x9, 0x800, 0xfc0b, 0xf0c, 0x31, 0x400, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x0, 0x6, 0xe16, 0x401, 0xfff8, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7b}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xea}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x768}, 0x1, 0x0, 0x0, 0xc0}, 0x20004080) [ 81.705730][ T5244] bridge0: port 3(bond0) entered blocking state [ 81.715061][ T5244] bridge0: port 3(bond0) entered disabled state [ 81.724460][ T5244] bond0: entered allmulticast mode [ 81.730245][ T5244] bond_slave_0: entered allmulticast mode [ 81.737357][ T5244] bond_slave_1: entered allmulticast mode [ 81.748263][ T5244] bond0: entered promiscuous mode executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a37f200540600fe8000000000000200000000000000bbfe8000000000000000000000000000aa00004e223ba2302bd863db1ebe"], 0x0) [ 81.753882][ T5244] bond_slave_0: entered promiscuous mode [ 81.763502][ T5244] bond_slave_1: entered promiscuous mode [ 81.773389][ T5244] bridge0: port 3(bond0) entered blocking state [ 81.780210][ T5244] bridge0: port 3(bond0) entered forwarding state [ 81.797672][ T5114] syz-executor.1 (5114) used greatest stack depth: 19448 bytes left executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23000000}, 0x50) executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in, @in6=@mcast2}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c0001800a00010071756575650000001c00028006000140000000000600034000000000060002"], 0x84}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8}]}, 0x24}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x4}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x90) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000001c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x50) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)='s', 0x1}], 0x1, 0x2) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r3, 0x101, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8, 0xd}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000080)) (async) write$binfmt_misc(r2, 0x0, 0x50) (async) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)='s', 0x1}], 0x1, 0x2) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r3, 0x101, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8, 0xd}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) (async) [ 82.100807][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @private}, {}, 0x0, {0x2, 0x0, @private=0xa010101}, 'vcan0\x00'}) [ 82.178642][ T5256] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 82.235859][ T5258] netlink: 'syz-executor.4': attribute type 13 has an invalid length. executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x3}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x18, &(0x7f0000000000), 0x8) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x140, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x21080}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x3c}}, 0x0) [ 82.436888][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program 4: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tw'], 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000), 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r5, r4, 0x2, 0x6, 0x4000}, 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@i}]}, &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x27, 0xe80, 0x0, &(0x7f0000000040)="f8ad48cc02cb29fcc800775b86dd", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$int_in(r6, 0x5452, &(0x7f0000000640)=0x7) unshare(0x2000400) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000002a000900000300000000000004"], 0x18}, 0x1, 0x3000000}, 0x0) [ 82.702840][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) recvfrom$inet(r0, 0x0, 0xfffffffffffffd14, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) unshare(0x24020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="05000000010000", 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001d80)="8d", 0x1}], 0x1}, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)=""/34, 0x22}], 0x1, &(0x7f00000000c0), 0x0, 0x8d000000}, 0x0) [ 82.871745][ T5277] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}]}}}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpuset0'], 0xfffffffffffffe3a) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES32=r5], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0xb}, 0x1c) listen(r8, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r8, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="001d00000000000000ffffff7f2e8cf41d8953a29cc3821e108d725c328626a262ff8f9a5a76110cb1806ebe5b360904ea7f4827020b9383c4d416c835d63d79b851ad18464303b249922a28bae18f8bc41956aa2fc4fbae2d61f6e1d4f1a4f18c0d6a6d1b6186947c89c1b2df79dfb75cc3c962741025400be6a3cabdb13ca97f2d14b0029131f7e5f37c9b0cedff76474b6e3ae3cdac80cfdc41783c6d0e97d131dd9d564a846af0a76c44cc60d0114efd6ab409a53953a9226c25245d5902f05838282c334b994f1fa3df0100000092cab52120fc789cccf7650337a1898872e9071167d9ed6de922d6bea03e8555"], 0xf0) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd603f800000140600fe80006e6e00000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54c2000090780000"], 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}]}}}]}, 0x40}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x10) (async) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpuset0'], 0xfffffffffffffe3a) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES32=r5], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0xb}, 0x1c) (async) listen(r8, 0x0) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r8, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="001d00000000000000ffffff7f2e8cf41d8953a29cc3821e108d725c328626a262ff8f9a5a76110cb1806ebe5b360904ea7f4827020b9383c4d416c835d63d79b851ad18464303b249922a28bae18f8bc41956aa2fc4fbae2d61f6e1d4f1a4f18c0d6a6d1b6186947c89c1b2df79dfb75cc3c962741025400be6a3cabdb13ca97f2d14b0029131f7e5f37c9b0cedff76474b6e3ae3cdac80cfdc41783c6d0e97d131dd9d564a846af0a76c44cc60d0114efd6ab409a53953a9226c25245d5902f05838282c334b994f1fa3df0100000092cab52120fc789cccf7650337a1898872e9071167d9ed6de922d6bea03e8555"], 0xf0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd603f800000140600fe80006e6e00000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54c2000090780000"], 0x0) (async) [ 83.052903][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program 3: r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000680)) r2 = socket(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x2255}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newlink={0x16c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_EXT_MASK={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vcan0\x00'}, @IFLA_MAP={0x24}, @IFLA_NET_NS_FD={0x8}, @IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8}]}, @IFLA_PORT_SELF={0x3c, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "28b4002b5663cb76d95bb0caf82ee43d"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST, @IFLA_PORT_REQUEST]}, @IFLA_EXT_MASK={0x8}, @IFLA_PORT_SELF={0x84, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_1\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f04e63cfbb2bb1639c2154f49454513f"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "14fb27d080933f7b98acf55ef02e2305"}, @IFLA_PORT_PROFILE={0x7, 0x2, '!-\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x8, 0x2, '!..\x00'}, @IFLA_PORT_INSTANCE_UUID={0x55, 0x4, "c6a170f42b6a7a8592a81160d8ec8232"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}]}, 0x16c}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x58, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0xffffffffffffff53, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900000000000700060072720000080008000000000008000b"], 0x54}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e1208000a0000000401040016000a00014006001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) [ 83.260058][ T5280] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0xffffff7f, &(0x7f0000000200)={&(0x7f0000000940)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3b9}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x40}}, 0x0) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a37f200540600fe8000000000000300000000000000bbfe8000000000000000000000000000aa00004e223ba2302bd863db1ebe"], 0x0) [ 83.486155][ T5125] syz-executor.4 (5125) used greatest stack depth: 18832 bytes left [ 83.539948][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.551054][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.561041][ T5289] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 83.569664][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@migrate={0x9c, 0x11, [{@in6=@loopback, @in=@broadcast, @in=@rand_addr=0x64010101, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in6=@loopback, @in=@broadcast, @in, @in=@loopback}]}]}, 0xec}}, 0x0) (async) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x564}, {&(0x7f0000000400)=""/106, 0x14}, {&(0x7f0000000740)=""/73, 0x60}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400}) recvmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=""/87, 0x57}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000020c0)=ANY=[@ANYBLOB="04b10200", @ANYRES16=r3, @ANYBLOB="010000000000000000006500000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000001fc0)={0x768, r3, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2bc, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2a}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1ffe00000000}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1f0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x2}, {0x0, 0x7}, {0x4}, {0x7, 0x9}, {0x0, 0x4}, {0x6, 0x7}, {0x2, 0x8}, {0x4, 0x8}, {0x7}, {0x7, 0x7}, {0x0, 0x3}, {0x2, 0xa}, {0x2, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfa, 0x0, 0x2, 0x9, 0x3, 0x7, 0x3ff, 0x4]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1ff, 0x9, 0x9, 0x401, 0x8, 0x6, 0x1ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xd30, 0xfe01, 0x7f, 0x52, 0x1, 0xfff7, 0x84]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x7, 0x81, 0x101, 0x9, 0x1, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x5, 0x0, 0x7, 0x0, 0x400, 0x2, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0xfff, 0x7, 0x800, 0x200, 0xebc1, 0x81]}}]}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x2eb, 0x40, 0x8, 0x0, 0x1, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x8001, 0x8, 0x7, 0x3, 0x3, 0xffff, 0x5]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x4}, {0x5}, {0x1, 0x5}, {0x7, 0x2}, {0x0, 0x7}, {0x5, 0x9}, {0x6, 0x5}, {0x1, 0x5}, {0x0, 