last executing test programs: 3m12.705658724s ago: executing program 0 (id=1427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x1, 0x80000406, 0xffff, 0xfdffffff, 0x9}, [@TCA_NETEM_RATE={0x14, 0x6, {0x6, 0x80000000, 0x9, 0x6}}, @TCA_NETEM_JITTER64={0xc}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m11.468272428s ago: executing program 0 (id=1432): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x7) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001480)={{r1}, 0x0, 0x10, @inherit={0x88, &(0x7f0000000440)={0x0, 0x8, 0x37fffffffc, 0xb, {0x30, 0x3, 0x6, 0x5, 0x5}, [0x400, 0x7, 0x401, 0x3, 0x63c, 0x8000, 0x9, 0x80000000]}}, @name="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"}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) 3m11.169731317s ago: executing program 2 (id=1435): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@loopback}, &(0x7f0000000180)=0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x44, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000240)=0x468, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140)=""/41, 0x0) 3m11.107067556s ago: executing program 0 (id=1437): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m10.967187033s ago: executing program 2 (id=1440): bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x2040400) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x0) 3m10.767643178s ago: executing program 2 (id=1442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x1, 0x80000406, 0xffff, 0xfdffffff, 0x9}, [@TCA_NETEM_RATE={0x14, 0x6, {0x6, 0x80000000, 0x9, 0x6}}, @TCA_NETEM_JITTER64={0xc}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m10.080259692s ago: executing program 0 (id=1445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0x72f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x8, 0xffff}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xa}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 3m9.25904933s ago: executing program 2 (id=1449): sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000440), 0x0, 0x0, 0x0) 3m9.09590868s ago: executing program 2 (id=1450): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000007110bb000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m9.032789722s ago: executing program 2 (id=1451): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) socket(0x8, 0x3, 0x0) socket(0x8, 0x0, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2m57.238117929s ago: executing program 0 (id=1456): r0 = socket$inet(0x2, 0x3, 0xa) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a000000030000"], 0x20}}], 0x1, 0x24000004) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4b, 0x8}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x20010) 2m57.062045458s ago: executing program 0 (id=1458): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, 0x0}, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05070013800400c30000000000000000000000000000e87823de64aa559a050f36cb1e387015ad5cdc93d7ac5e2e6bda2f50a809216a59cb831493a4d55d43844427e8f3bcb77874d3ac837a22985eef3fee9afc2959775caa6f76c10d00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x40}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r5, &(0x7f0000000280)="1a14d470", 0x4, 0x5810, &(0x7f0000000300)={0x2, 0x4e24, @empty}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) 2m53.709013037s ago: executing program 32 (id=1451): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) socket(0x8, 0x3, 0x0) socket(0x8, 0x0, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2m41.904952511s ago: executing program 33 (id=1458): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, 