last executing test programs:
31.257685718s ago: executing program 1 (id=703):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/209, 0xd1}], 0x1}, 0x42)
27.189456439s ago: executing program 1 (id=705):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x20, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
25.190771177s ago: executing program 1 (id=708):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
r2 = dup(r1)
sendfile(r2, r2, 0x0, 0x20003)
sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000480)="0e", 0x1}], 0x1}}], 0x1, 0x2000c080)
ioctl$sock_TIOCINQ(r0, 0x541b, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, &(0x7f00000000c0)="5d1643", 0x3, 0x6, 0x75, 0x6, 0x8, 0x79, 0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000611220000000000095000000000000003937d12ee7f27a638e37831c9b8654725c10d09a508c88669514b98950f30e31c44e745ebb"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)
24.116176432s ago: executing program 0 (id=709):
close(0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
23.449714604s ago: executing program 1 (id=710):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f00000001c0)}, 0x10)
21.048597803s ago: executing program 1 (id=711):
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
rseq(0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
set_mempolicy(0x4003, 0x0, 0x3)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = syz_open_dev$dri(0x0, 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940), 0x0})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x4002, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
18.95800422s ago: executing program 0 (id=712):
kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x400000000000000)
13.977573573s ago: executing program 0 (id=713):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0)
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000000c0)=0x1)
mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r0, 0x0)
ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001400))
8.908949904s ago: executing program 0 (id=714):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"})
5.063829411s ago: executing program 0 (id=715):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0xc}, 0x9}, 0x1c)
sendto$inet6(r2, &(0x7f0000000140)="16fd", 0x2, 0x4000000, 0x0, 0x0)
ptrace(0x4206, r0)
waitid(0x0, 0x0, 0x0, 0x2, 0x0)
1.831888945s ago: executing program 1 (id=716):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x50, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0x7, 0xf95}, @value=@ver_80211n={0x0, 0x59cf, 0x0, 0x1, 0x0, 0x3, 0x1}}, 0x1, 0x3, 0x25c, @val={0x10, 0x1, 0x50}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
0s ago: executing program 0 (id=717):
socket$nl_route(0x10, 0x3, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51cd20000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r3, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0x7}, 0x14)
kernel console output (not intermixed with test programs):
Warning: Permanently added '[localhost]:51925' (ED25519) to the list of known hosts.
syzkaller login: [ 334.891283][ T3170] cgroup: Unknown subsys name 'net'
[ 335.505670][ T3170] cgroup: Unknown subsys name 'cpuset'
[ 335.636320][ T3170] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 397.892137][ T3170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 464.929231][ T3175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 465.157672][ T3175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 468.339837][ T3178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 468.732411][ T3178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 478.317647][ T3175] hsr_slave_0: entered promiscuous mode
[ 478.370983][ T3175] hsr_slave_1: entered promiscuous mode
[ 484.066007][ T3178] hsr_slave_0: entered promiscuous mode
[ 484.222017][ T3178] hsr_slave_1: entered promiscuous mode
[ 484.242917][ T3178] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 484.247735][ T3178] Cannot create hsr debugfs directory
[ 487.062903][ T3175] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 487.400769][ T3175] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 487.718568][ T3175] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 488.151038][ T3175] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 492.202443][ T3178] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 492.403300][ T3178] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 492.553136][ T3178] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 492.713160][ T3178] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 505.830030][ T3178] 8021q: adding VLAN 0 to HW filter on device bond0
[ 505.946038][ T3175] 8021q: adding VLAN 0 to HW filter on device bond0
[ 532.605707][ T3175] veth0_vlan: entered promiscuous mode
[ 532.990662][ T3175] veth1_vlan: entered promiscuous mode
[ 535.001691][ T3175] veth0_macvtap: entered promiscuous mode
[ 535.285505][ T3175] veth1_macvtap: entered promiscuous mode
[ 537.079397][ T3175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 537.083001][ T3175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 537.102561][ T3175] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 537.114976][ T3175] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 541.398788][ T3175] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 544.228780][ T3178] veth0_vlan: entered promiscuous mode
[ 544.958472][ T3178] veth1_vlan: entered promiscuous mode
[ 546.807754][ T3178] veth0_macvtap: entered promiscuous mode
[ 546.986262][ T3178] veth1_macvtap: entered promiscuous mode
[ 547.850518][ T3869] netlink: 'syz.0.3': attribute type 3 has an invalid length.
[ 547.870045][ T3869] netlink: 'syz.0.3': attribute type 3 has an invalid length.
