last executing test programs: 10.855388744s ago: executing program 2 (id=1383): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122", @ANYRES32=r2], 0x3c}}, 0x40000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) pwritev(r3, &(0x7f0000000880)=[{0x0}], 0x1, 0x6, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) unshare(0x6a040000) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x6a040000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r5, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0xffffffffffffff9b) sendmsg$rds(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006000000caa88760bdf2cebf45101d17553337c903a3961e27399d60c747a444d0bced6fabfac7ff5e8f1b78168c9235d0033579daf41c94f0ce60b9cc7237fc0e06af2bc8a1a98c268795c927301ef04dfb7e43053f76f72b60b2e66dded0483788caad56f3ee49d5f2532b610bf4069c8c7a"], 0x6c}}, 0x8000) 7.801881682s ago: executing program 2 (id=1403): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$kcm(0x10, 0x2, 0x4) shutdown(0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1d, 0x2, 0x6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000480)="e796825829f8a1d6c3293c79395ae15b8a95e2716fec5a83165fb3fc921096068b8528a92e2935f27a179090bbcc699334df808b6b7aae724a2bb4c359efacc84eaca60ac56b54", 0x47}], 0x2}}, {{0x0, 0x0, &(0x7f0000003a00)=[{0x0}, {&(0x7f0000003900)}], 0x2}}], 0x2, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001840)={0x90000001}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x3a) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) 7.469195689s ago: executing program 4 (id=1406): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1, 0x1, [@empty]}, 0x14) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000001c0)='O', 0x1}], 0x1}}], 0x1, 0x880) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x9, 0x6}, &(0x7f0000000100)=0x18) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x8e0, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8cc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x87c, 0x2, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x8, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0x3, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc2, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x101, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x1, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$packet(r2, 0x0, 0x0) 6.843773756s ago: executing program 4 (id=1409): r0 = socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x2, 0x0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x80000001}, &(0x7f00000002c0)=0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="5c3d8acf", @ANYRES64=0x0], 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xcd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 6.49096159s ago: executing program 4 (id=1412): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10001}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000001c0)='O', 0x1}], 0x1}}], 0x1, 0x880) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x9, 0x6}, &(0x7f0000000100)=0x18) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x8e0, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8cc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x87c, 0x2, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x8, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0x3, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc2, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x101, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x1, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$packet(r2, 0x0, 0x0) 6.033067247s ago: executing program 2 (id=1415): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400a0}, 0x20048840) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, 0x0, 0x0) close(r2) recvmmsg(r5, 0x0, 0x0, 0x10021, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) accept$packet(r2, 0x0, 0x0) socketpair(0x25, 0x1, 0x0, 0x0) sendmsg$xdp(r2, 0x0, 0x8000) sendmmsg$sock(r1, 0x0, 0x0, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) 5.843542668s ago: executing program 4 (id=1416): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x3c, 0x0, "bb02a3c364ca41d6357e544508474004000b42a201ecffffffffffffff8a0e2f964e0000c534a632ab6193fcf19b2df3ee0500faa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x8) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00"], 0x78) 5.527829378s ago: executing program 2 (id=1418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3f}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4) 5.445570123s ago: executing program 1 (id=1419): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd50fb", @ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000"/72], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)={0xcc, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0xcc}, 0x1, 0x0, 0x0, 0x60048090}, 0xc0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r6, 0x0, 0x0) connect$rose(r6, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 5.284903226s ago: executing program 2 (id=1420): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) bind$netlink(r0, 0x0, 0x0) 5.040845213s ago: executing program 1 (id=1424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5b9ee126, 0x43}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1c0000002e00010026bd4e00fbdbdf250400000008000c00"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x48, r1, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}], @chandef_params]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20001004) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 4.763749187s ago: executing program 4 (id=1425): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) pwritev(r3, &(0x7f0000000880)=[{0x0}], 0x1, 0x6, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) unshare(0x6a040000) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x6a040000) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r5, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0xffffffffffffff9b) sendmsg$rds(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006000000caa88760bdf2cebf45101d17553337c903a3961e27399d60c747a444d0bced6fabfac7ff5e8f1b78168c9235d0033579daf41c94f0ce60b9cc7237fc0e06af2bc8a1a98c268795c927301ef04dfb7e43053f76f72b60b2e66dded0483788caad56f3ee49d5f2532b610bf4069c8c7a"], 0x6c}}, 0x8000) 4.07225773s ago: executing program 0 (id=1426): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1, 0x1, [@empty]}, 0x14) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000001c0)='O', 0x1}], 0x1}}], 0x1, 0x880) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x9, 0x6}, &(0x7f0000000100)=0x18) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x8e0, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8cc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x87c, 0x2, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x8, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0x3, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc2, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x101, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x1, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$packet(r2, 0x0, 0x0) 3.750971466s ago: executing program 0 (id=1427): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1, 0x1, [@empty]}, 0x14) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x880) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x9, 0x6}, &(0x7f0000000100)=0x18) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x8e0, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8cc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x87c, 0x2, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x8, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0x3, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc2, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x101, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x1, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$packet(r2, 0x0, 0x0) 3.567747913s ago: executing program 1 (id=1428): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400a0}, 0x20048840) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, 0x0, 0x0) close(r2) recvmmsg(r5, 0x0, 0x0, 0x10021, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) accept$packet(r2, 0x0, 0x0) socketpair(0x25, 0x1, 0x0, 0x0) sendmsg$xdp(r2, 0x0, 0x8000) sendmmsg$sock(r1, 0x0, 0x0, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) 3.120482299s ago: executing program 0 (id=1429): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x964}, 0x1, 0x0, 0x0, 0x1}, 0x4008854) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) recvmsg(r3, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ff", 0x32}, {0x0}], 0x2, 0x0, 0x0, 0xc00e}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af00200000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000031a909c518100000", @ANYRESOCT=r4, @ANYRESDEC], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x40f00, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 2.953274268s ago: executing program 0 (id=1430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3f}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4) 2.762900957s ago: executing program 3 (id=1431): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be53", 0x9f, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4054, 0xff79, 0x0, 0x0}, &(0x7f0000000400)=0x40) 2.600774029s ago: executing program 3 (id=1432): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 2.518098775s ago: executing program 3 (id=1433): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1, 0x1, [@empty]}, 0x14) 1.282748137s ago: executing program 3 (id=1434): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) r1 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r1, 0x40106183, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000071dd00674af3505ae27dc0d265e3912904000000040000d14701c3a126d90199dd717a6d8fddca7ec7a6385716e490f828cd5b639cee3e7c00", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000500"/28], 0x36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r2, &(0x7f0000000400), &(0x7f0000000c40), 0x1}, 0x20) bind$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/user\x00') setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000140)=0x5, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000300)={'tunl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x7, 0x80, 0x0, 0x7fffffff, {{0x1b, 0x4, 0x2, 0x30, 0x6c, 0x64, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@generic={0x89, 0xb, "6ce4b385501d5efee3"}, @noop, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xb}, {@multicast2, 0x7f4399c7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010100, 0xfff}, {@multicast2, 0x1ff}]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@bridge_newneigh={0x64, 0x1c, 0x10, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x0, r3, 0x1, 0x0, 0x7}, [@NDA_CACHEINFO={0x14, 0x3, {0x1000, 0xffffffff, 0xe15, 0x7f}}, @NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @NDA_FDB_EXT_ATTRS={0x18, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_VNI={0x8, 0x7, 0x5d}, @NDA_VLAN={0x6, 0x5, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000039c0)=[{{&(0x7f0000000000)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(0xffffffffffffffff, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000280)={'ip6tnl0\x00', r3, 0x2f, 0x6, 0x5, 0xd1, 0x60, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x10, 0x2, 0x6}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008b80)={&(0x7f0000008a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0xb}, {0x0, 0x3}, {0x7, 0x1}]}]}}, 0x0, 0x46, 0x0, 0x1, 0x3}, 0x28) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0xe, 0x400eeb4, 0x14}, 0x2c) 1.200729454s ago: executing program 0 (id=1435): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x3c, 0x0, "bb02a3c364ca41d6357e544508474004000b42a201ecffffffffffffff8a0e2f964e0000c534a632ab6193fcf19b2df3ee0500faa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x8) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00"], 0x78) 1.192558343s ago: executing program 2 (id=1436): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x48, r0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}], @chandef_params]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20001004) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 1.132103098s ago: executing program 1 (id=1437): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1, 0x1, [@empty]}, 0x14) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000001c0)='O', 0x1}], 0x1}}], 0x1, 0x880) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x9, 0x6}, &(0x7f0000000100)=0x18) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x8e0, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8cc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x87c, 0x2, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x8, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0x3, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc2, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x101, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x1, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$packet(r2, 0x0, 0x0) 1.044441303s ago: executing program 4 (id=1438): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x48, r0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}], @chandef_params]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20001004) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 569.752654ms ago: executing program 1 (id=1439): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1, 0x1, [@empty]}, 0x14) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x880) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x9, 0x6}, &(0x7f0000000100)=0x18) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x8e0, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8cc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x87c, 0x2, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x8, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0x3, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc2, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x101, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x1, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$packet(r2, 0x0, 0x0) 252.513854ms ago: executing program 3 (id=1440): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x964}, 0x1, 0x0, 0x0, 0x1}, 0x4008854) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) recvmsg(r3, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ff", 0x32}, {0x0}], 0x2, 0x0, 0x0, 0xc00e}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af00200000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000031a909c518100000", @ANYRESOCT=r4, @ANYRESDEC], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x40f00, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 200.462017ms ago: executing program 0 (id=1441): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r1, 0x40106183, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000071dd00674af3505ae27dc0d265e3912904000000040000d14701c3a126d90199dd717a6d8fddca7ec7a6385716e490f828cd5b639cee3e7c00", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000500"/28], 0x36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r2, &(0x7f0000000400), &(0x7f0000000c40), 0x1}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000500)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/user\x00') setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000140)=0x5, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000300)={'tunl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x7, 0x80, 0x0, 0x7fffffff, {{0x1b, 0x4, 0x2, 0x30, 0x6c, 0x64, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@generic={0x89, 0xb, "6ce4b385501d5efee3"}, @noop, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xb}, {@multicast2, 0x7f4399c7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010100, 0xfff}, {@multicast2, 0x1ff}]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@bridge_newneigh={0x64, 0x1c, 0x10, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x0, r4, 0x1, 0x0, 0x7}, [@NDA_CACHEINFO={0x14, 0x3, {0x1000, 0xffffffff, 0xe15, 0x7f}}, @NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @NDA_FDB_EXT_ATTRS={0x18, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_VNI={0x8, 0x7, 0x5d}, @NDA_VLAN={0x6, 0x5, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000280)={'ip6tnl0\x00', r4, 0x2f, 0x6, 0x5, 0xd1, 0x60, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x10, 0x2, 0x6}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008b80)={&(0x7f0000008a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0xb}, {0x0, 0x3}, {0x7, 0x1}]}]}}, 0x0, 0x46, 0x0, 0x1, 0x3}, 0x28) 108.290871ms ago: executing program 3 (id=1442): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xf5}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x38}}, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 0s ago: executing program 1 (id=1443): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be53", 0x9f, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4054, 0xff79, 0x0, 0x0}, &(0x7f0000000400)=0x40) kernel console output (not intermixed with test programs): ter parsing attributes in process `syz.2.3'. [ 84.453442][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.514413][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.538051][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.848741][ T5970] netlink: 'syz.1.13': attribute type 4 has an invalid length. [ 85.156064][ T5981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16'. [ 85.266535][ T5983] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x15 [ 85.444575][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.449137][ T5996] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20'. [ 85.453037][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.493283][ T5826] Bluetooth: hci1: command tx timeout [ 85.494692][ T5828] Bluetooth: hci0: command tx timeout [ 85.542235][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.554577][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.563459][ T5828] Bluetooth: hci3: command tx timeout [ 85.566375][ T5826] Bluetooth: hci2: command tx timeout [ 85.568911][ T5840] Bluetooth: hci4: command tx timeout [ 85.666868][ T5992] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18'. [ 85.691059][ T5998] bridge1: entered promiscuous mode [ 85.699263][ T5998] bridge1: entered allmulticast mode [ 85.819664][ T6000] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20'. [ 85.856558][ T1094] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.873062][ T1094] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.911230][ T1094] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.959462][ T1094] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.100976][ T6008] netlink: 'syz.1.24': attribute type 3 has an invalid length. [ 86.108863][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 86.158290][ T6006] syzkaller1: entered promiscuous mode [ 86.180180][ T6006] syzkaller1: entered allmulticast mode [ 86.500639][ T6028] veth1_macvtap: left promiscuous mode [ 86.884850][ T6046] netlink: 'syz.3.33': attribute type 4 has an invalid length. [ 86.948495][ T6048] netlink: 'syz.3.33': attribute type 4 has an invalid length. [ 86.958172][ T1228] cfg80211: failed to load regulatory.db [ 87.149075][ T6055] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.540529][ T6064] netlink: 'syz.0.36': attribute type 4 has an invalid length. [ 87.614774][ T6068] netlink: 'syz.0.36': attribute type 4 has an invalid length. [ 88.148846][ T6087] netlink: 'syz.3.41': attribute type 2 has an invalid length. [ 88.191982][ T6087] netlink: 'syz.3.41': attribute type 2 has an invalid length. [ 88.535584][ T6100] netlink: 'syz.0.44': attribute type 11 has an invalid length. [ 88.544628][ T6100] netlink: 'syz.0.44': attribute type 23 has an invalid length. [ 88.560603][ T6100] netlink: 224 bytes leftover after parsing attributes in process `syz.0.44'. [ 88.636117][ T6096] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 88.698378][ T6096] syzkaller0: entered promiscuous mode [ 88.727623][ T6096] syzkaller0: entered allmulticast mode [ 88.814259][ T5489] veth1_macvtap: entered promiscuous mode [ 89.108278][ T6113] bridge_slave_0: left allmulticast mode [ 89.121809][ T6113] bridge_slave_0: left promiscuous mode [ 89.128902][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.195257][ T6124] netlink: 'syz.2.51': attribute type 4 has an invalid length. [ 89.210920][ T6113] bridge_slave_1: left allmulticast mode [ 89.222166][ T6113] bridge_slave_1: left promiscuous mode [ 89.230135][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.241966][ T6113] bond0: (slave bond_slave_0): Releasing backup interface [ 89.254916][ T6113] bond0: (slave bond_slave_1): Releasing backup interface [ 89.268907][ T6113] team0: Port device team_slave_0 removed [ 89.278227][ T6113] team0: Port device team_slave_1 removed [ 89.286992][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.313052][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.324735][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.332489][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.344721][ T6113] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 90.028203][ T6152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.141699][ T6141] syzkaller0: entered promiscuous mode [ 90.185362][ T6141] syzkaller0: entered allmulticast mode [ 90.271402][ T29] audit: type=1800 audit(1772623273.826:2): pid=6139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.54" name="memory.events" dev="tmpfs" ino=89 res=0 errno=0 [ 91.301472][ T6190] netlink: 'syz.1.62': attribute type 11 has an invalid length. [ 91.309564][ T6190] validate_nla: 1 callbacks suppressed [ 91.309584][ T6190] netlink: 'syz.1.62': attribute type 23 has an invalid length. [ 91.322854][ T6190] netlink: 224 bytes leftover after parsing attributes in process `syz.1.62'. [ 92.220778][ T6208] netlink: 'syz.1.67': attribute type 4 has an invalid length. [ 92.256170][ T6205] syzkaller0: entered promiscuous mode [ 92.273797][ T6205] syzkaller0: entered allmulticast mode [ 92.355336][ T6209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.66'. [ 92.544893][ T6211] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 92.594955][ T6213] team0: Mode changed to "roundrobin" [ 92.870141][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.69'. [ 92.901101][ T6217] netlink: 580 bytes leftover after parsing attributes in process `syz.2.69'. [ 92.939434][ T6220] syzkaller0: entered promiscuous mode [ 92.953098][ T6220] syzkaller0: entered allmulticast mode [ 93.243186][ T6231] netlink: 'syz.1.75': attribute type 4 has an invalid length. [ 93.261769][ T6230] smc: net device wlan0 applied user defined pnetid SYZ0 [ 93.292791][ T6231] netlink: 'syz.1.75': attribute type 4 has an invalid length. [ 93.622124][ T6250] netlink: 'syz.4.78': attribute type 4 has an invalid length. [ 93.709483][ T6253] netlink: 'syz.2.77': attribute type 11 has an invalid length. [ 94.021051][ T6264] Illegal XDP return value 780788328 on prog (id 16) dev N/A, expect packet loss! [ 94.287704][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.82'. [ 94.590129][ T6277] syzkaller0: entered promiscuous mode [ 94.612795][ T6277] syzkaller0: entered allmulticast mode [ 94.981769][ T6288] netlink: 'syz.4.87': attribute type 11 has an invalid length. [ 94.989560][ T6288] netlink: 'syz.4.87': attribute type 23 has an invalid length. [ 94.997333][ T6288] netlink: 224 bytes leftover after parsing attributes in process `syz.4.87'. [ 95.355789][ T6296] syzkaller0: entered promiscuous mode [ 95.361388][ T6296] syzkaller0: entered allmulticast mode [ 95.676032][ T6300] netlink: 'syz.2.90': attribute type 4 has an invalid length. [ 96.245762][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 96.257905][ T6313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.94'. [ 96.402562][ T6323] Bluetooth: MGMT ver 1.23 [ 96.595686][ T6323] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.757680][ T6323] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.814742][ T6334] syzkaller0: entered promiscuous mode [ 96.820439][ T6334] syzkaller0: entered allmulticast mode [ 96.851858][ T6323] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.955236][ T6338] netlink: 'syz.3.100': attribute type 1 has an invalid length. [ 97.180816][ T6323] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.232655][ T6347] TCP: TCP_TX_DELAY enabled [ 97.238833][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.102'. [ 97.267791][ T6341] vlan2: entered promiscuous mode [ 97.305894][ T6341] macvlan1: entered promiscuous mode [ 97.311800][ T6341] vlan2: entered allmulticast mode [ 97.318192][ T6341] macvlan1: entered allmulticast mode [ 97.326401][ T6341] veth1_vlan: entered allmulticast mode [ 97.342313][ T5918] IPVS: starting estimator thread 0... [ 97.435007][ T6350] IPVS: using max 32 ests per chain, 76800 per kthread [ 97.638508][ T1164] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.685437][ T1164] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.687956][ T6357] netlink: 'syz.3.105': attribute type 14 has an invalid length. [ 97.735781][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 97.767061][ T1118] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.775730][ T1118] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.817722][ T6357] bond0: option xmit_hash_policy: invalid value (158) [ 98.362221][ T6371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.107'. [ 98.424339][ T6374] vlan2: entered promiscuous mode [ 98.433558][ T6374] bond0: entered promiscuous mode [ 98.439313][ T6374] bond_slave_0: entered promiscuous mode [ 98.475125][ T6374] bond_slave_1: entered promiscuous mode [ 98.513020][ T6369] syzkaller0: entered promiscuous mode [ 98.520385][ T6369] syzkaller0: entered allmulticast mode [ 98.783723][ T6383] netlink: 28 bytes leftover after parsing attributes in process `syz.1.111'. [ 98.814242][ T6383] netlink: 28 bytes leftover after parsing attributes in process `syz.1.111'. [ 98.845198][ T6383] syzkaller0: entered promiscuous mode [ 98.873020][ T6383] syzkaller0: entered allmulticast mode [ 98.967162][ T6387] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.067748][ T6392] netlink: 76 bytes leftover after parsing attributes in process `syz.2.113'. [ 99.105289][ T6387] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.191873][ T6387] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.300854][ T6387] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.414006][ T6397] netlink: 192 bytes leftover after parsing attributes in process `syz.2.115'. [ 99.525679][ T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.544282][ T1164] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.579034][ T1164] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.617682][ T1164] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.999333][ T29] audit: type=1800 audit(1772623283.556:3): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.117" name="memory.events" dev="tmpfs" ino=159 res=0 errno=0 [ 100.047949][ T6420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.190149][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.231119][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.254428][ T6410] syz.3.119 (6410) used greatest stack depth: 17472 bytes left [ 100.529729][ T6432] netlink: 'syz.0.124': attribute type 1 has an invalid length. [ 100.547712][ T6432] netlink: 224 bytes leftover after parsing attributes in process `syz.0.124'. [ 100.789778][ T6436] warning: `syz.0.125' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.999319][ T6446] syzkaller0: entered promiscuous mode [ 101.013553][ T6446] syzkaller0: entered allmulticast mode [ 101.328810][ T6456] syzkaller0: entered promiscuous mode [ 101.336937][ T6456] syzkaller0: entered allmulticast mode [ 101.343636][ T6458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.131'. [ 101.517436][ T6468] Zero length message leads to an empty skb [ 101.719133][ T6472] tipc: Started in network mode [ 101.733843][ T6472] tipc: Node identity 4ec433e07f5d, cluster identity 4711 [ 101.748396][ T6472] tipc: Enabled bearer , priority 0 [ 101.757495][ T6472] syzkaller0: entered promiscuous mode [ 101.763674][ T6472] syzkaller0: entered allmulticast mode [ 102.123984][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.138'. [ 102.362590][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 102.409516][ T6489] tipc: Resetting bearer [ 102.429291][ T6494] bridge_slave_0: left allmulticast mode [ 102.436874][ T6494] bridge_slave_0: left promiscuous mode [ 102.446559][ T6494] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.458947][ T6494] bridge_slave_1: left allmulticast mode [ 102.466072][ T6494] bridge_slave_1: left promiscuous mode [ 102.472000][ T6494] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.496450][ T6494] bond0: (slave bond_slave_0): Releasing backup interface [ 102.527077][ T6494] bond0: (slave bond_slave_1): Releasing backup interface [ 102.551230][ T6494] team0: Port device team_slave_0 removed [ 102.561338][ T6494] team0: Port device team_slave_1 removed [ 102.568229][ T6494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.576596][ T6494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.586879][ T6494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.595167][ T6494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.608309][ T6494] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 102.626818][ T6471] tipc: Resetting bearer [ 102.670928][ T6471] tipc: Disabling bearer [ 103.043709][ T6510] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 103.070665][ T6517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.143'. [ 103.228130][ T6524] nbd: must specify a size in bytes for the device [ 103.370999][ T6523] syzkaller0: entered promiscuous mode [ 103.440665][ T6523] syzkaller0: entered allmulticast mode [ 103.633143][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'. [ 103.662078][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'. [ 104.031581][ T6547] netlink: 'syz.3.148': attribute type 4 has an invalid length. [ 104.121339][ T6554] netlink: 'syz.1.147': attribute type 39 has an invalid length. [ 104.385500][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 104.484962][ T6560] syz_tun: entered promiscuous mode [ 104.503264][ T6560] macvtap1: entered promiscuous mode [ 104.508940][ T6560] macvtap1: entered allmulticast mode [ 104.515897][ T6560] syz_tun: entered allmulticast mode [ 104.571343][ T6563] tipc: Started in network mode [ 104.583440][ T6563] tipc: Node identity 2290f240c061, cluster identity 4711 [ 104.605414][ T6563] tipc: Enabled bearer , priority 0 [ 104.634696][ T6561] syzkaller0: entered promiscuous mode [ 104.660352][ T6561] syzkaller0: entered allmulticast mode [ 104.696136][ T6569] syzkaller0: entered promiscuous mode [ 104.717513][ T6569] syzkaller0: entered allmulticast mode [ 104.760681][ T6561] tipc: Resetting bearer [ 104.859484][ T6541] infiniband syz1: set active [ 104.869796][ T6541] infiniband syz1: added ipvlan0 [ 104.985192][ T6541] RDS/IB: syz1: added [ 104.991328][ T6541] smc: adding ib device syz1 with port count 1 [ 104.998260][ T6541] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 105.101322][ T6559] tipc: Resetting bearer [ 105.117150][ T6559] tipc: Disabling bearer [ 105.504161][ T6593] syzkaller0: entered promiscuous mode [ 105.516354][ T6593] syzkaller0: entered allmulticast mode [ 105.701045][ T6595] netlink: 'syz.1.158': attribute type 1 has an invalid length. [ 105.729938][ T6595] netlink: 'syz.1.158': attribute type 1 has an invalid length. [ 105.888087][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 106.136018][ T6608] netlink: 'syz.0.161': attribute type 4 has an invalid length. [ 106.178429][ T6610] netlink: 'syz.3.162': attribute type 10 has an invalid length. [ 106.215595][ T6610] team0: Port device dummy0 added [ 106.230703][ T6611] netlink: 'syz.3.162': attribute type 10 has an invalid length. [ 106.286156][ T6611] team0: Port device dummy0 removed [ 106.356639][ T6611] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 106.533360][ T6617] netlink: 'syz.0.163': attribute type 10 has an invalid length. [ 106.584764][ T6617] team0: Device ipvlan1 failed to register rx_handler [ 106.975794][ T6622] syzkaller0: entered promiscuous mode [ 106.988480][ T6622] syzkaller0: entered allmulticast mode [ 107.237758][ T6624] batadv0: entered promiscuous mode [ 107.263044][ T6624] batadv0: entered allmulticast mode [ 107.276682][ T5841] IPVS: starting estimator thread 0... [ 107.355101][ T6624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.373280][ T6628] IPVS: using max 28 ests per chain, 67200 per kthread [ 107.423685][ T6633] netlink: zone id is out of range [ 107.440024][ T6633] netlink: zone id is out of range [ 107.555443][ T6633] netlink: zone id is out of range [ 107.560627][ T6633] netlink: zone id is out of range [ 107.594860][ T6633] netlink: zone id is out of range [ 107.603726][ T6633] netlink: zone id is out of range [ 107.637179][ T6633] netlink: zone id is out of range [ 107.663963][ T6633] netlink: zone id is out of range [ 107.669148][ T6633] netlink: zone id is out of range [ 107.695657][ T6633] netlink: zone id is out of range [ 107.707869][ T6633] netlink: zone id is out of range [ 107.726034][ T6633] netlink: zone id is out of range [ 107.740135][ T6633] netlink: zone id is out of range [ 107.753215][ T6633] netlink: zone id is out of range [ 107.759716][ T6633] netlink: zone id is out of range [ 107.785683][ T6633] netlink: zone id is out of range [ 110.099083][ T6680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.172'. [ 110.537569][ T6687] netlink: 'syz.3.173': attribute type 4 has an invalid length. [ 110.546295][ T6684] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 110.575137][ T6684] tipc: Started in network mode [ 110.583621][ T6684] tipc: Node identity 2a51b50f04ae, cluster identity 4711 [ 110.592144][ T6684] tipc: Enabled bearer , priority 0 [ 110.625238][ T6684] syzkaller0: entered promiscuous mode [ 110.631134][ T6684] syzkaller0: entered allmulticast mode [ 110.656032][ T6684] tipc: Resetting bearer [ 110.765706][ T6683] tipc: Resetting bearer [ 110.882024][ T6683] tipc: Disabling bearer [ 111.239232][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'. [ 111.289780][ T6704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.182'. [ 111.404626][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'. [ 111.425081][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 111.461812][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 111.578290][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'. [ 111.587226][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.612550][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.647778][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.668953][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 111.683655][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.192779][ T6729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.190'. [ 112.205191][ T6730] netlink: 'syz.0.191': attribute type 1 has an invalid length. [ 112.212877][ T6730] netlink: 224 bytes leftover after parsing attributes in process `syz.0.191'. [ 112.247638][ T6729] dummy0: entered promiscuous mode [ 112.263912][ T6729] team0: entered promiscuous mode [ 112.292106][ T6729] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 113.605618][ T6762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.733240][ T6758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.843904][ T29] audit: type=1800 audit(1772623297.406:4): pid=6755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.196" name="memory.events" dev="tmpfs" ino=201 res=0 errno=0 [ 114.004033][ T6757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.147484][ T6772] netlink: 'syz.4.202': attribute type 4 has an invalid length. [ 114.260699][ T6774] net_ratelimit: 41 callbacks suppressed [ 114.260720][ T6774] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x15 [ 115.190629][ T6803] syzkaller0: entered promiscuous mode [ 115.197532][ T6803] syzkaller0: entered allmulticast mode [ 115.383125][ T6808] netlink: 'syz.4.213': attribute type 4 has an invalid length. [ 115.515021][ T6811] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.550121][ T6811] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.592607][ T6811] __nla_validate_parse: 2 callbacks suppressed [ 115.592630][ T6811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.214'. [ 115.626765][ T6815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.215'. [ 115.849181][ T6825] batadv0: entered promiscuous mode [ 115.868238][ T6825] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 116.057495][ T6829] : entered promiscuous mode [ 116.576268][ T6851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.228'. [ 116.651942][ T6853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.687322][ T6853] bond0: (slave rose0): Enslaving as an active interface with an up link [ 116.945931][ T6869] netlink: 'syz.3.233': attribute type 11 has an invalid length. [ 116.962694][ T6869] netlink: 'syz.3.233': attribute type 23 has an invalid length. [ 116.983916][ T6869] netlink: 224 bytes leftover after parsing attributes in process `syz.3.233'. [ 117.904657][ T6901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.244'. [ 118.529917][ T6923] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 118.679512][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 119.762975][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'. [ 119.972428][ T5841] IPVS: starting estimator thread 0... [ 119.979031][ T6962] netlink: 'syz.0.263': attribute type 1 has an invalid length. [ 120.036301][ T6960] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 120.074036][ T6963] IPVS: using max 25 ests per chain, 60000 per kthread [ 120.118807][ T6960] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 120.259327][ T6971] bond2: (slave gretap1): making interface the new active one [ 120.297906][ T6971] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 120.378950][ T6974] vlan2: entered allmulticast mode [ 120.422582][ T6974] bond2: entered allmulticast mode [ 120.448867][ T6974] gretap1: entered allmulticast mode [ 120.468634][ T6974] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 120.522755][ T6981] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 121.420172][ T7008] netlink: 'syz.4.276': attribute type 11 has an invalid length. [ 121.437432][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.276'. [ 121.963385][ T7024] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 122.017031][ T7029] macvlan0: entered promiscuous mode [ 122.037642][ T7029] netlink: 'syz.4.284': attribute type 2 has an invalid length. [ 122.913468][ T7053] netlink: 'syz.0.292': attribute type 4 has an invalid length. [ 124.146507][ T7104] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 125.022383][ T7117] syzkaller0: entered promiscuous mode [ 125.033192][ T7117] syzkaller0: entered allmulticast mode [ 125.340631][ T7137] netlink: 216 bytes leftover after parsing attributes in process `syz.1.309'. [ 125.355593][ T7137] netlink: 'syz.1.309': attribute type 2 has an invalid length. [ 125.405973][ T7139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.538354][ T7143] netlink: 'syz.1.310': attribute type 4 has an invalid length. [ 125.571851][ T29] audit: type=1800 audit(1772623309.126:5): pid=7132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.307" name="memory.events" dev="tmpfs" ino=298 res=0 errno=0 [ 127.163120][ T5828] Bluetooth: hci4: command tx timeout [ 127.221552][ T7168] netlink: 'syz.3.321': attribute type 4 has an invalid length. [ 127.243987][ T7168] netlink: 'syz.3.321': attribute type 4 has an invalid length. [ 127.346725][ T7170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.320'. [ 127.527352][ T5909] IPVS: starting estimator thread 0... [ 127.624320][ T7182] IPVS: using max 23 ests per chain, 55200 per kthread [ 128.476868][ T7218] batadv_slave_1: entered promiscuous mode [ 128.510548][ T7214] batadv_slave_1: left promiscuous mode [ 129.031213][ T7247] netlink: 'syz.4.347': attribute type 21 has an invalid length. [ 129.039166][ T7247] IPv6: NLM_F_CREATE should be specified when creating new route [ 130.034522][ T7268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.213418][ T7272] netlink: 52 bytes leftover after parsing attributes in process `syz.3.356'. [ 130.555014][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 130.779780][ T7289] netlink: 'syz.3.363': attribute type 21 has an invalid length. [ 130.787733][ T7289] IPv6: NLM_F_CREATE should be specified when creating new route [ 130.799349][ T7291] syzkaller1: entered promiscuous mode [ 130.805201][ T7291] syzkaller1: entered allmulticast mode [ 131.066634][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.369'. [ 131.448513][ T7326] netlink: 'syz.1.378': attribute type 21 has an invalid length. [ 131.456430][ T7326] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.554262][ T12] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 131.657544][ T7339] xt_hashlimit: size too large, truncated to 1048576 [ 131.905016][ T29] audit: type=1800 audit(1772623315.466:6): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.381" name="memory.events" dev="tmpfs" ino=379 res=0 errno=0 [ 132.015941][ T7349] netlink: 64 bytes leftover after parsing attributes in process `syz.1.384'. [ 132.031840][ T7349] syzkaller1: entered promiscuous mode [ 132.037580][ T7349] syzkaller1: entered allmulticast mode [ 132.205637][ T7319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.239293][ T7336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.836377][ T7373] xt_hashlimit: size too large, truncated to 1048576 [ 132.959598][ T7377] syzkaller1: entered promiscuous mode [ 132.992325][ T7377] syzkaller1: entered allmulticast mode [ 133.012308][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.022197][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.319190][ T7388] netlink: 'syz.2.392': attribute type 21 has an invalid length. [ 133.335760][ T7388] IPv6: NLM_F_CREATE should be specified when creating new route [ 133.971378][ T7402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'. [ 133.998751][ T7404] netlink: 'syz.3.398': attribute type 29 has an invalid length. [ 134.070827][ T7404] netlink: 'syz.3.398': attribute type 29 has an invalid length. [ 134.136679][ T7404] netlink: 500 bytes leftover after parsing attributes in process `syz.3.398'. [ 134.480399][ T7419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.762644][ T29] audit: type=1800 audit(1772623318.316:7): pid=7413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.401" name="memory.events" dev="tmpfs" ino=404 res=0 errno=0 [ 134.840845][ T7425] netlink: 'syz.1.406': attribute type 21 has an invalid length. [ 135.202704][ T7438] syzkaller0: entered promiscuous mode [ 135.213767][ T7438] syzkaller0: entered allmulticast mode [ 135.821814][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 136.430268][ T7445] lec:lec_atm_close: lec0: Shut down! [ 136.461241][ T7471] netlink: 'syz.3.418': attribute type 2 has an invalid length. [ 136.489173][ T7471] netlink: 'syz.3.418': attribute type 2 has an invalid length. [ 136.754059][ T7478] netlink: 'syz.3.420': attribute type 21 has an invalid length. [ 137.119531][ T7486] syzkaller0: entered promiscuous mode [ 137.139850][ T7486] syzkaller0: entered allmulticast mode [ 137.238490][ T7465] lec:lec_atm_close: lec0: Shut down! [ 137.466351][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.425'. [ 137.488575][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.507021][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.525412][ T7498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.550475][ T7495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.634914][ T7500] vlan3: entered allmulticast mode [ 137.670665][ T7500] bridge2: entered allmulticast mode [ 137.695194][ T7497] bridge2: port 1(bond0) entered blocking state [ 137.703518][ T7497] bridge2: port 1(bond0) entered disabled state [ 137.709998][ T7497] bond0: entered allmulticast mode [ 137.725440][ T7497] bond_slave_0: entered allmulticast mode [ 137.744067][ T7497] bond_slave_1: entered allmulticast mode [ 137.760149][ T7497] dummy0: entered allmulticast mode [ 137.776793][ T7497] bond0: entered promiscuous mode [ 137.783226][ T7497] bond_slave_0: entered promiscuous mode [ 137.789131][ T7497] bond_slave_1: entered promiscuous mode [ 137.803389][ T7497] dummy0: entered promiscuous mode [ 137.821431][ T7497] bridge2: port 1(bond0) entered blocking state [ 137.827907][ T7497] bridge2: port 1(bond0) entered forwarding state [ 137.853304][ T7505] team0: Mode changed to "activebackup" [ 137.873211][ T5841] lec:lec_start_xmit: lec0:No lecd attached [ 138.069306][ T7515] syzkaller1: entered promiscuous mode [ 138.076474][ T7515] syzkaller1: entered allmulticast mode [ 138.381241][ T7526] netlink: 'syz.1.432': attribute type 21 has an invalid length. [ 138.574576][ T7534] netlink: 'syz.2.434': attribute type 4 has an invalid length. [ 138.655356][ T7537] syzkaller0: entered promiscuous mode [ 138.660902][ T7537] syzkaller0: entered allmulticast mode [ 139.040437][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 139.080662][ T7555] openvswitch: netlink: Flow actions attr not present in new flow. [ 139.219438][ T7554] syzkaller0: entered promiscuous mode [ 139.230142][ T7554] syzkaller0: entered allmulticast mode [ 139.552062][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.442'. [ 139.601155][ T7570] syzkaller0: entered promiscuous mode [ 139.649361][ T7570] syzkaller0: entered allmulticast mode [ 139.836105][ T7577] syzkaller0: entered promiscuous mode [ 139.841654][ T7577] syzkaller0: entered allmulticast mode [ 139.850651][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 140.276416][ T7591] syzkaller0: entered promiscuous mode [ 140.282060][ T7591] syzkaller0: entered allmulticast mode [ 140.306086][ T7593] netlink: 'syz.3.450': attribute type 4 has an invalid length. [ 140.480757][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 140.504867][ T7579] lec:lec_atm_close: lec0: Shut down! [ 140.881789][ T7603] syzkaller0: entered promiscuous mode [ 140.903157][ T7603] syzkaller0: entered allmulticast mode [ 141.062266][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.456'. [ 141.190571][ T7614] raw_sendmsg: syz.3.457 forgot to set AF_INET. Fix it! [ 141.342766][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 141.555547][ T7623] syzkaller0: entered promiscuous mode [ 141.571377][ T7623] syzkaller0: entered allmulticast mode [ 141.612419][ T7627] netlink: 'syz.0.462': attribute type 4 has an invalid length. [ 143.597009][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.465'. [ 143.622262][ T7646] smc: net device hsr0 applied user defined pnetid SYZ2 [ 143.824250][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.471'. [ 143.851769][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'. [ 143.900712][ T7659] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x15 [ 143.933768][ T7660] macvtap1: entered promiscuous mode [ 143.939248][ T7660] bridge0: entered promiscuous mode [ 143.955355][ T7660] macvtap1: entered allmulticast mode [ 143.960787][ T7660] bridge0: entered allmulticast mode [ 144.137551][ T7661] syzkaller0: entered promiscuous mode [ 144.161239][ T7661] syzkaller0: entered allmulticast mode [ 144.224317][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.474'. [ 144.268697][ T7672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.720861][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 145.610581][ T7686] netlink: 'syz.2.477': attribute type 13 has an invalid length. [ 145.712649][ T7672] macvlan2: entered allmulticast mode [ 145.725019][ T7672] veth0_to_bond: entered promiscuous mode [ 145.741365][ T7672] veth0_to_bond: entered allmulticast mode [ 145.761706][ T7672] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 145.943279][ T7694] netlink: 'syz.0.478': attribute type 4 has an invalid length. [ 146.042933][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5540 ms [ 146.047813][ T7697] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.479'. [ 146.051390][ C1] lec:lec_tx_timeout: lec0 [ 146.065603][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 146.096189][ T7697] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 146.642160][ T7723] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x15 [ 146.658896][ T7727] netlink: 'syz.2.487': attribute type 1 has an invalid length. [ 146.675014][ T7727] netlink: 224 bytes leftover after parsing attributes in process `syz.2.487'. [ 147.275321][ T7745] syzkaller0: entered promiscuous mode [ 147.280830][ T7745] syzkaller0: entered allmulticast mode [ 147.288569][ T7748] syzkaller0: entered promiscuous mode [ 147.303191][ T7748] syzkaller0: entered allmulticast mode [ 147.320448][ T7759] tipc: Enabled bearer , priority 0 [ 148.739190][ T7759] syzkaller0: entered promiscuous mode [ 148.757206][ T7759] syzkaller0: entered allmulticast mode [ 148.764524][ T7759] tipc: Resetting bearer [ 148.792248][ T7758] tipc: Resetting bearer [ 150.041376][ T7758] tipc: Disabling bearer [ 150.050876][ T5918] tipc: Node number set to 3807507008 [ 150.233821][ T7786] netlink: 'syz.3.494': attribute type 4 has an invalid length. [ 150.614810][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'. [ 150.773794][ T7800] dummy0 (unregistering): left promiscuous mode [ 150.826439][ T7815] netlink: 'syz.0.499': attribute type 11 has an invalid length. [ 151.069980][ T7824] netlink: 'syz.3.501': attribute type 21 has an invalid length. [ 151.077906][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 151.077947][ C1] lec:lec_tx_timeout: lec0 [ 151.086287][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 151.234595][ T7823] syzkaller0: entered promiscuous mode [ 151.240216][ T7823] syzkaller0: entered allmulticast mode [ 151.560043][ T7839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.504'. [ 151.830341][ T7850] netlink: 'syz.2.507': attribute type 11 has an invalid length. [ 151.893072][ T7850] netlink: 'syz.2.507': attribute type 23 has an invalid length. [ 151.901083][ T7850] netlink: 224 bytes leftover after parsing attributes in process `syz.2.507'. [ 152.185932][ T7858] syzkaller0: entered promiscuous mode [ 152.211103][ T7858] syzkaller0: entered allmulticast mode [ 152.662030][ T7877] netlink: 'syz.0.511': attribute type 4 has an invalid length. [ 152.830580][ T7892] netlink: 'syz.4.514': attribute type 4 has an invalid length. [ 152.962594][ T7891] netlink: 'syz.3.515': attribute type 21 has an invalid length. [ 152.980503][ T7891] syzkaller0: entered promiscuous mode [ 153.015194][ T7891] syzkaller0: entered allmulticast mode [ 153.051615][ T7888] tunl0: Caught tx_queue_len zero misconfig [ 153.100301][ T7902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.466614][ T29] audit: type=1800 audit(1772623337.026:8): pid=7889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.512" name="memory.events" dev="tmpfs" ino=593 res=0 errno=0 [ 153.739066][ T5828] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 154.037434][ T7927] netlink: 'syz.4.521': attribute type 21 has an invalid length. [ 154.411020][ T7933] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x15 [ 154.507276][ T7935] syzkaller0: entered promiscuous mode [ 154.512827][ T7935] syzkaller0: entered allmulticast mode [ 154.672028][ T7933] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.674637][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'. [ 154.679759][ T7933] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.745889][ T7933] bridge2: port 1(bond0) entered disabled state [ 154.901507][ T7933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.915587][ T7933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.021546][ T7933] veth1_vlan: left allmulticast mode [ 155.232420][ T35] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.297664][ T35] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.505824][ T7962] syzkaller0: entered promiscuous mode [ 155.511371][ T7962] syzkaller0: entered allmulticast mode [ 155.520765][ T35] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.097609][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 156.105747][ C1] lec:lec_tx_timeout: lec0 [ 156.110349][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 156.117557][ T29] audit: type=1800 audit(1772623339.666:9): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.532" name="memory.events" dev="tmpfs" ino=539 res=0 errno=0 [ 157.109412][ T35] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.338921][ T8004] netlink: 'syz.2.534': attribute type 21 has an invalid length. [ 157.583642][ T8021] netlink: 'syz.3.535': attribute type 11 has an invalid length. [ 157.591988][ T8021] netlink: 'syz.3.535': attribute type 23 has an invalid length. [ 157.640749][ T8021] netlink: 224 bytes leftover after parsing attributes in process `syz.3.535'. [ 157.724819][ T8022] netlink: 'syz.0.536': attribute type 11 has an invalid length. [ 157.732686][ T8022] netlink: 'syz.0.536': attribute type 23 has an invalid length. [ 157.741956][ T8022] netlink: 224 bytes leftover after parsing attributes in process `syz.0.536'. [ 157.786569][ T8025] netlink: 'syz.2.538': attribute type 11 has an invalid