0x0}, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05070013800400c30000000000000000000000000000e87823de64aa559a050f36cb1e387015ad5cdc93d7ac5e2e6bda2f50a809216a59cb831493a4d55d43844427e8f3bcb77874d3ac837a22985eef3fee9afc2959775caa6f76c10d00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x40}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r5, &(0x7f0000000280)="1a14d470", 0x4, 0x5810, &(0x7f0000000300)={0x2, 0x4e24, @empty}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) 10.84825813s ago: executing program 6 (id=2670): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000007c0)=[{0x3, 0x0, {0x2, 0x1, 0x1}, {0x0, 0x1, 0x4}, 0x2, 0xff}], 0x20) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, 0x0, 0x4048001) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4004) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) socket(0x28, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x2000000000, 0x8000000000000000, 0x9, 0x0, 0x4, 0x7fffffff}, 0x0, 0x0) 9.881782409s ago: executing program 6 (id=2680): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20000024}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8011}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r3, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000300), &(0x7f0000000480)=0x4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES8=r1], 0x14}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="14e7ffff010701010000000000000000030000093db8fa21f7a38e17c417364f568bc4b139a9a2db536fa2019fdde0a960ac46b1d4a311b144a2ee"], 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x20004094) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)}, 0x0) close(r4) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000003c0)={0x5e, @remote, 0x4e22, 0x1, 'wlc\x00', 0x1a, 0x9, 0x48}, 0x2c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001800010900000000ffdbdf2502180200ff0000080000000208000100ac38e6df"], 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001a000100000000000000080081"], 0x38}}, 0x40400c0) 8.935730404s ago: executing program 6 (id=2687): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000000980)=[{{&(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3, 0x1, 0x0, 0x4}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000008c0)="1c5bc31d469bc8b3611e35ede034be01e06224686f29e016dedc981f173f7fa4154a9a245765edd07d2283ff1867502b4c74f762bfef4a3a1ee47f8d658c34a4a1cd9d4c4d2783fe88856c1ee2dce12d49197747805ff05af0f3d7aeaeb01c7001e5a32d86fceb61539a5343ddd1cede87541d8ddbfd2dfce21c761c4f0208c65df809ed6e1fce85ccf46af791bd3a547ae17cdc7cd9096a7eb177a8832c47fd4342020ca9bde04a3b163a730e994e8310e0", 0xb2}, {&(0x7f0000000e00)="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", 0xf80}, {&(0x7f0000000a40)="f02bdcbe3562b999acb94e2a09f2847a365c814753cbf322c891f67393a624aed98e66f1a893dd94f71356a23bf6bfe92d43ef1979126ecfb168c6485882e6018bc1f32e59ffe467d7c6239e3ef6d8cbab3a0cf967c927834e15382aa69f70091066210fb54cb063c97fa8f01cf832974823b6e8b8a57386d97761ebe392a922", 0x80}, {&(0x7f0000000b00)="49d1589a5c254a72ea47ac31e7037ff826946b627b16d0719efd03029aac5856c7eee8f1652d991acb921fb3a5d1d4febd46a9828585b51c63518e16567fe0b69f9d08412975a1d13f8b6394f821b603a91e981234b19c41239fe034c5490138dc0a30b2eba25dc6f02d881aebace2", 0x6f}, {0x0}, {&(0x7f0000000c00)="641e39e792f26ece50ecebbc466f750ac363e7b87439149879c2112a5a996290acdd4324c77696481408f0c54f05b59b", 0x30}, {&(0x7f00000007c0)="a3", 0x1}, {&(0x7f0000002e00)="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", 0xffa}], 0x8, &(0x7f0000003e00)}}], 0x1, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r5, 0x89e0, &(0x7f0000000180)={'veth0_virt_wifi\x00', 0x7f, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004400)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004440)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004480)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0x1, 