[ 548.109995][ T3178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 548.112324][ T3178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 548.129217][ T3178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 548.131468][ T3178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 566.405164][ T3888] veth1_macvtap: left promiscuous mode
[ 566.434555][ T3888] macsec0: entered allmulticast mode
[ 576.079125][ T3891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'.
[ 576.341085][ T3891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9'.
[ 632.145384][ T3918] netlink: 'syz.1.17': attribute type 3 has an invalid length.
[ 632.151539][ T3918] netlink: 'syz.1.17': attribute type 3 has an invalid length.
[ 632.187071][ T3918] netlink: 'syz.1.17': attribute type 3 has an invalid length.
[ 632.198043][ T3918] netlink: 'syz.1.17': attribute type 3 has an invalid length.
[ 632.199992][ T3918] netlink: 'syz.1.17': attribute type 3 has an invalid length.
[ 632.201550][ T3918] netlink: 'syz.1.17': attribute type 3 has an invalid length.
[ 632.315491][ T3918] netlink: 'syz.1.17': attribute type 3 has an invalid length.
[ 633.187449][ T3918] netlink: 'syz.1.17': attribute type 3 has an invalid length.
[ 633.190999][ T3918] netlink: 'syz.1.17': attribute type 3 has an invalid length.
[ 633.681268][ T3918] netlink: 'syz.1.17': attribute type 3 has an invalid length.
[ 649.594411][ T3925] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT
[ 666.028143][ T3935] validate_nla: 41 callbacks suppressed
[ 666.028767][ T3935] netlink: 'syz.1.22': attribute type 3 has an invalid length.
[ 666.060316][ T3935] netlink: 'syz.1.22': attribute type 3 has an invalid length.
[ 666.087295][ T3935] netlink: 'syz.1.22': attribute type 3 has an invalid length.
[ 666.090880][ T3935] netlink: 'syz.1.22': attribute type 3 has an invalid length.
[ 666.148534][ T3935] netlink: 'syz.1.22': attribute type 3 has an invalid length.
[ 666.152274][ T3935] netlink: 'syz.1.22': attribute type 3 has an invalid length.
[ 666.260327][ T3935] netlink: 'syz.1.22': attribute type 3 has an invalid length.
[ 666.277758][ T3935] netlink: 'syz.1.22': attribute type 3 has an invalid length.
[ 666.281243][ T3935] netlink: 'syz.1.22': attribute type 3 has an invalid length.
[ 666.306464][ T3935] netlink: 'syz.1.22': attribute type 3 has an invalid length.
[ 689.561769][ T3942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'.
[ 689.586902][ T3942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'.
[ 693.000767][ T35] audit: type=1326 audit(691.980:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3945 comm="syz.0.25" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x7fc00000
[ 694.678156][ T35] audit: type=1326 audit(693.650:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3945 comm="syz.0.25" exe="/syz-executor" sig=0 arch=c00000f3 syscall=29 compat=0 ip=0xdb8fa code=0x7fc00000
[ 737.562303][ T3870] usb 1-1: new low-speed USB device number 2 using dummy_hcd
[ 738.132249][ T3870] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 738.156192][ T3870] usb 1-1: config 0 has no interface number 0
[ 738.159044][ T3870] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 738.161684][ T3870] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 738.190138][ T3870] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 738.210802][ T3870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 738.599538][ T3870] usb 1-1: config 0 descriptor??
[ 738.733669][ T3970] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 738.929264][ T3870] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 739.605648][ T3808] usb 1-1: USB disconnect, device number 2
[ 748.914651][ T35] audit: type=1326 audit(747.920:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.1.31" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x7fc00000
[ 762.021539][ T3996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'.
[ 762.024284][ T3996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'.
[ 762.026400][ T3996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'.
[ 799.526374][ T35] audit: type=1326 audit(798.480:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4008 comm="syz.0.37" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x7fc00000
[ 844.354693][ T4039] Zero length message leads to an empty skb
[ 868.928618][ T4045] capability: warning: `syz.0.45' uses 32-bit capabilities (legacy support in use)
[ 885.205979][ T4061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'.
[ 885.207418][ T4061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'.
[ 885.208748][ T4061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'.
[ 908.225944][ T4074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'.
[ 908.227475][ T4074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'.
[ 908.231215][ T4074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'.
[ 934.259497][ T4089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.61'.
[ 934.271550][ T4089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.61'.
[ 934.330521][ T4089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.61'.
[ 937.853100][ T4092] fuse: root generation should be zero
[ 968.569641][ T4110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'.