length. [ 157.799801][ T8025] netlink: 'syz.2.538': attribute type 23 has an invalid length. [ 157.809364][ T8025] netlink: 224 bytes leftover after parsing attributes in process `syz.2.538'. [ 158.033722][ T8034] syzkaller1: entered promiscuous mode [ 158.061109][ T8034] syzkaller1: entered allmulticast mode [ 158.238013][ T8036] netlink: 'syz.3.541': attribute type 11 has an invalid length. [ 158.280506][ T8036] netlink: 'syz.3.541': attribute type 23 has an invalid length. [ 158.289266][ T8036] netlink: 224 bytes leftover after parsing attributes in process `syz.3.541'. [ 158.364692][ T8040] syzkaller0: entered promiscuous mode [ 158.373298][ T8040] syzkaller0: entered allmulticast mode [ 160.273465][ T8063] netlink: 'syz.1.548': attribute type 21 has an invalid length. [ 160.597852][ T8077] netlink: 'syz.0.550': attribute type 11 has an invalid length. [ 160.624618][ T8077] netlink: 'syz.0.550': attribute type 23 has an invalid length. [ 160.632415][ T8077] netlink: 224 bytes leftover after parsing attributes in process `syz.0.550'. [ 160.733950][ T8081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.552'. [ 160.762429][ T8081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.552'. [ 160.861729][ T8084] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.962645][ T8084] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.066259][ T8084] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.122908][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 161.131054][ C1] lec:lec_tx_timeout: lec0 [ 161.136555][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 161.162748][ T8084] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.548048][ T1094] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.593575][ T1094] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.601851][ T1094] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.631524][ T1094] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.867042][ T8092] netlink: 'syz.0.556': attribute type 11 has an invalid length. [ 161.914822][ T8092] netlink: 'syz.0.556': attribute type 23 has an invalid length. [ 161.922615][ T8092] netlink: 224 bytes leftover after parsing attributes in process `syz.0.556'. [ 162.083386][ T8101] nbd: must specify a size in bytes for the device [ 162.845971][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'. [ 163.155780][ T8118] netlink: 'syz.2.561': attribute type 21 has an invalid length. [ 163.219089][ T8118] syzkaller0: entered promiscuous mode [ 163.225715][ T8118] syzkaller0: entered allmulticast mode [ 163.850778][ T8128] syzkaller0: entered promiscuous mode [ 163.856446][ T8128] syzkaller0: entered allmulticast mode [ 165.707142][ T8147] netlink: 'syz.1.568': attribute type 11 has an invalid length. [ 165.731689][ T8147] netlink: 'syz.1.568': attribute type 23 has an invalid length. [ 165.758117][ T8147] netlink: 224 bytes leftover after parsing attributes in process `syz.1.568'. [ 166.031462][ T8150] syzkaller0: entered promiscuous mode [ 166.062568][ T8150] syzkaller0: entered allmulticast mode [ 166.142934][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 166.150997][ C1] lec:lec_tx_timeout: lec0 [ 166.155975][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 166.377390][ T8152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.570'. [ 166.413298][ T8152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.570'. [ 166.437541][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'. [ 166.491999][ T8159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.571'. [ 166.521147][ T8159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.571'. [ 166.679215][ T8167] netlink: 'syz.2.575': attribute type 21 has an invalid length. [ 166.725770][ T8167] syzkaller0: entered promiscuous mode [ 166.731451][ T8167] syzkaller0: entered allmulticast mode [ 167.348416][ T8185] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.383068][ T8185] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.489934][ T8185] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.508490][ T8185] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.598101][ T8195] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 167.642492][ T8185] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.653912][ T8185] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.669841][ T8189] syzkaller0: entered promiscuous mode [ 167.684352][ T8189] syzkaller0: entered allmulticast mode [ 167.836265][ T8185] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.846884][ T8185] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.890321][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'. [ 168.012086][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.022279][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.069920][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.085290][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.120357][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.129449][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.185057][ T8206] syzkaller0: entered promiscuous mode [ 168.190773][ T8206] syzkaller0: entered allmulticast mode [ 168.212828][ T1094] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.221950][ T1094] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.359901][ T8217] xt_ecn: cannot match TCP bits for non-tcp packets [ 170.023422][ T8252] netlink: 'syz.2.592': attribute type 21 has an invalid length. [ 170.091157][ T8252] syzkaller0: entered promiscuous mode [ 170.106064][ T8252] syzkaller0: entered allmulticast mode [ 170.122469][ T8254] netlink: 'syz.0.593': attribute type 11 has an invalid length. [ 170.136200][ T8254] netlink: 'syz.0.593': attribute type 23 has an invalid length. [ 170.145095][ T8254] netlink: 224 bytes leftover after parsing attributes in process `syz.0.593'. [ 170.285274][ T8259] syzkaller0: entered promiscuous mode [ 170.300565][ T8259] syzkaller0: entered allmulticast mode [ 170.373553][ T8262] netlink: 'syz.2.596': attribute type 11 has an invalid length. [ 170.381356][ T8262] netlink: 'syz.2.596': attribute type 23 has an invalid length. [ 170.391379][ T8262] netlink: 224 bytes leftover after parsing attributes in process `syz.2.596'. [ 171.164564][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 171.172600][ C1] lec:lec_tx_timeout: lec0 [ 171.177227][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 171.782817][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.597'. [ 171.892549][ T8267] netlink: 'syz.1.598': attribute type 11 has an invalid length. [ 171.905256][ T8267] netlink: 'syz.1.598': attribute type 23 has an invalid length. [ 171.913132][ T8267] netlink: 224 bytes leftover after parsing attributes in process `syz.1.598'. [ 172.337360][ T8283] syzkaller0: entered promiscuous mode [ 172.344571][ T8283] syzkaller0: entered allmulticast mode [ 172.873647][ T8303] netlink: 'syz.0.603': attribute type 11 has an invalid length. [ 172.881621][ T8303] netlink: 'syz.0.603': attribute type 23 has an invalid length. [ 172.889681][ T8303] netlink: 224 bytes leftover after parsing attributes in process `syz.0.603'. [ 173.931870][ T8305] syzkaller0: entered promiscuous mode [ 173.946691][ T8305] syzkaller0: entered allmulticast mode [ 173.966007][ T8308] netlink: 'syz.1.606': attribute type 21 has an invalid length. [ 174.031684][ T8318] netlink: 'syz.0.605': attribute type 11 has an invalid length. [ 174.059306][ T8318] netlink: 'syz.0.605': attribute type 23 has an invalid length. [ 174.080129][ T8318] netlink: 224 bytes leftover after parsing attributes in process `syz.0.605'. [ 174.373910][ T8323] netlink: 'syz.4.608': attribute type 11 has an invalid length. [ 174.381852][ T8323] netlink: 'syz.4.608': attribute type 23 has an invalid length. [ 174.394257][ T8323] netlink: 224 bytes leftover after parsing attributes in process `syz.4.608'. [ 175.341771][ T8308] syzkaller0: entered promiscuous mode [ 175.347579][ T8308] syzkaller0: entered allmulticast mode [ 175.473287][ T8328] xt_ecn: cannot match TCP bits for non-tcp packets [ 175.571109][ T8330] syzkaller0: entered promiscuous mode [ 175.577093][ T8330] syzkaller0: entered allmulticast mode [ 175.592266][ T8333] xt_ecn: cannot match TCP bits for non-tcp packets [ 175.648520][ T8333] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.202979][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 176.211105][ C1] lec:lec_tx_timeout: lec0 [ 176.215830][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 177.029100][ T8333] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.161202][ T8333] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.227863][ T8359] netlink: 'syz.4.616': attribute type 11 has an invalid length. [ 177.245369][ T8359] netlink: 'syz.4.616': attribute type 23 has an invalid length. [ 177.254894][ T8359] netlink: 224 bytes leftover after parsing attributes in process `syz.4.616'. [ 177.267354][ T8333] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.417536][ T8363] syzkaller1: entered promiscuous mode [ 177.423831][ T8363] syzkaller1: entered allmulticast mode [ 177.565075][ T1094] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.695738][ T1165] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.713093][ T1165] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.830985][ T1094] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.140036][ T8378] netlink: 'syz.2.621': attribute type 21 has an invalid length. [ 178.324443][ T8378] syzkaller0: entered promiscuous mode [ 178.343023][ T8378] syzkaller0: entered allmulticast mode [ 178.478658][ T8400] gretap2: entered allmulticast mode [ 178.969859][ T8415] syzkaller0: entered promiscuous mode [ 178.975818][ T8415] syzkaller0: entered allmulticast mode [ 179.106385][ T8417] syzkaller1: entered promiscuous mode [ 179.118419][ T8417] syzkaller1: entered allmulticast mode [ 180.411147][ T8442] xt_ecn: cannot match TCP bits for non-tcp packets [ 180.449184][ T8440] netlink: 'syz.4.634': attribute type 11 has an invalid length. [ 180.488191][ T8440] netlink: 'syz.4.634': attribute type 23 has an invalid length. [ 180.523756][ T8440] netlink: 224 bytes leftover after parsing attributes in process `syz.4.634'. [ 180.833118][ T8452] xt_ecn: cannot match TCP bits for non-tcp packets [ 180.968974][ T8455] netlink: 'syz.2.638': attribute type 21 has an invalid length. [ 180.980698][ T8455] syzkaller0: entered promiscuous mode [ 180.988188][ T8455] syzkaller0: entered allmulticast mode [ 181.139323][ T8460] syzkaller0: entered promiscuous mode [ 181.148293][ T8460] syzkaller0: entered allmulticast mode [ 181.222972][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 181.231087][ C1] lec:lec_tx_timeout: lec0 [ 181.236023][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 181.881510][ T8485] netlink: 'syz.4.646': attribute type 11 has an invalid length. [ 181.902353][ T8485] netlink: 'syz.4.646': attribute type 23 has an invalid length. [ 181.912233][ T8485] netlink: 224 bytes leftover after parsing attributes in process `syz.4.646'. [ 182.714753][ T8506] syzkaller1: entered promiscuous mode [ 182.720306][ T8506] syzkaller1: entered allmulticast mode [ 182.906825][ T8513] xt_ecn: cannot match TCP bits for non-tcp packets [ 182.987560][ T8518] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.319585][ T8518] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.392313][ T8518] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.519289][ T8518] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.656331][ T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.790447][ T1094] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.914125][ T1094] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.989098][ T1164] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.197268][ T8540] xt_ecn: cannot match TCP bits for non-tcp packets [ 184.219698][ T8540] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.335160][ T8540] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.454703][ T8540] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.591696][ T8540] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.121492][ T8573] syzkaller1: entered promiscuous mode [ 185.130510][ T8573] syzkaller1: entered allmulticast mode [ 185.223327][ T8577] netlink: 'syz.3.668': attribute type 4 has an invalid length. [ 185.969561][ T8600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.560900][ T8603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'. [ 187.038559][ T8616] syzkaller0: entered promiscuous mode [ 187.044224][ T8616] syzkaller0: entered allmulticast mode [ 187.406536][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6170 ms [ 187.414601][ C1] lec:lec_tx_timeout: lec0 [ 187.419366][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 188.333515][ T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.369023][ T1165] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.449230][ T35] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.475910][ T8623] netlink: 'syz.4.679': attribute type 11 has an invalid length. [ 188.504003][ T8623] netlink: 'syz.4.679': attribute type 23 has an invalid length. [ 188.511796][ T8623] netlink: 224 bytes leftover after parsing attributes in process `syz.4.679'. [ 188.538453][ T79] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.849263][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.683'. [ 188.936132][ T8642] syzkaller1: entered promiscuous mode [ 188.941678][ T8642] syzkaller1: entered allmulticast mode [ 189.104466][ T8648] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x15 [ 189.217373][ T8648] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.224984][ T8648] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.318060][ T8648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.340141][ T8648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.565309][ T8648] syz_tun: left allmulticast mode [ 189.688429][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.689'. [ 189.741622][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.689'. [ 189.817792][ T8658] syzkaller0: entered promiscuous mode [ 189.823487][ T8658] syzkaller0: entered allmulticast mode [ 189.843392][ T79] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.860334][ T79] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.295009][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.691'. [ 191.471237][ T79] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.479747][ T79] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.693816][ T8715] macvtap0: entered promiscuous mode [ 191.723657][ T8715] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 192.103443][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.697'. [ 192.249143][ T8731] gretap1: entered allmulticast mode [ 192.357432][ T8743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.702'. [ 192.522212][ T8714] macvtap0: left promiscuous mode [ 193.162904][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 193.171094][ C1] lec:lec_tx_timeout: lec0 [ 193.176006][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 193.278366][ T8772] netlink: 'syz.4.711': attribute type 11 has an invalid length. [ 193.301178][ T8772] netlink: 'syz.4.711': attribute type 23 has an invalid length. [ 193.310985][ T8772] netlink: 224 bytes leftover after parsing attributes in process `syz.4.711'. [ 193.320769][ T8770] syzkaller0: entered promiscuous mode [ 193.326592][ T8770] syzkaller0: entered allmulticast mode [ 194.075933][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'. [ 194.323259][ T8806] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.390743][ T8806] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.458424][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.465014][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.483691][ T8806] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.570166][ T8815] netlink: 'syz.4.721': attribute type 11 has an invalid length. [ 194.590856][ T8815] netlink: 'syz.4.721': attribute type 23 has an invalid length. [ 194.599473][ T8815] netlink: 224 bytes leftover after parsing attributes in process `syz.4.721'. [ 194.614707][ T8806] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.744433][ T8818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.722'. [ 195.083148][ T1094] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.124004][ T1094] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.195147][ T1165] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.315172][ T1165] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.566841][ T8829] syzkaller0: entered promiscuous mode [ 195.574203][ T8833] netlink: 'syz.1.725': attribute type 11 has an invalid length. [ 195.582128][ T8829] syzkaller0: entered allmulticast mode [ 195.589021][ T8833] netlink: 'syz.1.725': attribute type 23 has an invalid length. [ 195.612393][ T8833] netlink: 224 bytes leftover after parsing attributes in process `syz.1.725'. [ 196.005651][ T8850] netlink: 'syz.1.728': attribute type 11 has an invalid length. [ 196.025999][ T8850] netlink: 'syz.1.728': attribute type 23 has an invalid length. [ 196.034829][ T8850] netlink: 224 bytes leftover after parsing attributes in process `syz.1.728'. [ 197.391734][ T8861] xt_ecn: cannot match TCP bits for non-tcp packets [ 197.537634][ T8867] macvtap0: entered promiscuous mode [ 197.595428][ T8867] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 197.862710][ T8879] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.933155][ T8880] syzkaller0: entered promiscuous mode [ 197.943249][ T8880] syzkaller0: entered allmulticast mode [ 197.976834][ T8879] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.054846][ T8879] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.142468][ T8888] xt_ecn: cannot match TCP bits for non-tcp packets [ 198.165849][ T8879] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.182927][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 