0x0) vmsplice(r9, &(0x7f0000000400)=[{&(0x7f0000000380)="a6", 0x1}], 0x1, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000044c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004500)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000004600)={0x8c, r4, 0x411, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000884) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.605617105s ago: executing program 4 (id=2689): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x8000) recvmmsg(r0, &(0x7f0000003b80)=[{{&(0x7f00000005c0)=@tipc=@name, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)=""/97, 0x61}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x6}], 0x1, 0x102, 0x0) 8.492718463s ago: executing program 5 (id=2690): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000007c0)=[{0x3, 0x0, {0x2, 0x1, 0x1}, {0x0, 0x1, 0x4}, 0x2, 0xff}], 0x20) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, 0x0, 0x4048001) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4004) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) socket(0x28, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x2000000000, 0x8000000000000000, 0x9, 0x0, 0x4, 0x7fffffff}, 0x0, 0x0) 7.191707965s ago: executing program 6 (id=2692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0x72f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x8, 0xffff}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xa}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 7.141702353s ago: executing program 4 (id=2693): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100"/496], 0x290) 7.06917437s ago: executing program 5 (id=2694): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1, 0x70bd2a, 0x8001}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 7.001818917s ago: executing program 3 (id=2695): syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) 6.789243638s ago: executing program 1 (id=2697): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCXONC(r0, 0x800455cc, 0x0) 6.679781074s ago: executing program 1 (id=2698): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gre0\x00'}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r6, 0x0, 0x2f, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1800000, 0x22051, r3, 0x10000000) 4.578845005s ago: executing program 5 (id=2699): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = open(0x0, 0x0, 0xc8) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, &(0x7f0000000240)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r3 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x440) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.40003309s ago: executing program 4 (id=2700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xc0}}, 0x0) 4.354786942s ago: executing program 6 (id=2701): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043106aaaaaaaaaa10"], 0x9) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0x4, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0xf, 0x4}, {0x8, 0x5f26}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x8}}]}}, 0x1f) creat(&(0x7f0000000040)='./file0\x00', 0x120) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f00000002c0)={0x3, 0x100, 0x0, 0x1, 0x0, 0xa02}) 4.320350398s ago: executing program 5 (id=2702): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000000980)=[{{&(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3, 0x1, 0x0, 