[ 968.571921][ T4110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'.
[ 968.578214][ T4110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'.
[ 971.849245][ T4114] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 973.728650][ T4116] netlink: 96 bytes leftover after parsing attributes in process `syz.0.70'.
[ 979.109937][ T4126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'.
[ 979.112683][ T4126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'.
[ 979.138436][ T4126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'.
[ 1002.471326][ T4140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'.
[ 1002.473027][ T4140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'.
[ 1002.487658][ T4140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'.
[ 1016.377252][ T4151] kernel profiling enabled (shift: 7)
[ 1027.336927][ T3870] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 1027.932218][ T3870] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1027.945407][ T3870] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1027.947820][ T3870] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1027.964583][ T3870] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1027.966994][ T3870] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1028.188131][ T3870] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1028.190551][ T3870] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1028.192353][ T3870] usb 1-1: Product: syz
[ 1028.234835][ T3870] usb 1-1: Manufacturer: syz
[ 1028.491813][ T3870] cdc_wdm 1-1:1.0: skipping garbage
[ 1028.499566][ T3870] cdc_wdm 1-1:1.0: skipping garbage
[ 1028.590851][ T3870] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 1029.239957][ T3870] usb 1-1: USB disconnect, device number 3
[ 1031.752391][ T4174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'.
[ 1031.757254][ T4174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'.
[ 1031.759725][ T4174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'.
[ 1042.312949][ T4184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'.
[ 1042.325170][ T4184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'.
[ 1042.326492][ T4184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'.
[ 1139.773155][ T4232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'.
[ 1170.577294][ T4257] pim6reg1: entered promiscuous mode
[ 1170.578742][ T4257] pim6reg1: entered allmulticast mode
[ 1190.269382][ T4283] pim6reg1: entered promiscuous mode
[ 1190.271489][ T4283] pim6reg1: entered allmulticast mode
[ 1213.491265][ T4301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'.
[ 1213.939840][ T4303] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 1239.229905][ T4316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.135'.
[ 1254.296249][ T4328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'.
[ 1260.876672][ T4340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'.
[ 1280.042261][ T4356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'.
[ 1295.821349][ T4369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'.
[ 1322.029275][ T4409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'.
[ 1340.920777][ T4423] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 1341.167599][ T4423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'.
[ 1363.892122][ T36] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 1364.152828][ T36] usb 2-1: Using ep0 maxpacket: 16
[ 1364.665122][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1364.666925][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1364.668389][ T36] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1364.670043][ T36] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1364.671382][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1364.849078][ T36] usb 2-1: config 0 descriptor??
[ 1367.112022][ T36] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[ 1367.115557][ T36] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[ 1367.116613][ T36] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[ 1367.119462][ T36] microsoft 0003:045E:07DA.0001: item 0 2 0 9 parsing failed
[ 1367.146679][ T36] microsoft 0003:045E:07DA.0001: parse failed
[ 1367.149428][ T36] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22
[ 1367.524807][ T36] usb 2-1: USB disconnect, device number 2
[ 1377.616979][ T36] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 1377.938867][ T36] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1377.941089][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1378.118017][ T36] usb 1-1: config 0 descriptor??
[ 1379.639427][ T36] usb 1-1: USB disconnect, device number 4
[ 1442.445346][ T36] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1442.708708][ T36] usb 1-1: config 0 has an invalid interface number: 84 but max is 0
[ 1442.710980][ T36] usb 1-1: config 0 has an invalid interface number: 66 but max is 0
[ 1442.712959][ T36] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[ 1442.725336][ T36] usb 1-1: config 0 has no interface number 0
[ 1442.727489][ T36] usb 1-1: config 0 has no interface number 1
[ 1442.729644][ T36] usb 1-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64
[ 1442.732019][ T36] usb 1-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1442.737926][ T36] usb 1-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30
[ 1442.740664][ T36] usb 1-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32
[ 1442.742842][ T36] usb 1-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2
[ 1442.746276][ T36] usb 1-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86
[ 1442.751122][ T36] usb 1-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 53
[ 1442.753198][ T36] usb 1-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216
[ 1442.758073][ T36] usb 1-1: config 0 interface 66 has no altsetting 0
[ 1443.042863][ T36] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3
[ 1443.046080][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1443.047299][ T36] usb 1-1: Product: syz
[ 1443.048273][ T36] usb 1-1: Manufacturer: syz
[ 1443.049258][ T36] usb 1-1: SerialNumber: syz
[ 1443.106619][ T36] usb 1-1: config 0 descriptor??