198.191050][ C1] lec:lec_tx_timeout: lec0 [ 198.195960][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 198.218584][ T8888] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.228816][ T8888] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.288107][ T8864] macvtap0: left promiscuous mode [ 198.301141][ T8891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.739'. [ 198.319043][ T8888] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.329093][ T8888] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.469611][ T8888] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.491473][ T8888] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.551525][ T8888] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.561951][ T8888] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.587411][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.648986][ T1094] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.742569][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.760484][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.821852][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.839182][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.931876][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.952278][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.020414][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.028954][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.076961][ T1165] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.087224][ T1165] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.303979][ T8914] syzkaller1: entered promiscuous mode [ 199.309648][ T8914] syzkaller1: entered allmulticast mode [ 199.667005][ T8929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.749'. [ 199.970180][ T8933] netlink: 'syz.2.751': attribute type 11 has an invalid length. [ 199.980021][ T8933] netlink: 'syz.2.751': attribute type 23 has an invalid length. [ 200.003481][ T8933] netlink: 224 bytes leftover after parsing attributes in process `syz.2.751'. [ 200.136123][ T8942] netlink: 'syz.3.752': attribute type 11 has an invalid length. [ 200.151202][ T8942] netlink: 'syz.3.752': attribute type 23 has an invalid length. [ 200.160010][ T8942] netlink: 224 bytes leftover after parsing attributes in process `syz.3.752'. [ 200.744818][ T8952] syzkaller0: entered promiscuous mode [ 200.750518][ T8952] syzkaller0: entered allmulticast mode [ 201.593805][ T8980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.765'. [ 201.643219][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 201.644806][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 201.649322][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 202.526262][ T9012] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.553050][ T9012] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.607513][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.772'. [ 202.634661][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 202.676243][ T9012] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.690867][ T9012] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.784865][ T9012] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.823040][ T9012] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.906977][ T9022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.777'. [ 203.071910][ T9012] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.092031][ T9012] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.202949][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 203.211048][ C1] lec:lec_tx_timeout: lec0 [ 203.216274][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 203.427684][ T9034] syzkaller0: entered promiscuous mode [ 203.436917][ T9034] syzkaller0: entered allmulticast mode [ 203.468813][ T9044] netlink: 'syz.1.781': attribute type 11 has an invalid length. [ 203.491440][ T9044] netlink: 'syz.1.781': attribute type 23 has an invalid length. [ 203.503220][ T9044] netlink: 224 bytes leftover after parsing attributes in process `syz.1.781'. [ 203.593621][ T1165] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.602278][ T1165] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.644798][ T1165] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.653303][ T1165] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.661504][ T1165] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.683695][ T1165] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.729796][ T1165] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.743173][ T1165] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.783722][ T9055] syzkaller0: entered promiscuous mode [ 203.792728][ T9055] syzkaller0: entered allmulticast mode [ 203.889227][ T9057] syzkaller0: entered promiscuous mode [ 203.895190][ T9057] syzkaller0: entered allmulticast mode [ 204.618184][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'. [ 204.702143][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'. [ 205.046010][ T9100] macvtap0: entered promiscuous mode [ 205.080471][ T9100] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 205.394920][ T9106] xt_ecn: cannot match TCP bits for non-tcp packets [ 205.421221][ T9106] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.514353][ T9106] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.582601][ T9106] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.694700][ T9106] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.737542][ T9109] xt_ecn: cannot match TCP bits for non-tcp packets [ 205.782360][ T9111] macvtap0: entered promiscuous mode [ 205.798325][ T9111] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 205.819147][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.845383][ T1164] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.865959][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.886779][ T9099] macvtap0: left promiscuous mode [ 205.905851][ T1164] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.089316][ T9120] netlink: 'syz.1.798': attribute type 4 has an invalid length. [ 206.515457][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 206.551229][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'. [ 206.589485][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.800'. [ 206.620705][ T9110] macvtap0: left promiscuous mode [ 206.642627][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.801'. [ 206.848795][ T9152] syzkaller1: entered promiscuous mode [ 206.855539][ T9152] syzkaller1: entered allmulticast mode [ 206.875284][ T9153] xt_ecn: cannot match TCP bits for non-tcp packets [ 206.895808][ T9153] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.978333][ T9156] netlink: 'syz.2.806': attribute type 4 has an invalid length. [ 206.988682][ T9153] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.105336][ T9153] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.188311][ T9153] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.227896][ T9161] netlink: 52 bytes leftover after parsing attributes in process `syz.0.808'. [ 207.435177][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 207.506877][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.807'. [ 207.535992][ T9177] syzkaller0: entered promiscuous mode [ 207.544424][ T9177] syzkaller0: entered allmulticast mode [ 207.552511][ T9181] netlink: 'syz.2.811': attribute type 4 has an invalid length. [ 208.205160][ T9203] netlink: 'syz.4.819': attribute type 11 has an invalid length. [ 208.214212][ T9203] netlink: 'syz.4.819': attribute type 23 has an invalid length. [ 208.222921][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 208.230992][ C1] lec:lec_tx_timeout: lec0 [ 208.236059][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 208.521338][ T9223] netlink: 'syz.3.824': attribute type 4 has an invalid length. [ 208.598439][ T9226] syzkaller0: entered promiscuous mode [ 208.605296][ T9226] syzkaller0: entered allmulticast mode [ 208.932552][ T9238] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 209.341356][ T79] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.397019][ T1118] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.449866][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.493104][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.706970][ T9263] syzkaller0: entered promiscuous mode [ 209.727641][ T9266] netlink: 'syz.1.837': attribute type 11 has an invalid length. [ 209.729556][ T9263] syzkaller0: entered allmulticast mode [ 209.749239][ T9266] netlink: 'syz.1.837': attribute type 23 has an invalid length. [ 209.772675][ T9266] __nla_validate_parse: 2 callbacks suppressed [ 209.772696][ T9266] netlink: 224 bytes leftover after parsing attributes in process `syz.1.837'. [ 209.861084][ T9269] netlink: 'syz.3.838': attribute type 11 has an invalid length. [ 209.883118][ T9269] netlink: 'syz.3.838': attribute type 23 has an invalid length. [ 209.890924][ T9269] netlink: 224 bytes leftover after parsing attributes in process `syz.3.838'. [ 211.586305][ T9288] syzkaller1: entered promiscuous mode [ 211.591856][ T9288] syzkaller1: entered allmulticast mode [ 211.661829][ T9292] syzkaller0: entered promiscuous mode [ 211.694101][ T9292] syzkaller0: entered allmulticast mode [ 211.858985][ T9302] netlink: 'syz.4.846': attribute type 11 has an invalid length. [ 211.874344][ T9302] netlink: 'syz.4.846': attribute type 23 has an invalid length. [ 211.888601][ T9302] netlink: 224 bytes leftover after parsing attributes in process `syz.4.846'. [ 212.014418][ T9309] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 212.106599][ T9320] gretap1: entered allmulticast mode [ 213.162307][ T9355] netlink: 'syz.2.858': attribute type 11 has an invalid length. [ 213.185408][ T9355] netlink: 'syz.2.858': attribute type 23 has an invalid length. [ 213.193510][ T9355] netlink: 224 bytes leftover after parsing attributes in process `syz.2.858'. [ 213.508510][ T9363] syzkaller0: entered promiscuous mode [ 213.521640][ T9363] syzkaller0: entered allmulticast mode [ 213.542338][ T9365] syzkaller1: entered promiscuous mode [ 213.550328][ T9365] syzkaller1: entered allmulticast mode [ 214.282908][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6050 ms [ 214.291026][ C1] lec:lec_tx_timeout: lec0 [ 214.295893][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 215.329148][ T9382] syzkaller1: entered promiscuous mode [ 215.352492][ T9382] syzkaller1: entered allmulticast mode [ 215.418099][ T9380] netlink: 'syz.1.863': attribute type 11 has an invalid length. [ 215.442229][ T9380] netlink: 'syz.1.863': attribute type 23 has an invalid length. [ 215.456473][ T9380] netlink: 224 bytes leftover after parsing attributes in process `syz.1.863'. [ 215.499228][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.505121][ T9387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.519533][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.673756][ T9392] syzkaller1: entered promiscuous mode [ 215.679397][ T9392] syzkaller1: entered allmulticast mode [ 216.157636][ T9401] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 216.240517][ T9403] syzkaller0: entered promiscuous mode [ 216.257254][ T9403] syzkaller0: entered allmulticast mode [ 216.344441][ T9405] netlink: 'syz.3.869': attribute type 11 has an invalid length. [ 216.376021][ T9405] netlink: 'syz.3.869': attribute type 23 has an invalid length. [ 216.390234][ T9405] netlink: 224 bytes leftover after parsing attributes in process `syz.3.869'. [ 216.608833][ T9417] syzkaller0: entered promiscuous mode [ 216.614601][ T9417] syzkaller0: entered allmulticast mode [ 217.072119][ T9435] netlink: 44 bytes leftover after parsing attributes in process `syz.2.875'. [ 218.190375][ T9447] gretap1: entered allmulticast mode [ 218.286588][ T9430] syzkaller0: entered promiscuous mode [ 218.292133][ T9430] syzkaller0: entered allmulticast mode [ 218.474510][ T9468] netlink: 'syz.1.876': attribute type 11 has an invalid length. [ 218.486801][ T9468] netlink: 'syz.1.876': attribute type 23 has an invalid length. [ 218.516245][ T9468] netlink: 224 bytes leftover after parsing attributes in process `syz.1.876'. [ 218.618125][ T9479] netlink: 'syz.2.879': attribute type 11 has an invalid length. [ 218.640259][ T9479] netlink: 'syz.2.879': attribute type 23 has an invalid length. [ 218.662996][ T9479] netlink: 224 bytes leftover after parsing attributes in process `syz.2.879'. [ 219.121982][ T9488] netlink: 'syz.3.881': attribute type 11 has an invalid length. [ 219.130283][ T9488] netlink: 'syz.3.881': attribute type 23 has an invalid length. [ 219.138863][ T9488] netlink: 224 bytes leftover after parsing attributes in process `syz.3.881'. [ 220.043653][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 220.051712][ C1] lec:lec_tx_timeout: lec0 [ 220.056819][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 220.186903][ T9493] netlink: 'syz.4.882': attribute type 4 has an invalid length. [ 220.326786][ T9495] syzkaller0: entered promiscuous mode [ 220.332335][ T9495] syzkaller0: entered allmulticast mode [ 220.371308][ T9500] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 220.944753][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 221.025877][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.888'. [ 221.365242][ T9536] netlink: 'syz.2.892': attribute type 21 has an invalid length. [ 221.486721][ T9528] syzkaller0: entered promiscuous mode [ 221.499322][ T9528] syzkaller0: entered allmulticast mode [ 221.656482][ T9544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.893'. [ 223.045303][ T9536] syzkaller0: entered promiscuous mode [ 223.050815][ T9536] syzkaller0: entered allmulticast mode [ 223.101201][ T9553] gretap1: entered allmulticast mode [ 223.174907][ T9555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.894'. [ 224.562705][ T9569] gretap1: entered allmulticast mode [ 224.691379][ T9571] netlink: 'syz.1.897': attribute type 11 has an invalid length. [ 224.710905][ T9573] netlink: 'syz.2.898': attribute type 4 has an invalid length. [ 224.734643][ T9571] netlink: 'syz.1.897': attribute type 23 has an invalid length. [ 224.756501][ T9571] netlink: 224 bytes leftover after parsing attributes in process `syz.1.897'. [ 225.062889][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 225.071035][ C1] lec:lec_tx_timeout: lec0 [ 225.075715][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 225.318595][ T9601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.903'. [ 225.401637][ T9612] syzkaller1: entered promiscuous mode [ 225.407454][ T9612] syzkaller1: entered allmulticast mode [ 225.440001][ T9601] gretap2: entered allmulticast mode [ 225.794300][ T9616] syzkaller0: entered promiscuous mode [ 225.827115][ T9616] syzkaller0: entered allmulticast mode [ 225.968248][ T9621] gretap2: entered allmulticast mode [ 226.043265][ T9632] syzkaller0: entered promiscuous mode [ 226.050628][ T9632] syzkaller0: entered allmulticast mode [ 226.456524][ T9646] netlink: 'syz.4.912': attribute type 11 has an invalid length. [ 226.464716][ T9646] netlink: 'syz.4.912': attribute type 23 has an invalid length. [ 226.472472][ T9646] netlink: 224 bytes leftover after parsing attributes in process `syz.4.912'. [ 226.638905][ T9655] netlink: 'syz.0.914': attribute type 4 has an invalid length. [ 227.008060][ T9663] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 227.159752][ T9668] syzkaller1: entered promiscuous mode [ 227.167274][ T9668] syzkaller1: entered allmulticast mode [ 227.533127][ T9680] netlink: 'syz.3.919': attribute type 11 has an invalid length. [ 227.549462][ T9680] netlink: 'syz.3.919': attribute type 23 has an invalid length. [ 227.575503][ T9680] netlink: 224 bytes leftover after parsing attributes in process `syz.3.919'. [ 228.224675][ T9696] syzkaller1: entered promiscuous mode [ 228.235560][ T9696] syzkaller1: entered allmulticast mode [ 228.788517][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.823441][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.832013][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.023175][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.366325][ T9721] xt_ecn: cannot match TCP bits for non-tcp packets [ 229.515125][ T9727] xt_ecn: cannot match TCP bits for non-tcp packets [ 230.082911][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 230.091032][ C1] lec:lec_tx_timeout: lec0 [ 230.094161][ T9740] syzkaller0: entered promiscuous mode [ 230.095691][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 230.101018][ T9740] syzkaller0: entered allmulticast mode [ 230.361413][ T9753] xt_ecn: cannot match TCP bits for non-tcp packets [ 231.899641][ T9769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.940'. [ 234.315321][ T9815] gretap2: entered allmulticast mode [ 234.701523][ T9831] syzkaller0: entered promiscuous mode [ 234.733430][ T9831] syzkaller0: entered allmulticast mode [ 234.894788][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'. [ 234.978798][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'. [ 235.112880][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 235.120957][ C1] lec:lec_tx_timeout: lec0 [ 235.127362][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 235.375648][ T9845] syzkaller0: entered promiscuous mode [ 235.381214][ T9845] syzkaller0: entered allmulticast mode [ 237.757925][ T9889] gretap1: entered allmulticast mode [ 238.056692][ T9898] syzkaller0: entered promiscuous mode [ 238.062324][ T9898] syzkaller0: entered allmulticast mode [ 238.445810][ T9902] netlink: 'syz.3.966': attribute type 11 has an invalid length. [ 238.475117][ T9902] netlink: 'syz.3.966': attribute type 23 has an invalid length. [ 238.484307][ T9902] netlink: 224 bytes leftover after parsing attributes in process `syz.3.966'. [ 238.553891][ T9913] netlink: 'syz.0.967': attribute type 11 has an invalid length. [ 