0x3}, {0x2, 0xa}, {0x2, 0x5}, {0x6, 0xa}, {0x7, 0x5}, {0x5, 0x7}, {0x5, 0x6}, {0x0, 0x3}, {0x5}, {0x3, 0x4}, {0x0, 0x2}, {0x4, 0xa}, {0x7, 0x4}, {0x6, 0x6}, {0x4, 0x4}, {0x2, 0x2}, {0x1}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0x9}, {0x0, 0x7}, {0x0, 0x3}, {0x1, 0x6}, {0x2}, {0x1, 0xa}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x7, 0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x5}, {0x5, 0x3}, {0x2, 0x9}, {0x7, 0x9}, {0x2, 0x4}, {0x4, 0x7}, {0x4, 0x9}, {0x0, 0x4}, {0x1, 0xa}, {0x2, 0x3}, {0x7, 0x2}, {0x6, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x6, 0x7, 0x7fff, 0x8001, 0x7ff, 0x100]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x3, 0x3, 0x100, 0x3, 0xacab, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x11}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x28, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x68e7, 0x2, 0x6, 0xffff, 0x6, 0x0, 0x4, 0x81]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x260, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x50}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1e}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x84}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x1d4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x12, 0x1b, 0x6, 0x3, 0x48, 0xc, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x0, 0x2, 0x9, 0x3, 0x9, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x7ff, 0x6, 0xffe3, 0x4, 0x3, 0x8, 0xd8b6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8001, 0x7, 0x1000, 0x8, 0x101, 0xa4, 0x3ff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0xfffd, 0x19, 0x400, 0x7874, 0x7, 0x6, 0xca75]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x48, 0x3, 0x12, 0x2, 0x30, 0x36, 0xc]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x3}, {0x4}, {0x0, 0x4}, {0x6, 0x1}, {0x1, 0x3}, {0x3, 0x6}, {0x4, 0x4}, {0x3}, {0x1, 0xa}, {0x7}, {0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x4}, {0x3}, {0x1, 0xa}, {0x4, 0x4}, {0x4, 0x3}, {0x6, 0x6}, {0x1, 0x3}, {0x3, 0x9}, {0x7, 0x2}, {0x6, 0x6}, {0x0, 0x6}, {0x7, 0x8}, {0x6, 0x8}, {0x0, 0x7}, {0x2, 0x2}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x8}, {0x0, 0x3}, {0x4, 0x8}, {0x6, 0x4}, {0x6, 0x8}, {0x0, 0x2}, {0x7, 0x6}, {0x3}, {0x2, 0x5}, {0x3, 0x5}, {0x6, 0x2}, {0x6, 0x9}, {0x2, 0x9}, {0x7, 0xa}, {0x4, 0x3}, {0x1, 0x1}, {0x3, 0x5}]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x2, 0x7, 0x1, 0x8, 0x8000, 0x1f, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x2, 0x9, 0x1ff, 0x8b9, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x6, 0x3, 0x30, 0x16, 0x36, 0x6, 0x6, 0x36, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x1, 0x1}, {0x2, 0x8}, {0x1, 0x5}, {0x6, 0x7}, {0x7, 0x6}, {0x5, 0x3}, {0x3}, {0x6}, {0x0, 0x2}, {0x3, 0x8}, {0x1}, {0x7, 0x1}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x60, 0x3, 0x3, 0x2, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x217e, 0x3, 0x40, 0x74a6, 0x7b91, 0x0, 0x5, 0x50c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ab8, 0xff, 0x3, 0x9, 0x7, 0x3f, 0x5, 0x85]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x20, 0x401, 0x20, 0x2, 0x1, 0x385b]}}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xac}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2c}]}]}, @NL80211_ATTR_TID_CONFIG={0x204, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x67}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x39}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x200}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x401}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x79}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xf8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x0, 0x1, 0x36, 0x18, 0x2f, 0xb, 0x6, 0x16, 0x6c, 0x18, 0xc, 0x16, 0x18, 0x4, 0x9, 0x4, 0x6, 0x60, 0x18, 0x0, 0x4, 0x59, 0x9, 0x9]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0x2, 0x18, 0x3, 0x18, 0x2, 0x16, 0x16, 0x9, 0xc, 0x36, 0x36, 0x24, 0x30, 0xc, 0x4b, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xc95, 0x6, 0x8, 0x3f, 0x0, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x484f01e40a2d97d0, 0x36, 0xc, 0x48, 0x2, 0x6, 0x1, 0x1, 0x3, 0x30, 0x12, 0x36, 0x48, 0x6c, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x5, 0x83c8, 0x8001, 0x6, 0x8a, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x9, 0x800, 0xfc0b, 0xf0c, 0x31, 0x400, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x0, 0x6, 0xe16, 0x401, 0xfff8, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7b}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xea}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x768}, 0x1, 0x0, 0x0, 0xc0}, 0x20004080) [ 83.588311][ T5116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.598056][ T5289] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 83.606737][ T5116] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.614178][ T5116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.688633][ T5289] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 0: r0 = socket(0x10, 0x803, 0x6) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0xfffd, 0xbff0ce479750336c}, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x1, 0x0, 0x0) [ 83.794505][ T5289] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 83.837681][ T5289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.896046][ T5293] IPVS: persistence engine module ip_vs_pe_U" not found [ 83.945667][ T5303] netlink: 'syz-executor.0': attribute type 3 has an invalid length. executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x3}, 0x48) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000f80)}], 0x1}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='mm_page_alloc\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x81842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket(0x200000100000011, 0x803, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) syz_init_net_socket$rose(0xb, 0x5, 0x0) unshare(0x8000400) executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @private}, {}, 0x0, {0x2, 0x0, @private=0xa010101}, 'vcan0\x00'}) executing program 3: syz_emit_ethernet(0x5b, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @link_local, @void, {@llc_tr={0x11, {@llc={0x1, 0xe, "fc", "02333d77acea4401fd110abe0617a0b04fc0b196c79f3138c954f05669fa1a6fc4f3d5b225a300316066246487f512090eac31d615f1608f1d722c333f3e1af3c04f60603f90781cd701"}}}}}, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x2e8, r0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xea, 0x4, "e6334b76ef303ebf185aa312abd2b67886f05a8ddd57869a25a312123cccb1cb67c35fe5d73d1b451d971d8ddfbbfb97ac64734e91c81cae47ad0bedb815595a5219a0ab423e3b68c9ed2ce7a1afc15737f3c96ca7a2096cbd76fe9a6a9fb67ad1f9cf8198ba329de9113947238d3ed0db8be3d83d9dc56d8c3f161daac55893136cb090f4d821d4501270a6886a816066456f47a5da08efb73b53be4ff2b358d8b2a3556f3f5104b4632c815d8e79b94481b00bf8e326aff9305d2554d9e111b486acddc88b6f64f0bb0b5d80196c30aa21e07adb36370dee302cc1a9f24fabfa8bd0fbc06c"}, @ETHTOOL_A_BITSET_MASK={0xd5, 0x5, "591629516a2013e73848c83b52427a8515790ccb4d38780b361a365a287812eecdad7f52bd4476681885ecb6f874e10a3587bf9466c11580e70c9fee349fe7bdb51a3dd441b737ec82dfbbea8b6ac594b4142834cfa4013a71940297d06574428d35bf0ef3da3b2d08083f0b5eeef32b21ce7e6ac8647654bc8c20391856f975c76335e66b6c6b1904cfa5d2118896218d5768d973f4b77e024d33d65998420cdb9c02ae26dce70e89192051014efb72cf74f06dd211b8c4628024820bef5b50bf79aec8435991eed615025b98f82e7417"}]}, @ETHTOOL_A_FEATURES_WANTED={0xe8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7bf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x99, 0x5, "396aa321c417fceea7c55de0ecdb95e519d4a3382b52bc6584abcb200885ba04e4d978596efec56425aca096c7b0bafad9e8fa69cfb01ba5413f512a5e47c8586501019efdd747055a22f153ac422646dc2b683542782f9ca9cb5243571f15c3692f1575dd89ef143ee74248461efb7a836586fb2235f655c7c7882a4cc582ea3e2e369c2290cb27609c7d60676cede2f9098ac6ef"}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x74, r1, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "80147537d6928a13b6878ed208a31dda7c72154d741916e93d3c9205ae4e41d6"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0xfffffff9, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000016c0)={r2, &(0x7f0000000680)="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", &(0x7f0000001680)=@buf="04dd9756a79c1b53bbb47a9a7729bd14d4d1e921de8cf51b0e559c2a1b9fe2a318b0e37e2823", 0x2}, 0x20) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000001700)={0x0, 0x1ff}, &(0x7f0000001740)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001780)={r4, @in6={{0xa, 0x4e24, 0x800, @loopback, 0x7}}, 0x9, 0x8d2a, 0x0, 0x9, 0xc6, 0x99, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001840)={r4, @in6={{0xa, 0x4e20, 0x400, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7fffffff}}, 0x200, 0x1, 0x2f54, 0x8, 0x6, 0xfffffffb}, 0x9c) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001900), 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000019c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x1c, r6, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000001bc0)={&(0x7f0000001ac0), 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x7c, r6, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x15}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x10001}, @NL80211_ATTR_PMK={0x14, 0xfe, "6ef45d0200b328b7df9b1efa58add79f"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1f}, @NL80211_ATTR_MAC={0xa, 0x6, @random="73446337a70c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}}, 0x4004804) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000001c00)='yeah\x00', 0x5) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x5a, &(0x7f0000001c40)={@random="d8f8c8722472", @multicast, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@canfd={0xd, {{0x4, 0x1, 0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, "3b958bd34a53e8607cdfbd893c792057739de231f8a591b1ecc02d79db76397f2c55555e9e05bec83d1574326e3090426ad73b32784b0a616dc9f682b2d32b9f"}}}}, &(0x7f0000001cc0)={0x0, 0x1, [0x6a7, 0xe3b, 0xe97, 0xffffff81]}) r9 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000001d00)={'batadv_slave_0\x00'}) r10 = socket(0x23, 0x1263155fd937db5f, 0xee) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x30, r6, 0x4, 0x10000, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x12}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x401}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x1b, &(0x7f0000001e40)=""/216, &(0x7f0000001f40)=0xd8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000001f80)={r4, @in6={{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, 0x1f, 0x7f}, 