[ 1443.182502][ T36] ljca 1-1:0.84: bulk endpoints not found
[ 1444.030950][ T36] ljca 1-1:0.66: probe with driver ljca failed with error -71
[ 1444.128445][ T36] usb 1-1: USB disconnect, device number 5
[ 1460.059199][ T3884] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1460.426902][ T3884] usb 1-1: Using ep0 maxpacket: 16
[ 1460.537352][ T3884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1460.539885][ T3884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1460.541968][ T3884] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1460.555060][ T3884] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1460.557277][ T3884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1460.739949][ T3884] usb 1-1: config 0 descriptor??
[ 1462.983040][ T3884] microsoft 0003:045E:07DA.0002: report is too long
[ 1462.984829][ T3884] microsoft 0003:045E:07DA.0002: item 0 4 0 11 parsing failed
[ 1462.996068][ T3884] microsoft 0003:045E:07DA.0002: parse failed
[ 1462.998264][ T3884] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22
[ 1463.800765][ T36] usb 1-1: USB disconnect, device number 6
[ 1496.767321][ T4618] netlink: 48 bytes leftover after parsing attributes in process `syz.1.216'.
[ 1504.996654][ T4628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'.
[ 1505.937135][ T4630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.221'.
[ 1513.010942][ T4637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'.
[ 1513.022631][ T4637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'.
[ 1513.035390][ T4637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'.
[ 1513.157950][ T3215] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 1513.412330][ T3215] usb 1-1: Using ep0 maxpacket: 32
[ 1513.509608][ T3215] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1513.512091][ T3215] usb 1-1: config 0 has no interface number 0
[ 1513.522050][ T3215] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1513.526431][ T3215] usb 1-1: config 0 interface 1 has no altsetting 0
[ 1513.681041][ T3215] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1513.682400][ T3215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1513.687030][ T3215] usb 1-1: Product: syz
[ 1513.688093][ T3215] usb 1-1: Manufacturer: syz
[ 1513.688982][ T3215] usb 1-1: SerialNumber: syz
[ 1513.744833][ T3215] usb 1-1: config 0 descriptor??
[ 1515.229043][ T3215] usb 1-1: USB disconnect, device number 7
[ 1516.196503][ T3215] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 1516.419496][ T3215] usb 1-1: Using ep0 maxpacket: 32
[ 1516.561124][ T3215] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1516.571347][ T3215] usb 1-1: config 0 has no interface number 0
[ 1516.586127][ T3215] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1516.588617][ T3215] usb 1-1: config 0 interface 1 has no altsetting 0
[ 1516.676430][ T3215] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1516.678859][ T3215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1516.680792][ T3215] usb 1-1: Product: syz
[ 1516.682457][ T3215] usb 1-1: Manufacturer: syz
[ 1516.703296][ T3215] usb 1-1: SerialNumber: syz
[ 1516.826467][ T3215] usb 1-1: config 0 descriptor??
[ 1518.894603][ C1] hrtimer: interrupt took 1889600 ns
[ 1528.608270][ T3884] usb 1-1: USB disconnect, device number 8
[ 1530.563110][ T4674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'.
[ 1530.568112][ T4674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'.
[ 1530.570412][ T4674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'.
[ 1537.088763][ T4685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.234'.
[ 1546.050869][ T4718] capability: warning: `syz.1.239' uses deprecated v2 capabilities in a way that may be insecure
[ 1585.152058][ T35] audit: type=1326 audit(1584.150:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.0.250" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x7ffc0000
[ 1585.220276][ T35] audit: type=1326 audit(1584.230:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.0.250" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb8fa code=0x7ffc0000
[ 1818.943320][ T4886] process 'syz.0.299' launched '/dev/fd/6' with NULL argv: empty string added
[ 1933.325445][ T4946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'.
[ 1981.310594][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.327'.
[ 2001.385709][ T5008] netlink: 20 bytes leftover after parsing attributes in process `syz.1.330'.
[ 2001.387215][ T5008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.330'.
[ 2207.625144][ T5242] veth0_to_bond: entered promiscuous mode
[ 2266.509796][ T5304] futex_wake_op: syz.0.393 tries to shift op by -1; fix this program
[ 2271.950428][ T5308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.395'.
[ 2271.952851][ T5308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.395'.
[ 2287.171168][ T5321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.401'.
[ 2287.174599][ T5321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.401'.
[ 2305.895835][ T5337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.407'.
[ 2305.897448][ T5337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.407'.