238.561736][ T9913] netlink: 'syz.0.967': attribute type 23 has an invalid length. [ 238.571909][ T9913] netlink: 224 bytes leftover after parsing attributes in process `syz.0.967'. [ 239.686043][ T9915] syzkaller0: entered promiscuous mode [ 239.706578][ T9915] syzkaller0: entered allmulticast mode [ 239.726901][ T9915] netlink: 28 bytes leftover after parsing attributes in process `syz.2.968'. [ 239.745569][ T9915] netlink: 28 bytes leftover after parsing attributes in process `syz.2.968'. [ 240.142889][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 240.151003][ C1] lec:lec_tx_timeout: lec0 [ 240.155974][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 240.733544][ T9934] xt_ecn: cannot match TCP bits for non-tcp packets [ 241.502425][ T9937] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 241.971519][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.976'. [ 242.029761][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.976'. [ 242.286161][ T9961] netlink: 'syz.4.977': attribute type 11 has an invalid length. [ 242.298254][ T9961] netlink: 'syz.4.977': attribute type 23 has an invalid length. [ 242.307101][ T9961] netlink: 224 bytes leftover after parsing attributes in process `syz.4.977'. [ 242.369690][ T9957] syzkaller0: entered promiscuous mode [ 242.396086][ T9957] syzkaller0: entered allmulticast mode [ 243.022710][ T9995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.984'. [ 244.294100][T10011] netlink: 28 bytes leftover after parsing attributes in process `syz.4.988'. [ 244.392282][T10014] syzkaller0: entered promiscuous mode [ 244.398030][T10014] syzkaller0: entered allmulticast mode [ 244.414421][T10014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.989'. [ 244.434888][T10014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.989'. [ 244.662272][T10027] gretap1: entered allmulticast mode [ 245.162882][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 245.170953][ C1] lec:lec_tx_timeout: lec0 [ 245.175976][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 245.316444][T10047] syzkaller0: entered promiscuous mode [ 245.322089][T10047] syzkaller0: entered allmulticast mode [ 245.975758][T10051] netlink: 'syz.1.996': attribute type 11 has an invalid length. [ 245.986351][T10051] netlink: 'syz.1.996': attribute type 23 has an invalid length. [ 245.994574][T10051] netlink: 224 bytes leftover after parsing attributes in process `syz.1.996'. [ 246.780570][T10056] xt_ecn: cannot match TCP bits for non-tcp packets [ 247.221996][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'. [ 247.262380][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.999'. [ 247.480174][T10070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1000'. [ 247.630944][T10073] xt_ecn: cannot match TCP bits for non-tcp packets [ 248.262758][T10085] gretap1: entered allmulticast mode [ 248.282308][T10088] xt_ecn: cannot match TCP bits for non-tcp packets [ 249.013824][T10106] syzkaller0: entered promiscuous mode [ 249.019953][T10106] syzkaller0: entered allmulticast mode [ 249.026146][T10113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1010'. [ 249.056408][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'. [ 249.108671][T10100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1007'. [ 249.374079][T10136] netlink: 'syz.3.1012': attribute type 11 has an invalid length. [ 249.389280][T10136] netlink: 'syz.3.1012': attribute type 23 has an invalid length. [ 249.407995][T10136] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1012'. [ 250.184294][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 250.192322][ C1] lec:lec_tx_timeout: lec0 [ 250.197013][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 250.806736][T10146] syzkaller0: entered promiscuous mode [ 250.812280][T10146] syzkaller0: entered allmulticast mode [ 250.878241][T10150] xt_ecn: cannot match TCP bits for non-tcp packets [ 251.058163][T10159] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1017'. [ 251.133156][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1015'. [ 251.183068][T10160] gretap1: entered allmulticast mode [ 251.208540][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1015'. [ 251.363329][T10173] xt_ecn: cannot match TCP bits for non-tcp packets [ 251.874980][T10184] xt_ecn: cannot match TCP bits for non-tcp packets [ 251.904167][T10186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1023'. [ 252.113596][T10191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1024'. [ 252.485462][T10201] netlink: 'syz.2.1026': attribute type 11 has an invalid length. [ 252.510681][T10201] netlink: 'syz.2.1026': attribute type 23 has an invalid length. [ 252.519749][T10201] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1026'. [ 255.213028][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 255.221133][ C1] lec:lec_tx_timeout: lec0 [ 255.226720][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 255.255252][T10221] netlink: 'syz.3.1030': attribute type 21 has an invalid length. [ 255.266929][T10221] syzkaller0: entered promiscuous mode [ 255.272444][T10221] syzkaller0: entered allmulticast mode [ 255.645239][T10235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1034'. [ 255.895909][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.902528][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.792039][ T29] audit: type=1800 audit(1772623440.346:10): pid=10243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1036" name="memory.events" dev="tmpfs" ino=945 res=0 errno=0 [ 256.815030][T10243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.557214][T10250] xt_ecn: cannot match TCP bits for non-tcp packets [ 257.644605][T10250] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.656439][T10250] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.854557][T10250] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.866948][T10250] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.970382][T10250] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.998491][T10250] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.159093][T10250] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.190422][T10250] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.215985][T10261] netlink: 'syz.1.1038': attribute type 11 has an invalid length. [ 258.231361][T10261] netlink: 'syz.1.1038': attribute type 23 has an invalid length. [ 258.251950][T10261] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1038'. [ 258.394754][ T1165] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.414496][ T1165] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.470545][ T1094] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.491973][ T1094] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.593077][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.601550][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.639966][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.658537][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.051774][T10286] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1045'. [ 259.184859][T10288] netlink: 'syz.2.1043': attribute type 21 has an invalid length. [ 259.383279][T10288] syzkaller0: entered promiscuous mode [ 259.412921][T10288] syzkaller0: entered allmulticast mode [ 259.698708][T10316] netlink: 'syz.1.1048': attribute type 11 has an invalid length. [ 259.713053][T10316] netlink: 'syz.1.1048': attribute type 23 has an invalid length. [ 259.727511][T10316] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1048'. [ 259.753821][T10317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.843187][ T29] audit: type=1800 audit(1772623443.396:11): pid=10308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1047" name="memory.events" dev="tmpfs" ino=961 res=0 errno=0 [ 260.987717][T10302] syzkaller0: entered promiscuous mode [ 261.003739][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 261.011829][ C1] lec:lec_tx_timeout: lec0 [ 261.012951][T10302] syzkaller0: entered allmulticast mode [ 261.021711][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 261.200672][T10321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1050'. [ 262.511417][T10331] gretap1: entered allmulticast mode [ 263.061180][T10349] netlink: 'syz.3.1055': attribute type 11 has an invalid length. [ 263.081909][T10350] gretap2: entered allmulticast mode [ 263.097390][T10349] netlink: 'syz.3.1055': attribute type 23 has an invalid length. [ 263.118744][T10349] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1055'. [ 263.698050][T10379] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 263.726762][T10381] netlink: 'syz.0.1060': attribute type 21 has an invalid length. [ 263.734961][T10381] IPv6: NLM_F_CREATE should be specified when creating new route [ 263.747257][T10381] syzkaller0: entered promiscuous mode [ 263.752777][T10381] syzkaller0: entered allmulticast mode [ 264.003584][T10388] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1062'. [ 264.120933][T10391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.222291][ T29] audit: type=1800 audit(1772623447.776:12): pid=10385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1061" name="memory.events" dev="tmpfs" ino=1124 res=0 errno=0 [ 264.248426][T10393] netlink: 'syz.0.1063': attribute type 13 has an invalid length. [ 264.256477][T10393] netlink: 'syz.0.1063': attribute type 17 has an invalid length. [ 264.340960][T10393] syz_tun: left promiscuous mode [ 264.362164][T10393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.371374][T10393] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.382461][T10393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.967031][T10408] xt_ecn: cannot match TCP bits for non-tcp packets [ 264.975103][T10410] netlink: 'syz.0.1068': attribute type 13 has an invalid length. [ 264.983713][T10410] netlink: 'syz.0.1068': attribute type 17 has an invalid length. [ 265.087911][T10410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.262232][T10414] syzkaller0: entered promiscuous mode [ 265.268515][T10414] syzkaller0: entered allmulticast mode [ 265.530961][T10423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1072'. [ 265.874729][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 265.939375][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1073'. [ 266.042892][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 266.051044][ C1] lec:lec_tx_timeout: lec0 [ 266.055799][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 266.700995][T10453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.712914][ T29] audit: type=1800 audit(1772623450.266:13): pid=10451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1077" name="memory.events" dev="tmpfs" ino=1145 res=0 errno=0 [ 267.817090][T10455] syzkaller0: entered promiscuous mode [ 267.822628][T10455] syzkaller0: entered allmulticast mode [ 269.383520][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1079'. [ 269.419378][T10461] gretap1: entered allmulticast mode [ 269.433903][T10465] netlink: 'syz.2.1081': attribute type 13 has an invalid length. [ 269.441782][T10465] netlink: 'syz.2.1081': attribute type 17 has an invalid length. [ 269.666259][T10485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1083'. [ 269.676579][T10486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1084'. [ 269.799282][T10465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.815500][T10465] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.864013][T10465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.070855][T10496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1085'. [ 270.105316][T10498] netlink: 'syz.4.1086': attribute type 13 has an invalid length. [ 270.123766][T10498] netlink: 'syz.4.1086': attribute type 17 has an invalid length. [ 270.182648][T10498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.526779][T10506] syzkaller1: entered promiscuous mode [ 270.532323][T10506] syzkaller1: entered allmulticast mode [ 270.716322][T10512] syzkaller1: entered promiscuous mode [ 270.728842][T10512] syzkaller1: entered allmulticast mode [ 270.818927][T10515] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 271.072885][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 271.080941][ C1] lec:lec_tx_timeout: lec0 [ 271.085675][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 271.707745][T10522] netlink: 'syz.4.1091': attribute type 11 has an invalid length. [ 271.716252][T10522] netlink: 'syz.4.1091': attribute type 23 has an invalid length. [ 271.724414][T10522] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1091'. [ 273.008776][T10524] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x15 [ 273.475578][T10524] veth0_to_bond: left allmulticast mode [ 273.733063][ T5841] syz1: Port: 1 Link DOWN [ 273.737856][ T1118] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.764593][ T1118] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.782463][ T1118] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.791444][ T1118] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.857838][ T1118] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.893335][ T1118] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.904628][ T1118] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.924306][ T1118] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.195194][T10544] netlink: 'syz.3.1094': attribute type 13 has an invalid length. [ 274.241371][T10544] netlink: 'syz.3.1094': attribute type 17 has an invalid length. [ 274.534753][T10544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.544905][T10544] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.573576][T10544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.655339][T10552] gretap1: entered allmulticast mode [ 274.885699][T10568] netlink: 'syz.2.1097': attribute type 13 has an invalid length. [ 274.894653][T10568] netlink: 'syz.2.1097': attribute type 17 has an invalid length. [ 274.958423][T10568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.987949][T10562] gretap1: entered allmulticast mode [ 275.365248][T10591] netlink: 'syz.2.1101': attribute type 4 has an invalid length. [ 275.411633][T10592] xt_ecn: cannot match TCP bits for non-tcp packets [ 275.500154][T10584] gretap2: entered allmulticast mode [ 275.552170][T10596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1103'. [ 275.960385][T10623] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1106'. [ 276.068413][T10631] gretap1: entered allmulticast mode [ 276.092866][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 276.100967][ C1] lec:lec_tx_timeout: lec0 [ 276.108698][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 276.454272][T10636] gretap1: entered allmulticast mode [ 276.580460][T10650] xt_ecn: cannot match TCP bits for non-tcp packets [ 276.856117][T10655] netlink: 'syz.4.1111': attribute type 11 has an invalid length. [ 276.873449][T10655] netlink: 'syz.4.1111': attribute type 23 has an invalid length. [ 276.896525][T10655] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1111'. [ 276.941601][T10658] netlink: 'syz.3.1112': attribute type 11 has an invalid length. [ 276.962964][T10658] netlink: 'syz.3.1112': attribute type 23 has an invalid length. [ 276.971242][T10658] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1112'. [ 277.340928][T10669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1113'. [ 277.707219][T10673] netlink: 'syz.4.1114': attribute type 13 has an invalid length. [ 277.716752][T10673] netlink: 'syz.4.1114': attribute type 17 has an invalid length. [ 277.802364][T10673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.842112][T10673] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.854650][T10673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.867157][T10675] xt_ecn: cannot match TCP bits for non-tcp packets [ 278.027999][T10678] netlink: 'syz.4.1116': attribute type 4 has an invalid length. [ 278.535271][T10687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1118'. [ 279.486772][T10697] syzkaller0: entered promiscuous mode [ 279.492313][T10697] syzkaller0: entered allmulticast mode [ 279.740092][T10700] netlink: 'syz.4.1121': attribute type 11 has an invalid length. [ 279.761247][T10700] netlink: 'syz.4.1121': attribute type 23 has an invalid length. [ 279.780515][T10700] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1121'. [ 280.955652][T10721] syzkaller0: entered promiscuous mode [ 280.963382][T10721] syzkaller0: entered allmulticast mode [ 281.097445][T10722] netlink: 'syz.4.1126': attribute type 11 has an invalid length. [ 281.105645][T10722] netlink: 'syz.4.1126': attribute type 23 has an invalid length. [ 281.122867][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 281.123789][T10722] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1126'. [ 281.130946][ C1] lec:lec_tx_timeout: lec0 [ 281.144826][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 281.225968][T10729] netlink: 'syz.1.1127': attribute type 4 has an invalid length. [ 281.717814][T10740] netlink: 'syz.1.1129': attribute type 13 has an invalid length. [ 281.741078][T10740] netlink: 'syz.1.1129': attribute type 17 has an invalid length. [ 281.909588][T10740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.919042][T10740] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.929224][T10740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.972989][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1131'. [ 282.177170][T10753] gretap1: entered allmulticast mode [ 282.214599][T10764] netlink: 'syz.2.1134': attribute type 13 has an invalid length. [ 282.222673][T10764] netlink: 'syz.2.1134': attribute type 17 has an invalid length. [ 282.236805][T10765] xt_ecn: cannot match TCP bits for non-tcp packets [ 282.259587][T10764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.286228][T10767] netlink: 'syz.0.1135': attribute type 13 has an invalid length. [ 