0x90) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000002040)={0x5, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002080)={r11, 0x2, 0x8}, 0xc) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f0000002280)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002240)={&(0x7f0000002140)={0xe0, r12, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xf89}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1de1b260}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) [ 84.023021][ T35] bridge_slave_1: left allmulticast mode [ 84.059664][ T35] bridge_slave_1: left promiscuous mode [ 84.098191][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.177200][ T35] bridge_slave_0: left allmulticast mode [ 84.182919][ T35] bridge_slave_0: left promiscuous mode executing program 3: unshare(0x22020600) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x22, &(0x7f0000000940)={@link_local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}]]}, 0x24}}, 0x0) [ 84.218086][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.441743][ T5313] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.683196][ T5116] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.698183][ T5116] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.707802][ T5116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.716616][ T5116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.724832][ T5116] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.734833][ T5116] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.922100][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.938998][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.955300][ T35] bond0 (unregistering): Released all slaves executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x0, {0x80, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040), 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e22, 0x0, @loopback, 0x200}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x6a) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001080)={0xa4, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x72, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0xa4}}, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001c00)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0xfe}, @IFLA_IPTUN_FLAGS={0x6}]}}}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001c00)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0xfe}, @IFLA_IPTUN_FLAGS={0x6}]}}}]}, 0x40}}, 0x0) (async) executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000240)=ANY=[@ANYBLOB="001d00000000000000e67e38b12e8cf41d8953a29cc3821e108d725c328626a29a9eb9505a76110cb1806ebe5b360904ea7f4827020b9383c4d416c835d63d79b851ad18464303b249922a28bae18f8bc41956aa2fc4fbae2d61f6e1d4f1a4f18c0d6a6d1b6186947c89c1b2df79dfb75cc3c962741025400be6a3cabdb13ca97f2d14b0029131f7e5f37c9b0cedff76474b3437fee2a1c8b4a941783c6d0e97d131dd9d564a846af0a76c7e0d637913e83557b409a53953a9226c25245d5902f05838282c334b994f1fa3dfda4fb88392cab52120fc789cccf7650337a1898872e9071167d9ed6de922d6bea03e855558db0155139627908fafe8"], 0xf0) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd603f800000140600fe80000000000000000000a4e5d7b90200000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54c2000090780000"], 0x0) executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=@bridge_getneigh={0x28, 0x1e, 0x901, 0x0, 0x0, {}, [@IFLA_MASTER={0x4}]}, 0x28}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080), 0xfd32) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) socket(0x200000100000011, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r7, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x55fa}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r6, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r7], 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'bond_slave_0\x00', 0x100}) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f0000000940)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3b9}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x40}}, 0x0) executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a37f200540600fe8000000000000400000000000000bbfe8000000000000000000000000000aa00004e223ba2302bd863db1ebe"], 0x0) [ 85.639402][ T4489] Bluetooth: hci0: command tx timeout [ 85.664709][ T5340] netlink: 'syz-executor.2': attribute type 10 has an invalid length. executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pimreg1\x00', 0x1}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x1, 0x0, 0x0) unshare(0x22020400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x100004, 0x220104, 0xb, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000000c0)={r1, &(0x7f0000000380), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000200)=0x1, 0x4) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="4000000010001fff000000000000f4f309000000", @ANYRES32=0x0, @ANYBLOB="81ff06ff00000000180012800e000100776972656775617264"], 0x40}}, 0x0) executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x564}, {&(0x7f0000000400)=""/106, 0x14}, {&(0x7f0000000740)=""/73, 0x60}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000340)={0x2, 0x4e23, 0x0, @dev}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e237f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710a6960000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) recvmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=""/87, 0x57}, 0x0) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9cadb83804d55e1b0000000000000000021800000000fd000000000008000100ac14140004ea6e0000000000"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000100084aa9e6f152eb239040000000000000000000003e4a4b5e0635fdbc87ee86142473e909f9c11", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100736974001400028005000400000000000500050000000000"], 0x40}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYRES32=0x0], &(0x7f0000000440)='GPL\x00', 0x8, 0x54, &(0x7f0000000480)=""/84}, 0x90) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newae={0xb8, 0x1e, 0x400, 0x70bd25, 0x25dfdbfb, {{@in6=@remote, 0x4d4, 0xa, 0x2b}, @in=@local, 0x762}, [@proto={0x5, 0x19, 0x32}, @extra_flags={0x8, 0x18, 0x1}, @lifetime_val={0x24, 0x9, {0x50, 0x100000001, 0x395}}, @address_filter={0x28, 0x1a, {@in6=@mcast2, @in6=@empty, 0x2, 0x6c, 0x6}}, @proto={0x5, 0x19, 0x32}, @srcaddr={0x14, 0xd, @in=@multicast2}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4011}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r4 = socket(0x10, 0x80002, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000340)={0xff, 0xfff, 0x8b, 0x3}, 0x10) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 86.047996][ T35] hsr_slave_0: left promiscuous mode [ 86.072413][ T35] hsr_slave_1: left promiscuous mode [ 86.084352][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.092558][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.148034][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.166392][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.220401][ T35] veth1_macvtap: left promiscuous mode [ 86.226766][ T35] veth0_macvtap: left promiscuous mode [ 86.233380][ T35] veth1_vlan: left promiscuous mode [ 86.240500][ T35] veth0_vlan: left promiscuous mode [ 86.835372][ T35] team0 (unregistering): Port device team_slave_1 removed [ 86.843707][ T4489] Bluetooth: hci4: command tx timeout [ 86.884277][ T35] team0 (unregistering): Port device team_slave_0 removed [ 87.092276][ T25] cfg80211: failed to load regulatory.db [ 87.304206][ T5354] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 87.314722][ T5354] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @private}, {}, 0x0, {0x2, 0x0, @private=0xa010101}, 'vcan0\x00'}) [ 87.335478][ T5354] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 87.374826][ T5364] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.398131][ T5364] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.407010][ T5364] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x22, &(0x7f0000000940)={@link_local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}]]}, 0x24}}, 0x0) [ 87.418008][ T5364] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.431124][ T5364] vxlan0: entered promiscuous mode [ 87.485592][ T5364] vxlan0: entered allmulticast mode [ 87.505095][ T5364] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.514082][ T5364] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.523039][ T5364] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.532009][ T5364] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 executing program 0: sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc) sendmsg$inet(r0, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000540)="83ac6f4b9a10fa25922fee4db5d86075d7965b13", 0xffeb}], 0x1}, 0x0) executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040), 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e22, 0x0, @loopback, 0x200}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x6a) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 87.687041][ T5364] syz-executor.2 (5364) used greatest stack depth: 18736 bytes left [ 87.745989][ T4489] Bluetooth: hci0: command tx timeout executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, 0xffffffffffffffff, 0x37, 0x0, 0x4, @prog_fd}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0xe, 0x0, &(0x7f00000002c0)="69d387051eaf71a0486e5c660000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 2: unshare(0x2000400) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0, r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0xfe}, @IFLA_IPTUN_FLAGS={0x6}]}}}]}, 0x40}}, 0x0) [ 87.962674][ T5287] chnl_net:caif_netlink_parms(): no params data found executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xf0) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd603f800000140600fe80000000000000000000a4e5d7b90200000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54c2000090780000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r2, 0x0) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xf0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd603f800000140600fe80000000000000000000a4e5d7b90200000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54c2000090780000"], 0x0) (async) executing program 3: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tw'], 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r3 = accept4(r2, 0x0, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r5, r4, 0x2, 0x6, 0x4000}, 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@i}]}, &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x27, 0xe80, 