[ 2355.187641][ T5378] netlink: 44 bytes leftover after parsing attributes in process `syz.1.425'.
[ 2355.190764][ T5378] validate_nla: 41 callbacks suppressed
[ 2355.200236][ T5378] netlink: 'syz.1.425': attribute type 6 has an invalid length.
[ 2355.201954][ T5378] netlink: 'syz.1.425': attribute type 5 has an invalid length.
[ 2355.203167][ T5378] netlink: 'syz.1.425': attribute type 4 has an invalid length.
[ 2411.909710][ T5423] netlink: 64 bytes leftover after parsing attributes in process `syz.0.441'.
[ 2607.880740][ T5536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'.
[ 2607.882404][ T5536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'.
[ 2676.129951][ T5572] xt_hashlimit: size too large, truncated to 1048576
[ 2719.878568][ T5624] netlink: 44 bytes leftover after parsing attributes in process `syz.1.503'.
[ 2719.880204][ T5624] netlink: 43 bytes leftover after parsing attributes in process `syz.1.503'.
[ 2719.881565][ T5624] netlink: 'syz.1.503': attribute type 6 has an invalid length.
[ 2719.882789][ T5624] netlink: 'syz.1.503': attribute type 5 has an invalid length.
[ 2719.926345][ T5624] netlink: 43 bytes leftover after parsing attributes in process `syz.1.503'.
[ 2738.549579][ T5658] netlink: 44 bytes leftover after parsing attributes in process `syz.0.508'.
[ 2738.554830][ T5658] netlink: 43 bytes leftover after parsing attributes in process `syz.0.508'.
[ 2738.556213][ T5658] netlink: 'syz.0.508': attribute type 6 has an invalid length.
[ 2738.557232][ T5658] netlink: 'syz.0.508': attribute type 5 has an invalid length.
[ 2738.560097][ T5658] netlink: 43 bytes leftover after parsing attributes in process `syz.0.508'.
[ 2744.100251][ T5688] xt_hashlimit: size too large, truncated to 1048576
[ 2776.680121][ T5728] xt_hashlimit: size too large, truncated to 1048576
[ 3022.253226][ T5865] netlink: 'syz.1.566': attribute type 12 has an invalid length.
[ 3022.331668][ T5865] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.566'.
[ 3027.612052][ T5867] Illegal XDP return value 4294967294 on prog (id 40) dev N/A, expect packet loss!
[ 3033.972818][ T5872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'.
[ 3124.169585][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'.
[ 3161.360728][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.606'.
[ 3207.529226][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'.
[ 3245.318795][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'.
[ 3278.077274][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'.
[ 3294.475247][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.629'.
[ 3304.058211][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.634'.
[ 3317.409450][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.639'.
[ 3334.352341][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'.
[ 3384.733133][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'.
[ 3407.670977][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'.
[ 3434.071511][ T6121] netlink: 96 bytes leftover after parsing attributes in process `syz.1.660'.
[ 3437.400401][ T6124] netlink: 16 bytes leftover after parsing attributes in process `syz.1.661'.
[ 3444.520163][ T6131] syz.1.664 uses obsolete (PF_INET,SOCK_PACKET)
[ 3500.751011][ T6171] netlink: 'syz.1.680': attribute type 29 has an invalid length.
[ 3503.996327][ T6177] netlink: 60 bytes leftover after parsing attributes in process `syz.1.681'.
[ 3504.051230][ T6175] netlink: 60 bytes leftover after parsing attributes in process `syz.1.681'.
[ 3504.109418][ T6177] netlink: 60 bytes leftover after parsing attributes in process `syz.1.681'.
[ 3536.991894][ T6200] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.691'.
[ 3547.188254][ T6216] netlink: 60 bytes leftover after parsing attributes in process `syz.0.698'.
[ 3557.502812][ T6233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.704'.
[ 3562.406326][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.709'.