282.319680][T10767] netlink: 'syz.0.1135': attribute type 17 has an invalid length. [ 282.441783][T10767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.483360][T10772] netlink: 'syz.3.1136': attribute type 13 has an invalid length. [ 282.491392][T10772] netlink: 'syz.3.1136': attribute type 17 has an invalid length. [ 282.525320][T10772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.608516][T10775] syzkaller0: entered promiscuous mode [ 282.632575][T10775] syzkaller0: entered allmulticast mode [ 282.705269][T10785] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1140'. [ 282.862116][T10780] gretap2: entered allmulticast mode [ 283.107112][T10797] netlink: 'syz.2.1141': attribute type 11 has an invalid length. [ 283.126920][T10797] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1141'. [ 283.284357][T10801] syzkaller0: entered promiscuous mode [ 283.290247][T10801] syzkaller0: entered allmulticast mode [ 283.321154][T10798] syzkaller1: entered promiscuous mode [ 283.327332][T10798] syzkaller1: entered allmulticast mode [ 284.803455][T10806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1144'. [ 284.976566][T10812] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1147'. [ 284.990656][T10812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1147'. [ 285.369762][T10828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.512274][T10830] xt_ecn: cannot match TCP bits for non-tcp packets [ 286.152881][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 286.160944][ C1] lec:lec_tx_timeout: lec0 [ 286.165602][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 286.315957][T10842] validate_nla: 4 callbacks suppressed [ 286.315978][T10842] netlink: 'syz.2.1154': attribute type 13 has an invalid length. [ 286.342532][T10842] netlink: 'syz.2.1154': attribute type 17 has an invalid length. [ 286.379602][T10842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.576939][T10845] syzkaller0: entered promiscuous mode [ 286.582733][T10845] syzkaller0: entered allmulticast mode [ 288.682987][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 288.717327][T10860] netlink: 'syz.2.1159': attribute type 13 has an invalid length. [ 288.733515][T10860] netlink: 'syz.2.1159': attribute type 17 has an invalid length. [ 288.856475][T10860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.100145][T10862] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 289.141785][T10864] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1161'. [ 289.151041][T10864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1161'. [ 289.435679][T10870] netlink: 'syz.4.1162': attribute type 4 has an invalid length. [ 290.027485][T10880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1165'. [ 290.851966][T10905] xt_ecn: cannot match TCP bits for non-tcp packets [ 290.926481][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1171'. [ 291.100504][T10918] netlink: 'syz.1.1174': attribute type 4 has an invalid length. [ 291.123556][T10918] netlink: 'syz.1.1174': attribute type 4 has an invalid length. [ 291.172901][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 291.180984][ C1] lec:lec_tx_timeout: lec0 [ 291.185729][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 291.390863][T10925] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1175'. [ 291.462944][T10927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.568680][ T29] audit: type=1800 audit(1772623475.126:14): pid=10913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1173" name="memory.events" dev="tmpfs" ino=1132 res=0 errno=0 [ 291.768532][T10935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1176'. [ 291.801055][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1176'. [ 292.661195][T10964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1182'. [ 292.666946][T10961] xt_ecn: cannot match TCP bits for non-tcp packets [ 293.067605][T10971] xt_ecn: cannot match TCP bits for non-tcp packets [ 293.299713][T10975] xt_ecn: cannot match TCP bits for non-tcp packets [ 293.985765][T10980] netlink: 'syz.4.1186': attribute type 4 has an invalid length. [ 294.037873][T10981] netlink: 'syz.4.1186': attribute type 4 has an invalid length. [ 294.556795][T10983] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1187'. [ 294.599927][T10983] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 294.799828][T10986] netlink: 'syz.1.1188': attribute type 4 has an invalid length. [ 294.814960][T10986] netlink: 'syz.1.1188': attribute type 4 has an invalid length. [ 295.212085][T10994] netlink: 'syz.1.1190': attribute type 4 has an invalid length. [ 295.250040][T10994] netlink: 'syz.1.1190': attribute type 4 has an invalid length. [ 295.535595][T11000] netlink: 'syz.4.1193': attribute type 4 has an invalid length. [ 295.560869][T11000] netlink: 'syz.4.1193': attribute type 4 has an invalid length. [ 296.192858][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 296.201017][ C1] lec:lec_tx_timeout: lec0 [ 296.205841][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 296.294428][T11022] syzkaller0: entered promiscuous mode [ 296.306641][T11022] syzkaller0: entered allmulticast mode [ 299.431261][T11053] netlink: 'syz.4.1207': attribute type 4 has an invalid length. [ 299.463754][T11053] netlink: 'syz.4.1207': attribute type 4 has an invalid length. [ 299.874414][T11060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1210'. [ 300.893294][T11090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.937494][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.955648][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.212949][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 301.221077][ C1] lec:lec_tx_timeout: lec0 [ 301.226030][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 301.333998][T11100] netlink: 'syz.0.1219': attribute type 4 has an invalid length. [ 301.352009][T11100] netlink: 'syz.0.1219': attribute type 4 has an invalid length. [ 301.639972][T11103] netlink: 'syz.1.1220': attribute type 11 has an invalid length. [ 301.648077][T11103] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1220'. [ 301.732733][T11106] netlink: 'syz.0.1221': attribute type 4 has an invalid length. [ 301.786534][T11106] netlink: 'syz.0.1221': attribute type 4 has an invalid length. [ 302.319547][T11120] netlink: 'syz.0.1222': attribute type 4 has an invalid length. [ 302.371708][T11122] netlink: 'syz.0.1222': attribute type 4 has an invalid length. [ 304.331162][T11160] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1228'. [ 305.192345][T11204] syzkaller0: entered promiscuous mode [ 305.201552][T11204] syzkaller0: entered allmulticast mode [ 305.336814][T11213] netlink: 'syz.2.1238': attribute type 4 has an invalid length. [ 305.388091][T11217] netlink: 'syz.2.1238': attribute type 4 has an invalid length. [ 306.596334][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.605233][T11265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.633415][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.781103][T11274] netlink: 'syz.1.1247': attribute type 4 has an invalid length. [ 306.859031][T11274] netlink: 'syz.1.1247': attribute type 4 has an invalid length. [ 307.002850][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 307.010958][ C1] lec:lec_tx_timeout: lec0 [ 307.016086][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 307.177586][T11287] xt_ecn: cannot match TCP bits for non-tcp packets [ 307.560335][T11298] syzkaller0: entered promiscuous mode [ 307.569163][T11298] syzkaller0: entered allmulticast mode [ 307.579712][T11304] netlink: 'syz.3.1252': attribute type 4 has an invalid length. [ 307.623689][T11304] netlink: 'syz.3.1252': attribute type 4 has an invalid length. [ 307.934892][T11316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1254'. [ 308.946569][T11345] netlink: 'syz.0.1258': attribute type 4 has an invalid length. [ 308.989635][T11345] netlink: 'syz.0.1258': attribute type 4 has an invalid length. [ 309.261905][T11354] syzkaller0: entered promiscuous mode [ 309.270146][T11354] syzkaller0: entered allmulticast mode [ 309.876976][T11370] netlink: 'syz.3.1264': attribute type 4 has an invalid length. [ 309.933056][T11371] netlink: 'syz.3.1264': attribute type 4 has an invalid length. [ 310.714115][T11381] xt_ecn: cannot match TCP bits for non-tcp packets [ 310.911842][T11379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.968580][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.007167][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.212281][T11388] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1268'. [ 311.388264][T11396] syzkaller1: entered promiscuous mode [ 311.403981][T11396] syzkaller1: entered allmulticast mode [ 311.445827][T11398] xt_ecn: cannot match TCP bits for non-tcp packets [ 311.660958][T11408] netlink: 'syz.3.1272': attribute type 4 has an invalid length. [ 311.709991][T11410] netlink: 'syz.0.1273': attribute type 4 has an invalid length. [ 311.726446][T11408] netlink: 'syz.3.1272': attribute type 4 has an invalid length. [ 311.743636][T11410] netlink: 'syz.0.1273': attribute type 4 has an invalid length. [ 311.794883][T11414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1274'. [ 312.002891][T11423] netlink: 'syz.1.1275': attribute type 4 has an invalid length. [ 312.052862][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 312.060967][ C1] lec:lec_tx_timeout: lec0 [ 312.066534][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 312.578375][T11449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.891988][T11460] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1281'. [ 313.094206][ T29] audit: type=1800 audit(1772623496.636:15): pid=11441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1278" name="memory.events" dev="tmpfs" ino=1369 res=0 errno=0 [ 313.269967][T11465] bridge0: left allmulticast mode [ 314.882561][T11528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1290'. [ 315.313883][T11531] netlink: 'syz.2.1291': attribute type 4 has an invalid length. [ 315.326513][T11531] netlink: 'syz.2.1291': attribute type 4 has an invalid length. [ 315.494514][T11533] syzkaller0: entered promiscuous mode [ 315.517631][T11533] syzkaller0: entered allmulticast mode [ 317.072853][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 317.080940][ C1] lec:lec_tx_timeout: lec0 [ 317.086208][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 317.334194][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.340785][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.673677][T11559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1298'. [ 317.852182][T11564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.993652][ T1094] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 318.023233][ T29] audit: type=1800 audit(1772623501.586:16): pid=11560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1297" name="memory.events" dev="tmpfs" ino=1364 res=0 errno=0 [ 318.258145][T11575] syzkaller1: entered promiscuous mode [ 318.275063][T11575] syzkaller1: entered allmulticast mode [ 318.277164][T11574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1301'. [ 318.619664][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.639723][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.639725][ T29] audit: type=1800 audit(1772623502.196:17): pid=11581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1302" name="memory.events" dev="tmpfs" ino=1254 res=0 errno=0 [ 318.673105][T11585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.224859][T11600] netlink: 'syz.0.1304': attribute type 11 has an invalid length. [ 319.232741][T11600] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1304'. [ 320.830344][T11659] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 322.092862][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 322.100963][ C1] lec:lec_tx_timeout: lec0 [ 322.105687][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 322.217682][T11685] netlink: 'syz.1.1313': attribute type 4 has an invalid length. [ 322.229920][T11685] netlink: 'syz.1.1313': attribute type 4 has an invalid length. [ 322.533230][T11693] netlink: 'syz.3.1314': attribute type 21 has an invalid length. [ 322.727865][T11700] syzkaller0: entered promiscuous mode [ 322.735424][T11700] syzkaller0: entered allmulticast mode [ 322.777969][T11705] netlink: 'syz.1.1317': attribute type 4 has an invalid length. [ 322.833220][T11711] netlink: 'syz.1.1317': attribute type 4 has an invalid length. [ 323.286464][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.303085][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.398547][T11726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.687873][T11735] netlink: 'syz.4.1322': attribute type 4 has an invalid length. [ 323.733435][T11735] netlink: 'syz.4.1322': attribute type 4 has an invalid length. [ 323.909232][ T29] audit: type=1800 audit(1772623507.466:18): pid=11714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1318" name="memory.events" dev="tmpfs" ino=1339 res=0 errno=0 [ 323.969115][T11742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.178939][ T29] audit: type=1800 audit(1772623507.736:19): pid=11738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1321" name="memory.events" dev="tmpfs" ino=1419 res=0 errno=0 [ 325.318574][T11768] xt_ecn: cannot match TCP bits for non-tcp packets [ 326.035956][T11779] gretap1: entered allmulticast mode [ 326.553905][T11803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.609331][T11806] netlink: 'syz.4.1333': attribute type 4 has an invalid length. [ 326.621221][T11806] netlink: 'syz.4.1333': attribute type 4 has an invalid length. [ 327.112909][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 327.120976][ C1] lec:lec_tx_timeout: lec0 [ 327.125591][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 327.495098][T11818] xt_ecn: cannot match TCP bits for non-tcp packets [ 327.573538][T11824] netlink: 'syz.0.1337': attribute type 4 has an invalid length. [ 327.625864][T11827] netlink: 'syz.0.1337': attribute type 4 has an invalid length. [ 328.550340][T11838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.734466][ T29] audit: type=1800 audit(1772623512.296:20): pid=11835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1339" name="memory.events" dev="tmpfs" ino=1355 res=0 errno=0 [ 329.772525][T11860] netlink: 'syz.0.1344': attribute type 4 has an invalid length. [ 329.794404][T11860] netlink: 'syz.0.1344': attribute type 4 has an invalid length. [ 331.641483][T11891] netlink: 'syz.1.1351': attribute type 4 has an invalid length. [ 331.697192][T11894] netlink: 'syz.1.1351': attribute type 4 has an invalid length. [ 332.044468][T11897] netlink: 'syz.1.1352': attribute type 4 has an invalid length. [ 332.059183][T11897] netlink: 'syz.1.1352': attribute type 4 has an invalid length. [ 332.124296][ T1164] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 332.132845][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 332.140904][ C1] lec:lec_tx_timeout: lec0 [ 332.146485][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 332.165139][T11889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.583034][T11900] netlink: 'syz.1.1353': attribute type 11 has an invalid length. [ 332.591074][T11900] netlink: 'syz.1.1353': attribute type 23 has an invalid length. [ 332.611060][T11900] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1353'. [ 333.364203][T11904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.434273][T11914] netlink: 'syz.0.1357': attribute type 4 has an invalid length. [ 333.449299][T11914] netlink: 'syz.0.1357': attribute type 4 has an invalid length. [ 333.518074][ T29] audit: type=1800 audit(1772623517.076:21): pid=11908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1355" name="memory.events" dev="tmpfs" ino=1427 res=0 errno=0 [ 333.815892][T11934] gretap1: entered allmulticast mode [ 333.901947][T11935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.012526][ T29] audit: type=1800 audit(1772623517.566:22): pid=11917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1356" name="memory.events" dev="tmpfs" ino=1429 res=0 errno=0 [ 334.240049][T11953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.408554][T11957] netlink: 'syz.0.1364': attribute type 4 has an invalid length. [ 334.502719][ T29] audit: type=1800 audit(1772623518.056:23): pid=11943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1361" name="memory.events" dev="tmpfs" ino=1461 res=0 errno=0 [ 334.531509][T11961] syzkaller0: entered promiscuous mode [ 334.543271][T11961] syzkaller0: entered allmulticast mode [ 334.752187][T11964] netlink: 'syz.0.1366': attribute type 13 has an invalid length. [ 334.760225][T11964] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1366'. [ 334.847531][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1367'. [ 335.011373][T11977] syzkaller1: entered promiscuous mode [ 335.019949][T11977] syzkaller1: entered allmulticast mode [ 335.275395][T11989] syzkaller1: entered promiscuous mode [ 335.288902][T11989] syzkaller1: entered allmulticast mode [ 335.358162][T11992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1373'. [ 335.763462][T12006] xt_ecn: cannot match TCP bits for non-tcp packets [ 336.513024][T12026] netlink: 'syz.1.1379': attribute type 13 has an invalid length. [ 336.521732][T12026] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1379'. [ 336.706985][T12028] syzkaller1: entered promiscuous mode [ 336.722721][T12028] syzkaller1: entered allmulticast mode [ 337.152949][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 337.161060][ C1] lec:lec_tx_timeout: lec0 [ 337.166133][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 337.188464][T12044] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1383'. [ 337.619786][T12053] netlink: 'syz.0.1385': attribute type 4 has an invalid length. [ 337.634425][T12053] netlink: 'syz.0.1385': attribute type 4 has an invalid