0x0, &(0x7f0000000040)="f8ad48cc02cb29fcc800775b86dd", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$int_in(r6, 0x5452, &(0x7f0000000640)=0x7) unshare(0x2000400) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x33fe0, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x21080}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x3c}}, 0x0) [ 88.282184][ T5314] chnl_net:caif_netlink_parms(): no params data found executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)={0x10, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3b9}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x40}}, 0x0) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x6e20, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0xfffffff7, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x6e20, 0x0, @loopback={0xfc}}, 0x1c) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r3, 0x101, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8, 0xd}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000300)="bfa3ae9daec480034c8bdaef3fd8669643196a4b92ec8fd43428e118575915f61a8166db1863fcdc034f07cdacaa1ac0ab59b22d3c0a029acb3d91", 0x3b}, {0x0}, {&(0x7f00000006c0)="5335d5a8f4", 0x5}], 0x3}}], 0x1, 0x0) r2 = socket(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) socket$inet6(0xa, 0x1, 0x3) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000000080)=""/4051, &(0x7f0000001180)=0xffb7) getsockopt$nfc_llcp(r2, 0x114, 0x1, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8917, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x0, @broadcast}}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xb03}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000001080)={r6, 0x3, 0xe8, "b39958ae63b3ab57bfc8f9d67b7a0e03e3ea8ebf421cbe2a7143ee69db31effc4da28ff4679fa1d0a1ff9604c4c628abd4494ac40ce4899389bbbef67691752e02d90baad987c2330cb36f0063a72f684fee470d7d123edae638078eb9c20274cb5e9d5c545a2dca51f838bfb4dca9a9fc92cfe5a2b4a5e3d4383defafce75e62f08b2d2adb70cdfd3e47da56b818e4532a0074d0a0bfaf2586eb68b53ef48afbae9c2da6bc39661ba456c442c1a8b4b1ea6cd747acf2f6632ded0f6c9d570c3f0bf43435e50dbcf7607f0dabd220cb37d05648bf707f8ca0173688e642da677f10c580d326bd848"}, 0xf0) [ 88.687910][ T5407] netlink: 'syz-executor.2': attribute type 13 has an invalid length. executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @private}, {}, 0x0, {0x2, 0x0, @private=0xa010101}, 'vcan0\x00'}) [ 88.916372][ T4489] Bluetooth: hci4: command tx timeout executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x22, &(0x7f0000000940)={@link_local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}]]}, 0x24}}, 0x0) executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x10, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES16=0x0], 0x128}, 0x4000830) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000140), 0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x32) sendmmsg$inet(r3, &(0x7f0000004b40)=[{{&(0x7f0000000c40)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0}}, {{&(0x7f0000003080)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0}}], 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1e, 0x0, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80000000, 0x0, 0x1000}, 0x48) r5 = epoll_create1(0x0) socket(0x1, 0x80802, 0x0) r6 = epoll_create1(0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010800000000000000000000000014000780080011400000000005001500030000000500010006000000050005000a08000005000400000000000900020073797a31000000000c000300686173683a497000"], 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000a00)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, &(0x7f0000000080), 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x1312, 0x4) sendmsg$can_raw(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x1d, r9}, 0x10, &(0x7f0000000300)={&(0x7f00000005c0)=@can={{}, 0x0, 0x1, 0x0, 0x0, "d56f3900"}, 0x10}}, 0x44000) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="d001000016000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000ac000700e000000100"/228, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c0013007f000001000000000000000000000000ffffffff00"/156], 0x1d0}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000000d}) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 89.056214][ T5287] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.063421][ T5287] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.116825][ T5287] bridge_slave_0: entered allmulticast mode [ 89.124383][ T5287] bridge_slave_0: entered promiscuous mode [ 89.166031][ T5287] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.189305][ T5287] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.203988][ T5287] bridge_slave_1: entered allmulticast mode [ 89.213504][ T5428] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.2'. [ 89.238385][ T5287] bridge_slave_1: entered promiscuous mode executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x564}, {&(0x7f0000000400)=""/106, 0x14}, {&(0x7f0000000740)=""/73, 0x60}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400}) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000340)={0x2, 0x4e23, 0x0, @dev}, 0x1c) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e237f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710a6960000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) recvmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=""/87, 0x57}, 0x0) [ 89.321244][ T5314] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.331143][ T5314] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.343769][ T5314] bridge_slave_0: entered allmulticast mode [ 89.353253][ T5314] bridge_slave_0: entered promiscuous mode [ 89.440780][ T5314] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.476627][ T5314] bridge0: port 2(bridge_slave_1) entered disabled state executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040), 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e22, 0x0, @loopback, 0x200}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x6a) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 89.497073][ T5314] bridge_slave_1: entered allmulticast mode [ 89.512237][ T5314] bridge_slave_1: entered promiscuous mode executing program 0: socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000400)=r0, 0x4) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_getrule={0x1c, 0x22, 0x810, 0x70bd2d, 0x25dfdbfb, {0x2, 0x80, 0x10, 0x42, 0xd7, 0x0, 0x0, 0x2, 0x10}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x40) [ 89.610196][ T5287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='snd_soc_jack_irq\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r6, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="00000200000000000000", @ANYRES32=r6, @ANYBLOB="08000200ac14140008000100e000000208000800e66fa7de"], 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f52100000000000000000000000a00"/28], 0x1c}}, 0x0) recvfrom$inet6(r2, &(0x7f0000000580)=""/4096, 0x1000, 0x10100, &(0x7f0000000400)={0xa, 0x4e22, 0x0, @loopback, 0x7}, 0x1c) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}, 0x1, 0x200000000000000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) listen(r0, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, "bb67a153cd0e3e4a1aac449e5ad88b56923d9dfe", "b1610538917aa875e9b6000000007aa56a33d100"}) unshare(0x20000600) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000080)={0x2, 0x2000, @loopback}, 0x10) setsockopt$RDS_FREE_MR(r10, 0x114, 0x3, &(0x7f0000000000)={{0x10000, 0x1000}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x90) r11 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x4000900) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, &(0x7f0000000000)=ANY=[], 0x110) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) [ 89.796228][ T4489] Bluetooth: hci0: command tx timeout [ 89.827871][ T5287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.896596][ T5440] Zero length message leads to an empty skb [ 89.913375][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.924100][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.937249][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.947398][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.949055][ T5314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.957960][ T5116] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.971217][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 executing program 0: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tw'], 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r3 = accept4(r2, 0x0, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r5, r4, 0x2, 0x6, 0x4000}, 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@i}]}, &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x27, 0xe80, 0x0, &(0x7f0000000040)="f8ad48cc02cb29fcc800775b86dd", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$int_in(r6, 0x5452, &(0x7f0000000640)=0x7) unshare(0x2000400) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x6, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_RT_PRIORITY={0x8}]}, 0x28}}, 0x0) [ 90.058079][ T5314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4f8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c956fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d68d7489cfcb0176"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c000000ed80bf5719377d65cbbdf0e5d44c602321d6e1c92d9da1c98c57c906994eed69d5c89f83bc747886190d1819e7fb98e6f6f2b9cf319bfd5f45fa1e69d8cf3996c45d57fed029fb3242a1bddb1d87986d53702af87025c8187c647362d8c17623c643d618dcfe", @ANYRES16=r5, @ANYBLOB="050000000000000000001400000018000180140002006e657464657673696d3000000000000008000400000000000800050000000000"], 0x3c}}, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) socket$nl_generic(0x10, 0x3, 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001640)=""/176, 0xb0}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f00000041c0)=[{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000400)="7ff67e96dc56cf64a2aa76f2a4f29eb4", 0x10}], 0x1, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f00000000c0)={0x0, 0x1d, '\x00', [@generic={0x0, 0xe6, "7e38b12e8cf41d8953a29cc3821e108d725c328626a29a9eb9505a76110cb1806ebe5b360904ea7f4827020b9383c4d416c835d63d79b851ad18464303b249922a28bae18f8bc41956aa2fc4fbae2d61f6e1d4f1a4f18c0d6a6d1b6186947c89c1b2df79dfb75cc3c962741025400be6a3cabdb13ca97f2d14b0029131f7e5f37c9b0cedff76474b3437fee2a1c8b4a941783c6d0e97d131dd9d564a846af0a76c7e0d637913e83557b409a53953a9226c25245d5902f05838282c334b994f1fa3dfda4fb88392cab52120fc789cccf7650337a1898872e9071167d9ed6de922d6bea03e8555"}]}, 0xf0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "3f8000", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) [ 