[ 3562.819960][ T6246] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 3562.822135][ T6246] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 3562.824151][ T6246] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 3562.825718][ T6246] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 3563.011002][ T6246] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 3563.012630][ T6246] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 3563.015535][ T6246] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 3563.016809][ T6246] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 3568.782341][ T6256] Device tree not included in the provided image
[ 3586.787058][ T6271] ==================================================================
[ 3586.788783][ T6271] BUG: KASAN: global-out-of-bounds in memcmp+0xc0/0xca
[ 3586.790004][ T6271] Read of size 1 at addr ffffffff89a2b800 by task syz.0.717/6271
[ 3586.791174][ T6271]
[ 3586.792782][ T6271] CPU: 1 UID: 0 PID: 6271 Comm: syz.0.717 Not tainted 6.14.0-rc1-syzkaller-g245aece3750d #0
[ 3586.793125][ T6271] Hardware name: riscv-virtio,qemu (DT)
[ 3586.793572][ T6271] Call Trace:
[ 3586.793801][ T6271] [<ffffffff80074518>] dump_backtrace+0x2e/0x3c
[ 3586.794109][ T6271] [<ffffffff80003206>] show_stack+0x30/0x3c
[ 3586.794434][ T6271] [<ffffffff8005fa4c>] dump_stack_lvl+0x12e/0x1a6
[ 3586.794843][ T6271] [<ffffffff8000eac8>] print_report+0x28e/0x5aa
[ 3586.795149][ T6271] [<ffffffff80a69b12>] kasan_report+0xf0/0x214
[ 3586.795482][ T6271] [<ffffffff80a6b900>] __asan_report_load1_noabort+0x12/0x1a
[ 3586.795843][ T6271] [<ffffffff862120ce>] memcmp+0xc0/0xca
[ 3586.796246][ T6271] [<ffffffff84fae3da>] __hw_addr_add_ex+0xee/0x676
[ 3586.796552][ T6271] [<ffffffff84fb0620>] dev_mc_add+0xac/0x108
[ 3586.796852][ T6271] [<ffffffff85155f6c>] mrp_init_applicant+0xe8/0x56e
[ 3586.797135][ T6271] [<ffffffff85d76696>] vlan_mvrp_init_applicant+0x26/0x30
[ 3586.797438][ T6271] [<ffffffff85d6c746>] register_vlan_dev+0x1b4/0x922
[ 3586.797804][ T6271] [<ffffffff85d74d5e>] vlan_newlink+0x3ca/0x5fa
[ 3586.798060][ T6271] [<ffffffff84fe5f30>] rtnl_newlink+0xbb4/0x1acc
[ 3586.798394][ T6271] [<ffffffff84fe8c60>] rtnetlink_rcv_msg+0x9e2/0xdbe
[ 3586.798655][ T6271] [<ffffffff8532e990>] netlink_rcv_skb+0x216/0x3dc
[ 3586.798957][ T6271] [<ffffffff84fd69a6>] rtnetlink_rcv+0x26/0x30
[ 3586.799301][ T6271] [<ffffffff8532cc44>] netlink_unicast+0x4f0/0x82c
[ 3586.799615][ T6271] [<ffffffff8532d7e4>] netlink_sendmsg+0x864/0xdc6
[ 3586.799915][ T6271] [<ffffffff84ecc19e>] __sock_sendmsg+0xcc/0x160
[ 3586.800162][ T6271] [<ffffffff84eccdaa>] ____sys_sendmsg+0x5ce/0x79e
[ 3586.800400][ T6271] [<ffffffff84ed591c>] ___sys_sendmsg+0x144/0x1e6
[ 3586.800675][ T6271] [<ffffffff84ed66d2>] __sys_sendmsg+0x188/0x22a
[ 3586.800936][ T6271] [<ffffffff84ed67e4>] __riscv_sys_sendmsg+0x70/0xa2
[ 3586.801210][ T6271] [<ffffffff80072b1e>] syscall_handler+0x94/0x118
[ 3586.801481][ T6271] [<ffffffff8623b45e>] do_trap_ecall_u+0x1aa/0x216
[ 3586.801802][ T6271] [<ffffffff8626117a>] handle_exception+0x146/0x152
[ 3586.802474][ T6271]
[ 3586.820055][ T6271] The buggy address belongs to the variable:
[ 3586.820828][ T6271] vlan_mrp_app+0x60/0x3e80
[ 3586.821664][ T6271]
[ 3586.822641][ T6271] The buggy address belongs to the physical page:
[ 3586.823919][ T6271] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x89c2b
[ 3586.825026][ T6271] flags: 0xffe000000002000(reserved|node=0|zone=0|lastcpupid=0x7ff)
[ 3586.827379][ T6271] raw: 0ffe000000002000 ffff8d8000270ac8 ffff8d8000270ac8 0000000000000000
[ 3586.828420][ T6271] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 3586.829405][ T6271] page dumped because: kasan: bad access detected
[ 3586.830362][ T6271] page_owner info is not present (never set?)