length. [ 339.622397][T12103] netlink: 'syz.3.1398': attribute type 4 has an invalid length. [ 339.682498][T12105] netlink: 'syz.3.1398': attribute type 4 has an invalid length. [ 339.919805][T12108] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 340.646815][T12140] netlink: 'syz.4.1406': attribute type 4 has an invalid length. [ 340.698267][T12142] netlink: 'syz.4.1406': attribute type 4 has an invalid length. [ 340.815043][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.829374][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.844877][T12143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.888570][T12144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.983250][ T29] audit: type=1800 audit(1772623524.526:24): pid=12139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1405" name="memory.events" dev="tmpfs" ino=1525 res=0 errno=0 [ 341.125700][T12148] netlink: 'syz.0.1408': attribute type 21 has an invalid length. [ 341.186003][T12148] syzkaller0: entered promiscuous mode [ 341.191538][T12148] syzkaller0: entered allmulticast mode [ 341.284838][T12153] netlink: 'syz.4.1409': attribute type 21 has an invalid length. [ 341.301456][T12150] syzkaller0: entered promiscuous mode [ 341.307966][T12150] syzkaller0: entered allmulticast mode [ 341.467167][T12157] netlink: 'syz.0.1411': attribute type 4 has an invalid length. [ 341.502540][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.523593][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.576334][T12160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.580733][T12161] netlink: 'syz.4.1412': attribute type 4 has an invalid length. [ 341.737636][ T29] audit: type=1800 audit(1772623525.296:25): pid=12154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1410" name="memory.events" dev="tmpfs" ino=1495 res=0 errno=0 [ 342.172892][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 342.180952][ C1] lec:lec_tx_timeout: lec0 [ 342.185618][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 342.598472][T12185] netlink: 'syz.1.1419': attribute type 11 has an invalid length. [ 342.629373][T12185] validate_nla: 3 callbacks suppressed [ 342.629395][T12185] netlink: 'syz.1.1419': attribute type 23 has an invalid length. [ 342.691638][T12185] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1419'. [ 343.300495][T12209] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1425'. [ 343.418142][T12213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.605132][ T29] audit: type=1800 audit(1772623527.166:26): pid=12204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1424" name="memory.events" dev="tmpfs" ino=1547 res=0 errno=0 [ 343.942003][T12216] netlink: 'syz.0.1426': attribute type 4 has an invalid length. [ 343.957996][T12216] netlink: 'syz.0.1426': attribute type 4 has an invalid length. [ 344.305549][T12219] netlink: 'syz.0.1427': attribute type 4 has an invalid length. [ 344.357339][T12220] netlink: 'syz.0.1427': attribute type 4 has an invalid length. [ 345.176254][T12228] syzkaller0: entered promiscuous mode [ 345.181834][T12228] syzkaller0: entered allmulticast mode [ 345.506643][T12235] netlink: 'syz.3.1433': attribute type 4 has an invalid length. [ 345.565467][T12236] netlink: 'syz.3.1433': attribute type 4 has an invalid length. [ 346.950448][T12247] netlink: 'syz.1.1437': attribute type 4 has an invalid length. [ 346.988841][T12247] netlink: 'syz.1.1437': attribute type 4 has an invalid length. [ 347.137827][T12255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.192853][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 347.200944][ C1] lec:lec_tx_timeout: lec0 [ 347.205642][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 347.213215][ T1164] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 347.259426][ T29] audit: type=1800 audit(1772623530.816:27): pid=12249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1436" name="memory.events" dev="tmpfs" ino=1471 res=0 errno=0 [ 347.309129][T12258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.504544][T12260] netlink: 'syz.1.1439': attribute type 4 has an invalid length. [ 347.584272][ T29] audit: type=1800 audit(1772623531.146:28): pid=12254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1438" name="memory.events" dev="tmpfs" ino=1371 res=0 errno=0 [ 348.042982][ C0] ================================================================== [ 348.051122][ C0] BUG: KASAN: slab-use-after-free in rose_t0timer_expiry+0x1aa/0x560 [ 348.059243][ C0] Read of size 8 at addr ffff88802a2ce820 by task kworker/u8:11/1165 [ 348.067344][ C0] [ 348.069703][ C0] CPU: 0 UID: 0 PID: 1165 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 348.069730][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 348.069740][ C0] Workqueue: netns cleanup_net [ 348.069767][ C0] Call Trace: [ 348.069774][ C0] [ 348.069781][ C0] dump_stack_lvl+0xe8/0x150 [ 348.069804][ C0] print_report+0xba/0x230 [ 348.069822][ C0] ? rose_t0timer_expiry+0x1aa/0x560 [ 348.069865][ C0] kasan_report+0x117/0x150 [ 348.069885][ C0] ? rose_t0timer_expiry+0x1aa/0x560 [ 348.069910][ C0] rose_t0timer_expiry+0x1aa/0x560 [ 348.069932][ C0] call_timer_fn+0x192/0x640 [ 348.069951][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 348.069970][ C0] ? call_timer_fn+0xd4/0x640 [ 348.069989][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 348.070011][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.070029][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 348.070049][ C0] __run_timer_base+0x652/0x8b0 [ 348.070065][ C0] ? ktime_get+0x45/0x200 [ 348.070084][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 348.070104][ C0] ? sched_clock_cpu+0x74/0x440 [ 348.070126][ C0] run_timer_softirq+0xb7/0x170 [ 348.070144][ C0] handle_softirqs+0x22a/0x870 [ 348.070166][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 348.070188][ C0] __irq_exit_rcu+0x5f/0x150 [ 348.070207][ C0] irq_exit_rcu+0x9/0x30 [ 348.070225][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 348.070246][ C0] [ 348.070251][ C0] [ 348.070257][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 348.070274][ C0] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 348.070295][ C0] Code: e9 30 ff ff ff e8 65 a5 0b 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e1 b2 79 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 c6 8b 0e 0a cc 48 8d 3d 9e ed 72 [ 348.070310][ C0] RSP: 0018:ffffc900047df6a8 EFLAGS: 00000282 [ 348.070324][ C0] RAX: 306380771f61b900 RBX: 0000000000000246 RCX: 0000000000000046 [ 348.070336][ C0] RDX: 00000000fd4977ea RSI: ffffffff8e16524d RDI: ffffffff8c27aa00 [ 348.070348][ C0] RBP: 0000000000000000 R08: ffffffff826ef8cc R09: ffffffff8e7602e0 [ 348.070359][ C0] R10: dffffc0000000000 R11: ffffed10036dab37 R12: 0000000000000002 [ 348.070370][ C0] R13: ffffffff8e7602e0 R14: 0000000000000000 R15: 0000000000000000 [ 348.070383][ C0] ? kernfs_root+0x1c/0x230 [ 348.070407][ C0] ? kernfs_root+0x1c/0x230 [ 348.070433][ C0] kernfs_root+0x38/0x230 [ 348.070452][ C0] ? kernfs_root+0x1c/0x230 [ 348.070472][ C0] __kernfs_remove+0x422/0x660 [ 348.070496][ C0] kernfs_remove_by_name_ns+0xaf/0x130 [ 348.070511][ C0] sysfs_remove_group+0xfc/0x2e0 [ 348.070533][ C0] sysfs_remove_groups+0x54/0xb0 [ 348.070555][ C0] ib_free_port_attrs+0xc5/0x3b0 [ 348.070582][ C0] rdma_dev_exit_net+0x1de/0x350 [ 348.070603][ C0] ? __pfx_netdev_run_todo+0x10/0x10 [ 348.070619][ C0] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 348.070641][ C0] ? rtnl_is_locked+0x15/0x20 [ 348.070664][ C0] ops_undo_list+0x49f/0x940 [ 348.070685][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 348.070705][ C0] ? idr_destroy+0x218/0x290 [ 348.070723][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 348.070739][ C0] cleanup_net+0x56b/0x800 [ 348.070760][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 348.070781][ C0] ? process_scheduled_works+0xa25/0x1830 [ 348.070800][ C0] ? process_scheduled_works+0xa25/0x1830 [ 348.070819][ C0] process_scheduled_works+0xb02/0x1830 [ 348.070849][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 348.070871][ C0] ? assign_work+0x3d5/0x5e0 [ 348.070891][ C0] worker_thread+0xa50/0xfc0 [ 348.070921][ C0] kthread+0x388/0x470 [ 348.070936][ C0] ? __pfx_worker_thread+0x10/0x10 [ 348.070955][ C0] ? __pfx_kthread+0x10/0x10 [ 348.070969][ C0] ret_from_fork+0x51e/0xb90 [ 348.070991][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 348.071010][ C0] ? __switch_to+0xc7d/0x1450 [ 348.071027][ C0] ? __pfx_kthread+0x10/0x10 [ 348.071041][ C0] ret_from_fork_asm+0x1a/0x30 [ 348.071070][ C0] [ 348.071076][ C0] [ 348.458332][ C0] Allocated by task 8148: [ 348.462659][ C0] kasan_save_track+0x3e/0x80 [ 348.467343][ C0] __kasan_kmalloc+0x93/0xb0 [ 348.471935][ C0] __kmalloc_cache_noprof+0x31c/0x660 [ 348.477306][ C0] rose_add_node+0x23c/0xf00 [ 348.481899][ C0] rose_rt_ioctl+0xd35/0x12a0 [ 348.486577][ C0] rose_ioctl+0x3fb/0x8f0 [ 348.490904][ C0] sock_do_ioctl+0x101/0x320 [ 348.495498][ C0] sock_ioctl+0x5c6/0x7f0 [ 348.499828][ C0] __se_sys_ioctl+0xfc/0x170 [ 348.504416][ C0] do_syscall_64+0x14d/0xf80 [ 348.509016][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.514908][ C0] [ 348.517230][ C0] Freed by task 79: [ 348.521028][ C0] kasan_save_track+0x3e/0x80 [ 348.525710][ C0] kasan_save_free_info+0x46/0x50 [ 348.530736][ C0] __kasan_slab_free+0x5c/0x80 [ 348.535500][ C0] kfree+0x1c1/0x630 [ 348.539401][ C0] rose_timer_expiry+0x4cb/0x600 [ 348.544350][ C0] call_timer_fn+0x192/0x640 [ 348.548944][ C0] __run_timer_base+0x652/0x8b0 [ 348.553796][ C0] run_timer_softirq+0xb7/0x170 [ 348.558648][ C0] handle_softirqs+0x22a/0x870 [ 348.563416][ C0] __irq_exit_rcu+0x5f/0x150 [ 348.568013][ C0] irq_exit_rcu+0x9/0x30 [ 348.572260][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 348.577908][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 348.583948][ C0] [ 348.586283][ C0] The buggy address belongs to the object at ffff88802a2ce800 [ 348.586283][ C0] which belongs to the cache kmalloc-512 of size 512 [ 348.600344][ C0] The buggy address is located 32 bytes inside of [ 348.600344][ C0] freed 512-byte region [ffff88802a2ce800, ffff88802a2cea00) [ 348.614058][ C0] [ 348.616386][ C0] The buggy address belongs to the physical page: [ 348.622801][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a2cc [ 348.631566][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 348.640081][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 348.647652][ C0] page_type: f5(slab) [ 348.651646][ C0] raw: 00fff00000000040 ffff88813fea3c80 dead000000000100 dead000000000122 [ 348.660263][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 348.668849][ C0] head: 00fff00000000040 ffff88813fea3c80 dead000000000100 dead000000000122 [ 348.677520][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 348.686192][ C0] head: 00fff00000000002 ffffea0000a8b301 00000000ffffffff 00000000ffffffff [ 348.694872][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 348.703541][ C0] page dumped because: kasan: bad access detected [ 348.709952][ C0] page_owner tracks the page as allocated [ 348.715668][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5195, tgid 5195 (udevadm), ts 30772472220, free_ts 30744356410 [ 348.736597][ C0] post_alloc_hook+0x231/0x280 [ 348.741371][ C0] get_page_from_freelist+0x24dc/0x2580 [ 348.746924][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 348.752732][ C0] allocate_slab+0x77/0x660 [ 348.757238][ C0] refill_objects+0x331/0x3c0 [ 348.761919][ C0] __pcs_replace_empty_main+0x2b9/0x620 [ 348.767469][ C0] __kmalloc_cache_noprof+0x392/0x660 [ 348.772859][ C0] kernfs_fop_open+0x397/0xca0 [ 348.777635][ C0] do_dentry_open+0x785/0x14e0 [ 348.782405][ C0] vfs_open+0x3b/0x340 [ 348.786482][ C0] path_openat+0x2e08/0x3860 [ 348.791074][ C0] do_file_open+0x23e/0x4a0 [ 348.795578][ C0] do_sys_openat2+0x113/0x200 [ 348.800260][ C0] __x64_sys_openat+0x138/0x170 [ 348.805112][ C0] do_syscall_64+0x14d/0xf80 [ 348.809708][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.815604][ C0] page last free pid 5195 tgid 5195 stack trace: [ 348.821928][ C0] __free_frozen_pages+0xc2b/0xdb0 [ 348.827040][ C0] __slab_free+0x263/0x2b0 [ 348.831458][ C0] qlist_free_all+0x97/0x100 [ 348.836046][ C0] kasan_quarantine_reduce+0x148/0x160 [ 348.841505][ C0] __kasan_slab_alloc+0x22/0x80 [ 348.846356][ C0] __kmalloc_cache_noprof+0x2ba/0x660 [ 348.851727][ C0] kernfs_fop_open+0x397/0xca0 [ 348.856492][ C0] do_dentry_open+0x785/0x14e0 [ 348.861261][ C0] vfs_open+0x3b/0x340 [ 348.865332][ C0] path_openat+0x2e08/0x3860 [ 348.869921][ C0] do_file_open+0x23e/0x4a0 [ 348.874422][ C0] do_sys_openat2+0x113/0x200 [ 348.879103][ C0] __x64_sys_openat+0x138/0x170 [ 348.883957][ C0] do_syscall_64+0x14d/0xf80 [ 348.888552][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.894459][ C0] [ 348.896790][ C0] Memory state around the buggy address: [ 348.902414][ C0] ffff88802a2ce700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 348.910482][ C0] ffff88802a2ce780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 348.918543][ C0] >ffff88802a2ce800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 348.926606][ C0] ^ [ 348.931730][ C0] ffff88802a2ce880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 348.939799][ C0] ffff88802a2ce900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 348.947856][ C0] ================================================================== [ 348.956100][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 348.963310][ C0] CPU: 0 UID: 0 PID: 1165 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 348.972866][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 348.982930][ C0] Workqueue: netns cleanup_net [ 348.987724][ C0] Call Trace: [ 348.991023][ C0] [ 348.993872][ C0] vpanic+0x56c/0xa60 [ 348.997869][ C0] ? __pfx_vpanic+0x10/0x10 [ 349.002378][ C0] ? irqentry_exit+0x59e/0x620 [ 349.007153][ C0] panic+0xc5/0xd0 [ 349.010879][ C0] ? __pfx_panic+0x10/0x10 [ 349.015307][ C0] ? rose_t0timer_expiry+0x1aa/0x560 [ 349.020605][ C0] ? rose_t0timer_expiry+0x1aa/0x560 [ 349.025892][ C0] check_panic_on_warn+0x89/0xb0 [ 349.030834][ C0] ? rose_t0timer_expiry+0x1aa/0x560 [ 349.036124][ C0] end_report+0x73/0x180 [ 349.040371][ C0] ? rose_t0timer_expiry+0x1aa/0x560 [ 349.045657][ C0] kasan_report+0x128/0x150 [ 349.050168][ C0] ? rose_t0timer_expiry+0x1aa/0x560 [ 349.055458][ C0] rose_t0timer_expiry+0x1aa/0x560 [ 349.060578][ C0] call_timer_fn+0x192/0x640 [ 349.065173][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 349.070805][ C0] ? call_timer_fn+0xd4/0x640 [ 349.075488][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 349.080614][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 349.085817][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 349.091455][ C0] __run_timer_base+0x652/0x8b0 [ 349.096307][ C0] ? ktime_get+0x45/0x200 [ 349.100642][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 349.106018][ C0] ? sched_clock_cpu+0x74/0x440 [ 349.110879][ C0] run_timer_softirq+0xb7/0x170 [ 349.115733][ C0] handle_softirqs+0x22a/0x870 [ 349.120505][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 349.125276][ C0] __irq_exit_rcu+0x5f/0x150 [ 349.129872][ C0] irq_exit_rcu+0x9/0x30 [ 349.134145][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 349.139783][ C0] [ 349.142718][ C0] [ 349.145656][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 349.151637][ C0] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 349.156928][ C0] Code: e9 30 ff ff ff e8 65 a5 0b 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e1 b2 79 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 c6 8b 0e 0a cc 48 8d 3d 9e ed 72 [ 349.176539][ C0] RSP: 0018:ffffc900047df6a8 EFLAGS: 00000282 [ 349.182620][ C0] RAX: 306380771f61b900 RBX: 0000000000000246 RCX: 0000000000000046 [ 349.190596][ C0] RDX: 00000000fd4977ea RSI: ffffffff8e16524d RDI: ffffffff8c27aa00 [ 349.198576][ C0] RBP: 0000000000000000 R08: ffffffff826ef8cc R09: ffffffff8e7602e0 [ 349.206552][ C0] R10: dffffc0000000000 R11: ffffed10036dab37 R12: 0000000000000002 [ 349.214534][ C0] R13: ffffffff8e7602e0 R14: 0000000000000000 R15: 0000000000000000 [ 349.222527][ C0] ? kernfs_root+0x1c/0x230 [ 349.227045][ C0] ? kernfs_root+0x1c/0x230 [ 349.231555][ C0] kernfs_root+0x38/0x230 [ 349.235893][ C0] ? kernfs_root+0x1c/0x230 [ 349.240403][ C0] __kernfs_remove+0x422/0x660 [ 349.245177][ C0] kernfs_remove_by_name_ns+0xaf/0x130 [ 349.250637][ C0] sysfs_remove_group+0xfc/0x2e0 [ 349.255583][ C0] sysfs_remove_groups+0x54/0xb0 [ 349.260531][ C0] ib_free_port_attrs+0xc5/0x3b0 [ 349.265490][ C0] rdma_dev_exit_net+0x1de/0x350 [ 349.270437][ C0] ? __pfx_netdev_run_todo+0x10/0x10 [ 349.275724][ C0] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 349.281231][ C0] ? rtnl_is_locked+0x15/0x20 [ 349.285918][ C0] ops_undo_list+0x49f/0x940 [ 349.290518][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 349.295644][ C0] ? idr_destroy+0x218/0x290 [ 349.300237][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 349.305356][ C0] cleanup_net+0x56b/0x800 [ 349.309783][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 349.314738][ C0] ? process_scheduled_works+0xa25/0x1830 [ 349.320463][ C0] ? process_scheduled_works+0xa25/0x1830 [ 349.326187][ C0] process_scheduled_works+0xb02/0x1830 [ 349.331748][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 349.337735][ C0] ? assign_work+0x3d5/0x5e0 [ 349.342346][ C0] worker_thread+0xa50/0xfc0 [ 349.346989][ C0] kthread+0x388/0x470 [ 349.351078][ C0] ? __pfx_worker_thread+0x10/0x10 [ 349.356198][ C0] ? __pfx_kthread+0x10/0x10 [ 349.360788][ C0] ret_from_fork+0x51e/0xb90 [ 349.365388][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 349.370505][ C0] ? __switch_to+0xc7d/0x1450 [ 349.375187][ C0] ? __pfx_kthread+0x10/0x10 [ 349.379783][ C0] ret_from_fork_asm+0x1a/0x30 [ 349.384559][ C0] [ 349.387841][ C0] Kernel Offset: disabled [ 349.392164][ C0] Rebooting in 86400 seconds..