0x4}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000008c0)="1c5bc31d469bc8b3611e35ede034be01e06224686f29e016dedc981f173f7fa4154a9a245765edd07d2283ff1867502b4c74f762bfef4a3a1ee47f8d658c34a4a1cd9d4c4d2783fe88856c1ee2dce12d49197747805ff05af0f3d7aeaeb01c7001e5a32d86fceb61539a5343ddd1cede87541d8ddbfd2dfce21c761c4f0208c65df809ed6e1fce85ccf46af791bd3a547ae17cdc7cd9096a7eb177a8832c47fd4342020ca9bde04a3b163a730e994e8310e0", 0xb2}, {&(0x7f0000000e00)="8f77d70b6eeef514341a6dae4e14c1eb627ebc0f75ec0db945a1752d491b9e59436b46e2c5e7795e8a5a3e5eef1372804ccd3b776ddbc5f784310114c1632676b2429d9d9e651a36bd81fcff50fdbe176f4cb254be9a5604a8d7481c648a22e99f4137f6ded9b17f294c4ecd91650fd46779f605e6f8b49e16b2b605c8df3c7ae77a9cbf35a54708ad5eb29c912d9f77064691b3fba3305a1ae45623d7fc6b49c839d3d2d2b69402147c4e27a796dd4b421c54838c4cb515df60efae4df983532edc17b556f69748ff69f2167ed6d4ae8b642641396485544099bc36bdae6c0210ff2dc94ae1b8b6b40d2afbcecc835cac5eda194a0f616eb0a4599ed0e9b34b6d23d6fab142a6bea5b463efe4d6e1bff8199c3168e090e081a9da37745f940685a75d3f8de62b67ad043e950fff7ad50b3f264d599baf62ebd3815d9295ab7b107261786f627dadd1b993dc8e831cb59298b6025a6451d48a65cf01a6bb7d6cba24525ef886e17a9c72e6e7c7b409081c50b322ba464cc432ab8991b588d8b871791403b14927331b597b948e53e57ab45ee5c57648f26cc5bdc621696f8c14feca615f6b18fff47761801ed7391aa037a86d91d4b319b96b84a62e3d8573756b5a5bd327a197503936c5dc7fcb1b0752474467e0a36b8faabe583c519cba533bf1f05ae6da3123a08dc13f354634d821f3dc0ef793fa30fd346d1b56bebf5a0b5b0ef68a4cf5059c37a144ff2384078e4af4a5d83996c34b80b190ebc6f357db471ca5f8c6d899ceefc8a8bd4054fefe1665989307c7a74329dd48ff8eb1f17e8e6b6e4b9ddeb26e959061a8cdabe5ef1f0caffb8042a7a2dd5400e498c5ac2d69a425f04f7885eff8131e1567a7dfea7633c84a063f271b12a02f02660e4c746233780a33a5d71f700a78a527082485acf181df7741ab651d6e3df8b4c998bd51fb832a917fb0eec2bd171f2787fb60b11f20fac11da8cbc07de4a8f923bae26e9f4c6b85334205b95138944d5adbee616042ccdc40ad02f03c8dbbbb450281ee077a0d28ab18ed5c5aea6af114c19acca5ecfd16344c08f7b1993ba08ffc11f4c6afc58b960fac4c5b14b1330a027760de9b434061d4668be5ee3e8376b3e4a5004b9c6f82952d3e972f66bf757fbb028955097d1b19338a268657294365fe2be0af794cbe7bb56e25ac1482eb5d5058a8b67ead0b8e57c834604b5c181808c519bef2a23fe85b05cc39d7c558bdc5c99a0d058130fa2ec92f887daa6e2d8748b5c0ae766dec2b5aa7af2f7c3b1a8c9ab08c14b99691aba1ce9c0e50a31997e62461e45c241265f9f9fcc1156a5c31735455e87b650915bec363d39c94411fb30f17a7dc3bb91ab2a74599b1023f0a95915993b84a65ee8e4b06c06c05cb540365118cf4105c077e84cae0a136f96166b47dc2009571d6b37ec35af606138cfc2c1004fd0aabad881588d35641c6a47f859a62de440293537a999a24a9755dd334063dda909a0b2b6864b9598ac9fa280de0ee07ff2c53867ae9cc2112b170ac5c6f303ba0bba7f4c95bcd8b026459da3ad743747dbcb022897b6bd4ddf7b95f4e320273b3a7c5f80d3384cf63a763fc6bf2f788668b690d96b700cb1d3405e16f92d3de1bfeeaf771ecc9d2a86d43ece049c8761db01609a2a73ee06eb9a8f708fb29f26c05263b03776aba359238a39620e22704c7efbafadd9586c198c5d59845a56001550129dcd9cb7b7c7eb8537b591ee60356ccbae1a9aba8fe76a23d0e9c8d388f69d6f807f12ec9918a7846844589cd9f757975bb7d7faa39f44b5ceade0e41b0833493cb9debe1f266c4ac1d26d121a5d66c2b6cbe82f610233544cbf11f96214abbe58c0fe6f40098d7bd1600e27e88938b47b92320fe5c0cb802a21a099a1fec89ae71e5dae1e3ad7d15995a866487a8b2598e05fc5c8813591f890062d9842a080c363baf75d7555797fa917363481933abe74bb7fb82484c63470762791e93c9013dfd77754ad8368f367810eef84e88117ec9160c38a799239c5a9686f1d31f3bb5b72a2a3ebf1151ad87a83581c3ce5a9c4ed383d33d58516188c3210f5fccbcf3d1a2ed44866260e29ec6d55b301e31b15a833aa803c76d132acf8bd32fb1736a1126e7c28a1052ca235624c93a0ba4941641d1e228719da769a1ade0056f72717d93ea066a67a0b2d25a744bc541f8f79e3a7f231219d3c3c4020ddbbf891370067084351ab9c79e5ea969fc0fd907ec4d7bebc0549b3ccfa3f4f3da8f1110129ac557f8bd726c7f651b9e0bf5a00871cbdbe0f470a9aa269d5791103430c8e1615b3d222d93dfbaecdfa6db177d82a5d16058eb35298b9e376c03fe54459b10a0a542c47d705a44350e61a6721a44ea091e8926ba8592ff67b3b0aaa043526d4b5518719181d4fadfcf1342a2f5a9b6218