[ 3586.831157][ T6271]
[ 3586.831678][ T6271] Memory state around the buggy address:
[ 3586.832850][ T6271] ffffffff89a2b700: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00
[ 3586.833955][ T6271] ffffffff89a2b780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 3586.834921][ T6271] >ffffffff89a2b800: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00
[ 3586.835763][ T6271] ^
[ 3586.836495][ T6271] ffffffff89a2b880: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 00 00 00
[ 3586.837419][ T6271] ffffffff89a2b900: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00
[ 3586.838472][ T6271] ==================================================================
[ 3586.840827][ T6271] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 3586.842303][ T6271] CPU: 1 UID: 0 PID: 6271 Comm: syz.0.717 Not tainted 6.14.0-rc1-syzkaller-g245aece3750d #0
[ 3586.843457][ T6271] Hardware name: riscv-virtio,qemu (DT)
[ 3586.844171][ T6271] Call Trace:
[ 3586.844972][ T6271] [<ffffffff80074518>] dump_backtrace+0x2e/0x3c
[ 3586.845946][ T6271] [<ffffffff80003206>] show_stack+0x30/0x3c
[ 3586.846938][ T6271] [<ffffffff8005fa2e>] dump_stack_lvl+0x110/0x1a6
[ 3586.847899][ T6271] [<ffffffff8005fae0>] dump_stack+0x1c/0x24
[ 3586.848861][ T6271] [<ffffffff80003b36>] panic+0x38c/0x86a
[ 3586.849706][ T6271] [<ffffffff8013aab6>] check_panic_on_warn+0xc0/0xe4
[ 3586.850701][ T6271] [<ffffffff8000e7da>] end_report.part.0+0x4e/0xae
[ 3586.851692][ T6271] [<ffffffff80a69b5c>] kasan_report+0x13a/0x214
[ 3586.852591][ T6271] [<ffffffff80a6b900>] __asan_report_load1_noabort+0x12/0x1a
[ 3586.853584][ T6271] [<ffffffff862120ce>] memcmp+0xc0/0xca
[ 3586.854552][ T6271] [<ffffffff84fae3da>] __hw_addr_add_ex+0xee/0x676
[ 3586.855452][ T6271] [<ffffffff84fb0620>] dev_mc_add+0xac/0x108
[ 3586.856265][ T6271] [<ffffffff85155f6c>] mrp_init_applicant+0xe8/0x56e
[ 3586.857108][ T6271] [<ffffffff85d76696>] vlan_mvrp_init_applicant+0x26/0x30
[ 3586.857924][ T6271] [<ffffffff85d6c746>] register_vlan_dev+0x1b4/0x922
[ 3586.858898][ T6271] [<ffffffff85d74d5e>] vlan_newlink+0x3ca/0x5fa
[ 3586.859644][ T6271] [<ffffffff84fe5f30>] rtnl_newlink+0xbb4/0x1acc
[ 3586.860357][ T6271] [<ffffffff84fe8c60>] rtnetlink_rcv_msg+0x9e2/0xdbe
[ 3586.861255][ T6271] [<ffffffff8532e990>] netlink_rcv_skb+0x216/0x3dc
[ 3586.862287][ T6271] [<ffffffff84fd69a6>] rtnetlink_rcv+0x26/0x30
[ 3586.863416][ T6271] [<ffffffff8532cc44>] netlink_unicast+0x4f0/0x82c
[ 3586.864479][ T6271] [<ffffffff8532d7e4>] netlink_sendmsg+0x864/0xdc6
[ 3586.865489][ T6271] [<ffffffff84ecc19e>] __sock_sendmsg+0xcc/0x160
[ 3586.866406][ T6271] [<ffffffff84eccdaa>] ____sys_sendmsg+0x5ce/0x79e
[ 3586.867375][ T6271] [<ffffffff84ed591c>] ___sys_sendmsg+0x144/0x1e6
[ 3586.868298][ T6271] [<ffffffff84ed66d2>] __sys_sendmsg+0x188/0x22a
[ 3586.869193][ T6271] [<ffffffff84ed67e4>] __riscv_sys_sendmsg+0x70/0xa2
[ 3586.870110][ T6271] [<ffffffff80072b1e>] syscall_handler+0x94/0x118
[ 3586.871173][ T6271] [<ffffffff8623b45e>] do_trap_ecall_u+0x1aa/0x216
[ 3586.872184][ T6271] [<ffffffff8626117a>] handle_exception+0x146/0x152
[ 3586.873504][ T6271] SMP: stopping secondary CPUs
[ 3586.876956][ T6271] Rebooting in 86400 seconds..