90.253160][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.344740][ T5287] team0: Port device team_slave_0 added [ 90.380582][ T5287] team0: Port device team_slave_1 added executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0xfffffdef, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x21080}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x3c}}, 0x0) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x6e20, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0xfffffff7, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x6e20, 0x0, @loopback={0xfc}}, 0x1c) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r3, 0x101, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8, 0xd}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) [ 90.510201][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.660475][ T5463] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 90.684063][ T5314] team0: Port device team_slave_0 added [ 90.703411][ T5314] team0: Port device team_slave_1 added executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c00000002060704db406e3e7700000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000000000050001000600000024000780080008400000137906000440fffff000060005400700000008000640"], 0x6c}}, 0x0) [ 90.805226][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.857628][ T5287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.864649][ T5287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x22, &(0x7f0000000940)={@link_local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}]]}, 0x24}}, 0x0) [ 90.909540][ T5287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.996354][ T5116] Bluetooth: hci4: command tx timeout [ 91.038991][ T5314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.050461][ T5314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.078079][ T5314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.123556][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.148054][ T5287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.155075][ T5287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.182055][ T5287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x10}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x10, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES16=0x0], 0x128}, 0x4000830) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000140), 0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x32) sendmmsg$inet(r3, &(0x7f0000004b40)=[{{&(0x7f0000000c40)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0}}, {{&(0x7f0000003080)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0}}], 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1e, 0x0, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80000000, 0x0, 0x1000}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1e, 0x0, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80000000, 0x0, 0x1000}, 0x48) r5 = epoll_create1(0x0) socket(0x1, 0x80802, 0x0) r6 = epoll_create1(0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010800000000000000000000000014000780080011400000000005001500030000000500010006000000050005000a08000005000400000000000900020073797a31000000000c000300686173683a497000"], 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000a00)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000a00)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, &(0x7f0000000080), 0x4) (async) setsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, &(0x7f0000000080), 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x1312, 0x4) sendmsg$can_raw(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x1d, r9}, 0x10, &(0x7f0000000300)={&(0x7f00000005c0)=@can={{}, 0x0, 0x1, 0x0, 0x0, "d56f3900"}, 0x10}}, 0x44000) (async) sendmsg$can_raw(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x1d, r9}, 0x10, &(0x7f0000000300)={&(0x7f00000005c0)=@can={{}, 0x0, 0x1, 0x0, 0x0, "d56f3900"}, 0x10}}, 0x44000) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="d001000016000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000ac000700e000000100"/228, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c0013007f000001000000000000000000000000ffffffff00"/156], 0x1d0}}, 0x0) (async) sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="d001000016000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000ac000700e000000100"/228, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c0013007f000001000000000000000000000000ffffffff00"/156], 0x1d0}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000000d}) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000000d}) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 91.309288][ T5314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.317982][ T5474] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 91.326084][ T5314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.403204][ T5314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.495678][ T5479] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.2'. [ 91.510711][ T5477] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.2'. [ 91.621358][ T4489] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.625024][ T5314] hsr_slave_0: entered promiscuous mode [ 91.640808][ T4489] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.649097][ T5314] hsr_slave_1: entered promiscuous mode [ 91.656015][ T4489] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.676561][ T4489] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.688275][ T4489] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.700655][ T4489] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7ff, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x14e22, 0x0, @loopback, 0x200}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x6a) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) splice(r0, &(0x7f0000000000)=0x6, r0, &(0x7f0000000040)=0x3, 0x20, 0x1) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x50, r1, 0x1, 0x0, 0x0, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}}, 0x0) [ 91.863711][ T5287] hsr_slave_0: entered promiscuous mode [ 91.875471][ T5287] hsr_slave_1: entered promiscuous mode [ 91.885827][ T5116] Bluetooth: hci0: command tx timeout [ 91.902360][ T5287] debugfs: Directory 'hsr0' with parent 'hsr' already present! executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) [ 91.912652][ T5287] Cannot create hsr debugfs directory executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='snd_soc_jack_irq\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r6, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="00000200000000000000", @ANYRES32=r6, @ANYBLOB="08000200ac14140008000100e000000208000800e66fa7de"], 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f52100000000000000000000000a00"/28], 0x1c}}, 0x0) recvfrom$inet6(r2, &(0x7f0000000580)=""/4096, 0x1000, 0x10100, &(0x7f0000000400)={0xa, 0x4e22, 0x0, @loopback, 0x7}, 0x1c) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}, 0x1, 0x200000000000000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) listen(r0, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, "bb67a153cd0e3e4a1aac449e5ad88b56923d9dfe", "b1610538917aa875e9b6000000007aa56a33d100"}) unshare(0x20000600) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000080)={0x2, 0x2000, @loopback}, 0x10) setsockopt$RDS_FREE_MR(r10, 0x114, 0x3, &(0x7f0000000000)={{0x10000, 0x1000}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x90) r11 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x4000900) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, &(0x7f0000000000)=ANY=[], 0x110) [ 92.038137][ T5116] Bluetooth: hci2: command tx timeout [ 92.083242][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program 2: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tw'], 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r3 = accept4(r2, 0x0, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r5, r4, 0x2, 0x6, 0x4000}, 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@i}]}, &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x27, 0xe80, 0x0, &(0x7f0000000040)="f8ad48cc02cb29fcc800775b86dd", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$int_in(r6, 0x5452, &(0x7f0000000640)=0x7) unshare(0x2000400) [ 92.228833][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a37f200540600fe8000000000000500000000000000bbfe8000000000000000000000000000aa00004e223ba2302bd863db1ebe"], 0x0) [ 92.363038][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.480709][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.737529][ T5117] syz-executor.2 (5117) used greatest stack depth: 18608 bytes left [ 93.006895][ T35] bridge_slave_1: left allmulticast mode [ 93.013233][ T35] bridge_slave_1: left promiscuous mode [ 93.038239][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.079149][ T5116] Bluetooth: hci4: command tx timeout [ 93.098078][ T35] bridge_slave_0: left allmulticast mode [ 93.103800][ T35] bridge_slave_0: left promiscuous mode [ 93.137233][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.165822][ T35] bridge_slave_1: left allmulticast mode [ 93.181441][ T35] bridge_slave_1: left promiscuous mode [ 93.197705][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.218353][ T35] bridge_slave_0: left allmulticast mode [ 93.224065][ T35] bridge_slave_0: left promiscuous mode [ 93.247153][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.590963][ T4489] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.600198][ T4489] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.609280][ T4489] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.619422][ T4489] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.628620][ T4489] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.636174][ T4489] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.796152][ T4489] Bluetooth: hci3: command tx timeout [ 94.089712][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.102974][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.114880][ T35] bond0 (unregistering): Released all slaves [ 94.128113][ T4489] Bluetooth: hci2: command tx timeout [ 94.199093][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.211905][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.223998][ T35] bond0 (unregistering): Released all slaves [ 94.237931][ T5441] chnl_net:caif_netlink_parms(): no params data found [ 94.612521][ T5480] chnl_net:caif_netlink_parms(): no params data found [ 94.704414][ T5441] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.719114][ T5441] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.726813][ T5441] bridge_slave_0: entered allmulticast mode [ 94.733931][ T5441] bridge_slave_0: entered promiscuous mode [ 94.749900][ T5441] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.761104][ T5441] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.768458][ T5441] bridge_slave_1: entered allmulticast mode [ 94.775591][ T5441] bridge_slave_1: entered promiscuous mode [ 94.949012][ T5441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.043723][ T5441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.065223][ T5480] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.072782][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.083039][ T5480] bridge_slave_0: entered allmulticast mode [ 95.090917][ T5480] bridge_slave_0: entered promiscuous mode [ 95.101562][ T5480] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.109346][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.117873][ T5480] bridge_slave_1: entered allmulticast mode [ 95.126474][ T5480] bridge_slave_1: entered promiscuous mode [ 95.232067][ T5441] team0: Port device team_slave_0 added [ 95.242189][ T5441] team0: Port device team_slave_1 added [ 95.294761][ T5480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.312076][ T5480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.321691][ T5287] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.336386][ T5287] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.346920][ T5287] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.410519][ T35] hsr_slave_0: left promiscuous mode [ 95.418123][ T35] hsr_slave_1: left promiscuous mode [ 95.424052][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.431978][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.448906][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.456489][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.469704][ T35] hsr_slave_0: left promiscuous mode [ 95.475735][ T35] hsr_slave_1: left promiscuous mode [ 95.486957][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.494401][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.503063][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.510757][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.546583][ T35] veth1_macvtap: left promiscuous mode [ 95.552228][ T35] veth0_macvtap: left promiscuous mode [ 95.558143][ T35] veth1_vlan: left promiscuous mode [ 95.563540][ T35] veth0_vlan: left promiscuous mode [ 95.570432][ T35] veth1_macvtap: left promiscuous mode [ 95.576076][ T35] veth0_macvtap: left promiscuous mode [ 95.581769][ T35] veth1_vlan: left promiscuous mode [ 95.587279][ T35] veth0_vlan: left promiscuous mode [ 95.726738][ T4489] Bluetooth: hci1: command tx timeout [ 95.881434][ T4489] Bluetooth: hci3: command tx timeout [ 96.126409][ T35] team0 (unregistering): Port device team_slave_1 removed [ 96.160422][ T35] team0 (unregistering): Port device team_slave_0 removed [ 96.196496][ T4489] Bluetooth: hci2: command tx timeout [ 96.778182][ T35] team0 (unregistering): Port device team_slave_1 removed [ 96.818722][ T35] team0 (unregistering): Port device team_slave_0 removed [ 97.201677][ T5287] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.217451][ T5441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.224527][ T5441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.253669][ T5441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.291701][ T5480] team0: Port device team_slave_0 added [ 97.315551][ T5480] team0: Port device team_slave_1 added [ 97.338593][ T5441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.345583][ T5441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.373516][ T5441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.522619][ T5480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.530255][ T5480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.557205][ T5480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.571046][ T5480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.578593][ T5480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.606055][ T5480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.657269][ T5441] hsr_slave_0: entered promiscuous mode [ 97.668805][ T5441] hsr_slave_1: entered promiscuous mode [ 97.675135][ T5441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.683506][ T5441] Cannot create hsr debugfs directory [ 97.798018][ T4489] Bluetooth: hci1: command tx timeout [ 97.809150][ T5513] chnl_net:caif_netlink_parms(): no params data found [ 97.839977][ T5480] hsr_slave_0: entered promiscuous mode [ 97.849020][ T5480] hsr_slave_1: entered promiscuous mode [ 97.855298][ T5480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.863283][ T5480] Cannot create hsr debugfs directory [ 97.958181][ T4489] Bluetooth: hci3: command tx timeout [ 98.197079][ T5314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.236272][ T5513] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.243656][ T5513] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.251830][ T5513] bridge_slave_0: entered allmulticast mode [ 98.259880][ T5513] bridge_slave_0: entered promiscuous mode [ 98.276948][ T4489] Bluetooth: hci2: command tx timeout [ 98.334703][ T5314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.346840][ T5314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.404769][ T5513] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.413608][ T5513] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.423246][ T5513] bridge_slave_1: entered allmulticast mode [ 98.433398][ T5513] bridge_slave_1: entered promiscuous mode [ 98.486938][ T5314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.627582][ T5513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.668565][ T5513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.713234][ T5480] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.821315][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.873276][ T5480] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.893928][ T5513] team0: Port device team_slave_0 added [ 98.905754][ T5513] team0: Port device team_slave_1 added [ 98.954400][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.984818][ T5480] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.030303][ T5513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.037635][ T5513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.063853][ T5513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.084636][ T5513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.092282][ T5513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.118591][ T5513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.141517][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.185786][ T5480] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.251499][ T5513] hsr_slave_0: entered promiscuous mode [ 99.258494][ T5513] hsr_slave_1: entered promiscuous mode [ 99.265042][ T5513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.272756][ T5513] Cannot create hsr debugfs directory [ 99.286733][ T5287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.310568][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.572097][ T5287] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.652229][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.659581][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.877121][ T4489] Bluetooth: hci1: command tx timeout [ 99.936807][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.944027][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.009542][ T5314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.018088][ T35] bond0: left allmulticast mode [ 100.025040][ T35] bond_slave_0: left allmulticast mode [ 100.032739][ T35] bond_slave_1: left allmulticast mode [ 100.036604][ T4489] Bluetooth: hci3: command tx timeout [ 100.043764][ T35] bond0: left promiscuous mode [ 100.043814][ T35] bond_slave_0: left promiscuous mode [ 100.044014][ T35] bond_slave_1: left promiscuous mode [ 100.060825][ T35] bridge0: port 3(bond0) entered disabled state [ 100.072427][ T35] bridge_slave_1: left allmulticast mode [ 100.078215][ T35] bridge_slave_1: left promiscuous mode [ 100.083956][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.094079][ T35] bridge_slave_0: left allmulticast mode [ 100.102255][ T35] bridge_slave_0: left promiscuous mode [ 100.108224][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.124755][ T35] bridge_slave_1: left allmulticast mode [ 100.133540][ T35] bridge_slave_1: left promiscuous mode [ 100.140014][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.149959][ T35] bridge_slave_0: left allmulticast mode [ 100.155621][ T35] bridge_slave_0: left promiscuous mode [ 100.161770][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.671936][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.684742][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.699414][ T35] bond0 (unregistering): Released all slaves [ 100.772918][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.785785][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.797386][ T35] bond0 (unregistering): Released all slaves [ 100.978100][ T5314] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.024771][ T5441] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.109421][ T5441] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.129244][ T5441] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.175322][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.182567][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.213305][ T5441] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.249934][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.257175][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.408450][ T5480] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.424366][ T5480] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.497714][ T5480] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.513866][ T5480] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.614209][ T5287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.779015][ T35] hsr_slave_0: left promiscuous mode [ 101.793506][ T35] hsr_slave_1: left promiscuous mode [ 101.810970][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.826014][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.838701][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.846358][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.861877][ T35] hsr_slave_0: left promiscuous mode [ 101.868240][ T35] hsr_slave_1: left promiscuous mode [ 