VM DIAGNOSIS:
18:43:08 Registers:
info registers vcpu 0
CPU#0
V = 0
pc ffffffff8563e2a2
mhartid 0000000000000000
mstatus 0000000a000001a2
hstatus 0000000200000000
vsstatus 0000000a00000000
mip 0000000000000000
mie 000000000000022a
mideleg 0000000000001666
hideleg 0000000000000444
medeleg 0000000000f0b509
hedeleg 000000000000b109
mtvec 00000000800004f0
stvec ffffffff86261034
vstvec 0000000000000000
mepc ffffffff80088636
sepc ffffffff8625ed56
vsepc 0000000000000000
mcause 0000000000000009
scause 8000000000000009
vscause 0000000000000000
mtval 0000000000000000
stval 0000000000000000
htval 0000000000000000
mtval2 0000000000000000
mscratch 000000008004a000
sscratch 0000000000000000
satp 9012c000000ae9b3
x0/zero 0000000000000000 x1/ra ffffffff804d6ee8 x2/sp ffff8f80000068d0 x3/gp ffffffff89c21d80
x4/tp ffffaf801c1bb400 x5/t0 586cd418925535af x6/t1 ffffaf801c1bbf68 x7/t2 0000000000000005
x8/s0 ffff8f8000006920 x9/s1 ffffaf8018f99980 x10/a0 ffffaf801ad65680 x11/a1 0000000000000001
x12/a2 00000000000000c3 x13/a3 0000000000000102 x14/a4 0000000000000000 x15/a5 ffffaf801c1bb400
x16/a6 0000000000f00000 x17/a7 ffffffffae51b6c9 x18/s2 0000000000000000 x19/s3 0000000000000000
x20/s4 0000000000000000 x21/s5 dfffffff00000000 x22/s6 ffffffff8623b584 x23/s7 ffff8f8000006770
x24/s8 dfffffff00000000 x25/s9 0000000000007fff x26/s10 ffffffff86261034 x27/s11 ffffaf802f5fb998
x28/t3 ffffaf801c1bbef0 x29/t4 1ffff5f0038377dd x30/t5 1ffff5f0038377f1 x31/t6 0000000000000001
fcsr 0000000000000000
f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000
f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000
f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000
f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000
f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000
f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000
f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000
f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000
info registers vcpu 1
CPU#1
V = 0
pc ffffffff804d6e94
mhartid 0000000000000001
mstatus 0000000a000000a0
hstatus 0000000200000000
vsstatus 0000000a00000000
mip 0000000000000000
mie 000000000000022a
mideleg 0000000000001666
hideleg 0000000000000444
medeleg 0000000000f0b509
hedeleg 000000000000b109
mtvec 00000000800004f0
stvec ffffffff86261034
vstvec 0000000000000000
mepc ffffffff803d8244
sepc 00000000000db768
vsepc 0000000000000000
mcause 8000000000000003
scause 0000000000000008
vscause 0000000000000000
mtval 0000000000000000
stval 0000000000000000
htval 0000000000000000
mtval2 0000000000000000
mscratch 0000000080048000
sscratch 0000000000000000
satp 904e7000000b0745
x0/zero 0000000000000000 x1/ra ffffffff8621cd90 x2/sp ffff8f8003d165f0 x3/gp ffffffff89c21d80
x4/tp ffffaf80136d3400 x5/t0 ffffffff882fb258 x6/t1 fffff1ef007a2ccc x7/t2 7320666f20646165
x8/s0 ffff8f8003d16700 x9/s1 ffffffff8776e170 x10/a0 ffffffff87763606 x11/a1 0000000000000000
x12/a2 0000000000000043 x13/a3 ffffffff86219156 x14/a4 ffff8f8007bd97b8 x15/a5 ffffffff86226a3a
x16/a6 0000000000000003 x17/a7 ffff8f8003d16667 x18/s2 0000000000000405 x19/s3 ffff8f8003d16760
x20/s4 ffffffff87763608 x21/s5 ffff8f8003d16680 x22/s6 0000000000000005 x23/s7 0000000000000073
x24/s8 ffff8f8003d16ca8 x25/s9 1ffff1f0007a2cc4 x26/s10 000000000000004e x27/s11 0000000000000034
x28/t3 1ffff1f0007a2d7c x29/t4 fffff1ef007a2ccc x30/t5 fffff1ef007a2ccd x31/t6 ffffffff90df2182
fcsr 0000000000000000
f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000
f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000
f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000
f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000
f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000
f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000
f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000
f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000