101.874226][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.883085][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.892344][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.900160][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.931362][ T35] veth1_macvtap: left promiscuous mode [ 101.937107][ T35] veth0_macvtap: left promiscuous mode [ 101.942788][ T35] veth1_vlan: left promiscuous mode [ 101.948833][ T35] veth0_vlan: left promiscuous mode [ 101.955038][ T35] veth1_macvtap: left promiscuous mode [ 101.961975][ T35] veth0_macvtap: left promiscuous mode [ 101.962101][ T4489] Bluetooth: hci1: command tx timeout [ 101.968140][ T35] veth1_vlan: left promiscuous mode [ 101.979833][ T35] veth0_vlan: left promiscuous mode [ 102.510588][ T35] team0 (unregistering): Port device team_slave_1 removed [ 102.544601][ T35] team0 (unregistering): Port device team_slave_0 removed [ 103.165868][ T35] team0 (unregistering): Port device team_slave_1 removed [ 103.217771][ T35] team0 (unregistering): Port device team_slave_0 removed [ 103.719218][ T5441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.892693][ T5441] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.901698][ T5287] veth0_vlan: entered promiscuous mode [ 103.941984][ T5513] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.993052][ T5513] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.018678][ T5513] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.053050][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.060311][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.084551][ T5513] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.122426][ T5480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.137074][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.144268][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.160299][ T5314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.169856][ T5287] veth1_vlan: entered promiscuous mode [ 104.269699][ T5480] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.323421][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.330780][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.399696][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.406959][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.569960][ T5287] veth0_macvtap: entered promiscuous mode [ 104.637941][ T5287] veth1_macvtap: entered promiscuous mode [ 104.873762][ T5287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.905207][ T5513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.951705][ T5287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.019779][ T5287] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.029318][ T5287] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.039237][ T5287] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.056009][ T5287] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.142471][ T5314] veth0_vlan: entered promiscuous mode [ 105.199935][ T5513] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.230782][ T5441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.277465][ T4155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.287954][ T4155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.303336][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.310979][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.403213][ T5480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.418057][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.425248][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.504394][ T5314] veth1_vlan: entered promiscuous mode [ 105.530825][ T2836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.552478][ T2836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.723485][ T5441] veth0_vlan: entered promiscuous mode [ 105.768319][ T5314] veth0_macvtap: entered promiscuous mode [ 105.807496][ T5441] veth1_vlan: entered promiscuous mode [ 105.834663][ T5480] veth0_vlan: entered promiscuous mode executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x18, r1, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x4}]}, 0x18}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRESOCT=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="52000e0080000000ffffffffffff0802110000000802110000000000000088d14be44cd9bed75f7cd542"], 0x78}, 0x1, 0x0, 0x0, 0x40840}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x100, 0x0, 0xff, 0xb}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x100, 0x0, 0x2, 0x2}, 0x20) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000300)=0x2f, 0x4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_netdev_private(r6, 0x8929, &(0x7f0000000080)="3ef2b744f871f304bd39afb83a") bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x7ff}, 0xe) r7 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5"], 0x448}}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001714"], 0x38}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_elf64(r9, &(0x7f0000000440)=ANY=[], 0x78) sendfile(r7, r6, &(0x7f0000000000)=0x4, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES64=r10, @ANYRESHEX=r10, @ANYRES8=r10, @ANYRES8=0x0], 0xc8}}, 0x20004000) [ 105.904764][ T5314] veth1_macvtap: entered promiscuous mode [ 106.020883][ T4155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.070103][ T5480] veth1_vlan: entered promiscuous mode [ 106.234928][ T4155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.295188][ T5441] veth0_macvtap: entered promiscuous mode [ 106.338324][ T5441] veth1_macvtap: entered promiscuous mode [ 106.347792][ T5314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.378703][ T5314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.413459][ T5314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.486306][ T4155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.524042][ T5314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.537253][ T5314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.554998][ T5314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.615584][ T4155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.660931][ T5314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.683908][ T5314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.696070][ T5314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.705730][ T5314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.799852][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.809634][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.818275][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.838399][ T5116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.846733][ T5116] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 106.861863][ T5116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.869756][ T5480] veth0_macvtap: entered promiscuous mode [ 106.921561][ T5441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.945313][ T5441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.963465][ T5441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.974555][ T5441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.987255][ T5441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.020003][ T5480] veth1_macvtap: entered promiscuous mode [ 107.082274][ T5441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.113760][ T5441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.125366][ T5441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.143463][ T5441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.155574][ T5441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.241795][ T5513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.253863][ T5441] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.267271][ T5441] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.277160][ T5441] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.285899][ T5441] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.312783][ T5480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.326124][ T5480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.338482][ T5480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.349041][ T5480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.359228][ T5480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.370030][ T5480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.382351][ T5480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.501516][ T5480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.515176][ T5480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.527783][ T5480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.538717][ T5480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.548708][ T5480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.561328][ T5480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.573779][ T5480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.582930][ T4155] bridge_slave_1: left allmulticast mode [ 107.588844][ T4155] bridge_slave_1: left promiscuous mode [ 107.594721][ T4155] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.605540][ T4155] bridge_slave_0: left allmulticast mode [ 107.611700][ T4155] bridge_slave_0: left promiscuous mode [ 107.619737][ T4155] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.945687][ T4155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.964987][ T4155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.977084][ T4155] bond0 (unregistering): Released all slaves [ 108.008475][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.021448][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.041428][ T5480] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.050545][ T5480] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.059388][ T5480] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.069027][ T5480] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.213750][ T5193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.222177][ T5193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.615852][ T5163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.630147][ T5163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.654338][ T4155] hsr_slave_0: left promiscuous mode executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) recvfrom$inet(r0, 0x0, 0xfffffffffffffd14, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) unshare(0x24020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="05000000010000", 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001d80)="8d", 0x1}], 0x1}, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)=""/34, 0x22}], 0x1, &(0x7f00000000c0), 0x0, 0x8d000000}, 0x0) [ 108.662483][ T4155] hsr_slave_1: left promiscuous mode [ 108.675032][ T4155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.686373][ T4155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.700573][ T4155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.726144][ T4155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.784290][ T4155] veth1_macvtap: left promiscuous mode [ 108.806229][ T4155] veth0_macvtap: left promiscuous mode [ 108.811949][ T4155] veth1_vlan: left promiscuous mode [ 108.836714][ T4155] veth0_vlan: left promiscuous mode [ 108.926688][ T4489] Bluetooth: hci0: command tx timeout [ 109.515215][ T5116] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 109.531189][ T5116] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 109.540162][ T5116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 109.553236][ T5116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 109.561489][ T5116] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 109.573336][ T5116] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.669617][ T4155] team0 (unregistering): Port device team_slave_1 removed [ 109.702879][ T4155] team0 (unregistering): Port device team_slave_0 removed [ 110.123288][ T2874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.146020][ T2874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.164402][ T5513] veth0_vlan: entered promiscuous mode [ 110.237317][ T5631] chnl_net:caif_netlink_parms(): no params data found [ 110.256536][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.266063][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.280718][ T5513] veth1_vlan: entered promiscuous mode [ 110.308819][ T2874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.325964][ T2874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c000000ed80bf5719377d65cbbdf0e5d44c602321d6e1c92d9da1c98c57c906994eed69d5c89f83bc747886190d1819e7fb98e6f6f2b9cf319bfd5f45fa1e69d8cf3996c45d57fed029fb3242a1bddb1d87986d53702af87025c8187c647362d8c17623c643d618dcfe", @ANYRES16=r5, @ANYBLOB="050000000000000000001400000018000180140002006e657464657673696d3000000000000008000400000000000800050000000000"], 0x3c}}, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) socket$nl_generic(0x10, 0x3, 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001640)=""/176, 0xb0}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f00000041c0)=[{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000400)="7ff67e96dc56cf64a2aa76f2a4f29eb4", 0x10}], 0x1, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f00000000c0)={0x0, 0x1d, '\x00', [@generic={0x0, 0xe6, "7e38b12e8cf41d8953a29cc3821e108d725c328626a29a9eb9505a76110cb1806ebe5b360904ea7f4827020b9383c4d416c835d63d79b851ad18464303b249922a28bae18f8bc41956aa2fc4fbae2d61f6e1d4f1a4f18c0d6a6d1b6186947c89c1b2df79dfb75cc3c962741025400be6a3cabdb13ca97f2d14b0029131f7e5f37c9b0cedff76474b3437fee2a1c8b4a941783c6d0e97d131dd9d564a846af0a76c7e0d637913e83557b409a53953a9226c25245d5902f05838282c334b994f1fa3dfda4fb88392cab52120fc789cccf7650337a1898872e9071167d9ed6de922d6bea03e8555"}]}, 0xf0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "3f8000", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)={0x10, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3b9}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x40}}, 0x0) [ 110.781364][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.806114][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.813428][ T5631] bridge_slave_0: entered allmulticast mode [ 110.833464][ T5631] bridge_slave_0: entered promiscuous mode [ 110.924870][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.956163][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.963562][ T5631] bridge_slave_1: entered allmulticast mode [ 110.999421][ T4489] Bluetooth: hci0: command tx timeout [ 111.000917][ T5631] bridge_slave_1: entered promiscuous mode [ 111.107685][ T5513] veth0_macvtap: entered promiscuous mode [ 111.239963][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.290315][ T5513] veth1_macvtap: entered promiscuous mode [ 111.337132][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.577277][ T5631] team0: Port device team_slave_0 added [ 111.602037][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.616780][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.625088][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.633608][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.641542][ T5119] Bluetooth: hci4: command tx timeout [ 111.660047][ T5116] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 111.674249][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.690973][ T5710] ================================================================== [ 111.699101][ T5710] BUG: KFENCE: invalid free in __hci_req_sync+0x62f/0x950 [ 111.699101][ T5710] [ 111.708451][ T5710] Invalid free of 0xffff88823bd7cf00 (in kfence-#189): [ 111.715328][ T5710] __hci_req_sync+0x62f/0x950 [ 111.720050][ T5710] hci_req_sync+0xa9/0xd0 [ 111.724420][ T5710] hci_dev_cmd+0x4c5/0xa50 [ 111.728871][ T5710] sock_do_ioctl+0x158/0x460 [ 111.733491][ T5710] sock_ioctl+0x629/0x8e0 [ 111.737853][ T5710] __se_sys_ioctl+0xfc/0x170 [ 111.742471][ T5710] do_syscall_64+0xf5/0x240 [ 111.747007][ T5710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.752922][ T5710] [ 111.755265][ T5710] kfence-#189: 0xffff88823bd7cf00-0xffff88823bd7cfef, size=240, cache=skbuff_head_cache [ 111.755265][ T5710] [ 111.767193][ T5710] allocated by task 5116 on cpu 0 at 111.686182s: [ 111.773653][ T5710] skb_clone+0x20c/0x390 [ 111.777932][ T5710] hci_cmd_work+0x29e/0x670 [ 111.782475][ T5710] process_scheduled_works+0xa10/0x17c0 [ 111.782877][ T4155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.788037][ T5710] worker_thread+0x86d/0xd70 [ 111.788063][ T5710] kthread+0x2f0/0x390 [ 111.788087][ T5710] ret_from_fork+0x4b/0x80 [ 111.788131][ T5710] ret_from_fork_asm+0x1a/0x30 [ 111.788160][ T5710] [ 111.788164][ T5710] freed by task 5116 on cpu 0 at 111.690914s: [ 111.788199][ T5710] hci_req_sync_complete+0xe7/0x290 [ 111.788223][ T5710] hci_event_packet+0xc71/0x1540 [ 111.788243][ T5710] hci_rx_work+0x3e8/0xca0 [ 111.788263][ T5710] process_scheduled_works+0xa10/0x17c0 [ 111.788285][ T5710] worker_thread+0x86d/0xd70 [ 111.788308][ T5710] kthread+0x2f0/0x390 [ 111.788333][ T5710] ret_from_fork+0x4b/0x80 [ 111.834663][ T4489] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.835144][ T5710] ret_from_fork_asm+0x1a/0x30 [ 111.846468][ T4489] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.849787][ T5710] [ 111.849797][ T5710] CPU: 1 PID: 5710 Comm: syz-executor.0 Not tainted 6.9.0-syzkaller-05156-g621cde16e49b #0 [ 111.855079][ T4489] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.858248][ T5710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 111.858265][ T5710] ================================================================== [ 111.858277][ T5710] Kernel panic - not syncing: KFENCE: panic_on_warn set ... [ 111.858522][ T5710] CPU: 1 PID: 5710 Comm: syz-executor.0 Not tainted 6.9.0-syzkaller-05156-g621cde16e49b #0 [ 111.858549][ T5710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 111.858563][ T5710] Call Trace: [ 111.858573][ T5710] [ 111.858584][ T5710] dump_stack_lvl+0x241/0x360 [ 111.858621][ T5710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.858651][ T5710] ? __pfx__printk+0x10/0x10 [ 111.858674][ T5710] ? vprintk_emit+0x631/0x770 [ 111.858719][ T5710] ? vscnprintf+0x5d/0x90 [ 111.858753][ T5710] panic+0x349/0x860 [ 111.858782][ T5710] ? check_panic_on_warn+0x21/0xb0 [ 111.858818][ T5710] ? __pfx_panic+0x10/0x10 [ 111.858841][ T5710] ? _printk+0xd5/0x120 [ 111.858865][ T5710] ? __pfx__printk+0x10/0x10 [ 111.858894][ T5710] ? __pfx__printk+0x10/0x10 [ 111.858931][ T5710] check_panic_on_warn+0x86/0xb0 [ 111.858969][ T5710] kfence_report_error+0x998/0xd10 [ 111.859032][ T5710] ? __pv_queued_spin_lock_slowpath+0xb8d/0xdc0 [ 111.859068][ T5710] ? __pfx_kfence_report_error+0x10/0x10 [ 111.859099][ T5710] ? kfence_guarded_free+0x16c/0x4e0 [ 111.859132][ T5710] ? kmem_cache_free+0x173/0x2d0 [ 111.859166][ T5710] ? __hci_req_sync+0x62f/0x950 [ 111.859193][ T5710] ? hci_req_sync+0xa9/0xd0 [ 111.859218][ T5710] ? hci_dev_cmd+0x4c5/0xa50 [ 111.859248][ T5710] ? sock_do_ioctl+0x158/0x460 [ 111.859276][ T5710] ? sock_ioctl+0x629/0x8e0 [ 111.859301][ T5710] ? __se_sys_ioctl+0xfc/0x170 [ 111.859324][ T5710] ? do_syscall_64+0xf5/0x240 [ 111.859350][ T5710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.859425][ T5710] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 111.859455][ T5710] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 111.859486][ T5710] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 111.859546][ T5710] kfence_guarded_free+0x16c/0x4e0 [ 111.859580][ T5710] ? __hci_req_sync+0x62f/0x950 [ 111.859607][ T5710] kmem_cache_free+0x173/0x2d0 [ 111.859647][ T5710] __hci_req_sync+0x62f/0x950 [ 111.859683][ T5710] ? __pfx___hci_req_sync+0x10/0x10 [ 111.859725][ T5710] ? __pfx___mutex_lock+0x10/0x10 [ 111.859776][ T5710] ? __pfx_hci_scan_req+0x10/0x10 [ 111.859809][ T5710] hci_req_sync+0xa9/0xd0 [ 111.859843][ T5710] hci_dev_cmd+0x4c5/0xa50 [ 111.859874][ T5710] ? security_capable+0x90/0xb0 [ 111.859901][ T5710] ? __pfx_hci_dev_cmd+0x10/0x10 [ 111.859938][ T5710] ? hci_sock_ioctl+0x6c4/0xa40 [ 111.859977][ T5710] sock_do_ioctl+0x158/0x460 [ 111.860014][ T5710] ? __pfx_sock_do_ioctl+0x10/0x10 [ 111.860047][ T5710] ? __pfx_lock_acquire+0x10/0x10 [ 111.860092][ T5710] sock_ioctl+0x629/0x8e0 [ 111.860130][ T5710] ? __pfx_sock_ioctl+0x10/0x10 [ 111.860162][ T5710] ? __fget_files+0x28/0x470 [ 111.860199][ T5710] ? bpf_lsm_file_ioctl+0x9/0x10 [ 111.860224][ T5710] ? security_file_ioctl+0x87/0xb0 [ 111.860255][ T5710] ? __pfx_sock_ioctl+0x10/0x10 [ 111.860286][ T5710] __se_sys_ioctl+0xfc/0x170 [ 111.860315][ T5710] do_syscall_64+0xf5/0x240 [ 111.860343][ T5710] ? clear_bhb_loop+0x35/0x90 [ 111.860372][ T5710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.860397][ T5710] RIP: 0033:0x7fddfc87cc4b [ 111.860419][ T5710] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 111.860439][ T5710] RSP: 002b:00007ffeabecab70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.860465][ T5710] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fddfc87cc4b [ 111.860483][ T5710] RDX: 00007ffeabecabe8 RSI: 00000000400448dd RDI: 0000000000000003 [ 111.860499][ T5710] RBP: 000055556b6f6430 R08: 0000000000000000 R09: 0000000000000000 [ 111.860514][ T5710] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 111.860529][ T5710] R13: 0000000000000002 R14: 00007fddfc9ac9d8 R15: 000000000000000c [ 111.860564][ T5710] [ 111.865590][ T5710] Kernel Offset: disabled