b0721f71e6083b0fa5cdc47bcdb8e201e372a363ac344591129ac786d6373f39dbf214968d1f3b67ce1d44627901e7a2c2ca8ebf0a8b7dca0ed3ce938531aa8f295a06b82194df316c22af0760e1cffd077631acc07bd8990a675cfbf694f06035482cc4000e557335bc94def1dd1c319b6fedb65952de2ab0663a77a6abd1cae6ffad858c8632b9738d3d208e0f91a160c76389a2082587094695304cd8d9245ff4b441a5d4b8da7cb213f896ba65dadcd47b81cc6d0f7bffd687c609d8764586b6158715ed0da8200f197fc0a918bc560f0c3f23f8c81b5f496899bfebf309f014e7d7f13744dcf2e4d30208b29c5eb0237a4d01eec85cb3a595df9d15769a7dd2ccab10bd45cb9533d4aae2be46696635d788f18f2f61443750ff3a327461ba17f779a81caa6d230bd767aaa60ea68e79857d99f4903a574305d57a659358765d4410e8c034d6292c05c24ee0a44d33054b2bc30a0f6289786f84a125def82a3b5bc6c2d9081ab9f05428bb33bf2f448dbe52d239eac2d8f8ce77fa17755fdc1bac54978bffc6d7e36151be47ce40371fa0b2a22ebb9506173df779cf73aecf935e8d542892406509ad8c5764a207c4b6ab2e4cc2fa501f29163378009e0dcd1df618be08ad3049bbcf190d0a4f8e88e861a1f0fbd79447e10ca9fe8570d7785b58c00c2e381748f84a89aad99848798bfc1e9ff788febdb23ee39925604a6df73e04ef6bc4417dc6f8926db33b3a7ca0abfaa6cf8b403946bbbcd53fd45be829886042d505efa1297baab0344cd88e01ff0d1dfb7d90879a2d7ba64b47f748fa11eead806fdb4501473afc4f1af4ef9f75516096cd261a534b505db0f964cf42872123fe09b5205df42d4d8327c26acdaef7fb186a1aa571872a5ffa6d8b2159243b620d91a8e02d5b4779d1ba482a6adab6d005460eaaa676e68368d6e79a4dc7c247716027b7a51eaee939bc7b2501301f093cb19ca7b205941157d4e75ff18aab3ca246301cb40808109432397daac45f7b8c235da6843365c4eed5268e366dee3823b54b2185118aa98036d1aeebe4fac821a5315dde38975283fde84d3dcd91e348d1f5b0d1bac59dff004d2ed978fa71fee7c418059cf27ae3f8b1e08237c1e7a467bb5f42c68c55fdfc2a5af458bc690ae0653919c32b96a34e4ced65d9f03462c870756aac362e32a9f81ab33723dd75ed2380dad0d45072d998c7ac4a861eb6625269ef0e2e1e941a6f9a96db78b0436f4dec815d2e5fc1e4e1ea62375714a5759d168ce931d05ea0fbf4b6d6be300247f8fbf5f2c5ad1d2a30a56e7bc38714eb7f2ab068c5d727a609ecd5698acc56e3f9902729bfc4c831e6b670c802f801477b9cfbdac0c7c08719650e445cd517752f28db2bf21f95f41e552a0f6bdb6b530b4107d5f1ad832f1c462ef9001ce3c8bb526f7c8b5a2d3ef664fd6939236a620a4afb5a9ffc048bc2aee85c1a64eda8e12ec71532d63c0ccd5b24f237032f3f218fe71eaa0cba6281aa523438cdbf38bfac5becc501c6d57485a3c454da9112396d83936e052efbc7c8d97479e7cd618632b44e356b9e8d07ef48c8168f91b75afa897d4e879bad464973a6e14599f6aba9159bd36de2e0028913071e4db6331077682c0d62ac9a72e3d96f45429245fd3743f88f8d1845f9e61695843e9fdd8cfa3320ff04c80209c01acfdc5a444af5c26610b676d09c754c74068d88d60c144794447742fc8a9ca45578c31b621bfced24262acb354bb8728949b65a76c0555c7412a5d3d9ee2e792fe0ef71217a0da1c7fe695a847ab95a0de130818d1b8060610e65c5169863f7a50c7265e50709cc509f7bf7d0ebebc4298398bcab1dc5a526df25d708757a782f746db3268cd5b5c35ce388e1e0e0c808406c5c730a5a34bde6965548a874606aae8c867fd27007961af5e2030738f5967b67c2b9b31267ed79dc246bdbbbe158433a156765df50877be822805d9dd881458e85bd4545ee6f91e1d16a1d4b06e1cf70193e2b7c2a4a93b2a0a0e987e8cdd9a3b81b02bb57d37a26c2270050ad1d3a72fa1bc36e67db178161ee60d9b60aa0ee82bc96a4e4c0942f5a9130271c17ecb6d0f813f895a4c2a43937de750eebac8d68910f3279d65606896c21306f493789b8a26fbc4b4f49cfb2fe1a839cf4e367f46ca094be0a8dc590f08e678eb388bd976576bba79a20c32df6fd5ed4cfb7f473bd50a4059711673c7eea40fa187668a021da4690c128eecbcb16caa4779b5fd91621cded9bb50a76a7fe271fb1086d50253e6cc9b14930c3844f0d61d9a3c1f6e88a2d6b623616fa7dd5a61151a0d0456baae1d98d105018313936e0e38f46594498f5b67f2188929501f7e00cba034dbe6cf191db34a3b8a6dea2fecb469a112b67890fcdb8a8e19c68a2615d37b1611991356fa618e5b55f3eefa97533ba14b176bde7d529af1d1f34ba5d6cfbe68889583fca70a402124a93c94a13263a7d14089b60c1a22540d3bac24e7e30ff1fbe9e36767255d31ecf56074704dd7619962f69ef7c3e5e97c507da9e5cc14dac3f52630adec104a62d65cadb854101839389ce4fec0173bfa893a1b44d82d3569fba4dc83bc1dc9c78375cda43ded0ef608726cab366fcc8a9f99ffa85670c814313d395dbf50f8ee1514824f0f199ea6ba59eddc8170e575be836b27e4c19a6fde2567e0ade2df7d669a9dfa4ea6d8b63214008a8a2e7588dbbb1665551426cd62a5eb90352ba6a7385c9f030791686581891af887189ec511b4f0d9d47cd19e39b7f2f1ab3aaabe8d55e48dcc4fa7b242c0912e9824d51911b2047ecaf59217a90d73553cd4c2f6aad0d3b92eb71a3ddcf46af5c62756c3f859abb19934f68988032d5f48452c62a5b93802811e90a2269f619f0a9280a1f2003247177c791dcf4874506fda03cf89ecde53f4b540a42d44733af0e1ba5e64471e2b84c11f9a79c2f6302904aab8e1d928d60dafb6455c234142e324b48bdb8a6a601cd87734f2cd276048329fad32d8684dded5b6921d7d1de13a185f00d48effbadbe890f51174d28fe8b350544baccf66a72bfc6f791e7ed8f621aacd21753c2460d8a9f65a9c21121977eb27f485028f1b52a689ea407ea6e0dd95258aa958b089dc93bb4b4d252e8b9351e2b6e8d18b16f4", 0xf80}, {&(0x7f0000000a40)="f02bdcbe3562b999acb94e2a09f2847a365c814753cbf322c891f67393a624aed98e66f1a893dd94f71356a23bf6bfe92d43ef1979126ecfb168c6485882e6018bc1f32e59ffe467d7c6239e3ef6d8cbab3a0cf967c927834e15382aa69f70091066210fb54cb063c97fa8f01cf832974823b6e8b8a57386d97761ebe392a922", 0x80}, {&(0x7f0000000b00)="49d1589a5c254a72ea47ac31e7037ff826946b627b16d0719efd03029aac5856c7eee8f1652d991acb921fb3a5d1d4febd46a9828585b51c63518e16567fe0b69f9d08412975a1d13f8b6394f821b603a91e981234b19c41239fe034c5490138dc0a30b2eba25dc6f02d881aebace2", 0x6f}, {0x0}, {&(0x7f0000000c00)="641e39e792f26ece50ecebbc466f750ac363e7b87439149879c2112a5a996290acdd4324c77696481408f0c54f05b59b", 0x30}, {&(0x7f00000007c0)="a3", 0x1}, {&(0x7f0000002e00)="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", 0xffa}], 0x8, &(0x7f0000003e00)}}], 0x1, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r5, 0x89e0, &(0x7f0000000180)={'veth0_virt_wifi\x00', 0x7f, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004400)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004440)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004480)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0x1, 0x0) vmsplice(r9, &(0x7f0000000400)=[{&(0x7f0000000380)="a6", 0x1}], 0x1, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000044c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004500)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000004600)={0x8c, r4, 0x411, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000884) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.031154958s ago: executing program 3 (id=2703): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) 4.005242748s ago: executing program 1 (id=2704): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000007c0)=[{0x3, 0x0, {0x2, 0x1, 0x1}, {0x0, 0x1, 0x4}, 0x2, 0xff}], 0x20) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, 0x0, 0x4048001) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4004) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x2000000000, 0x8000000000000000, 0x9, 0x0, 0x4, 0x7fffffff}, 0x0, 0x0) 4.004467013s ago: executing program 4 (id=2705): socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)='./file0\x00', 0x80}) io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0) 3.884918002s ago: executing program 3 (id=2706): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000680)=@known='user.incfs.metadata\x00', 0x0, 0x0) 3.683832387s ago: executing program 3 (id=2707): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x0) 2.559347735s ago: executing program 1 (id=2708): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000300)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0x1}, 0x18) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001ec0)="81b6", 0x2}], 0x1}, 0x404c881) 2.517227645s ago: executing program 3 (id=2709): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1, 0x70bd2a, 0x8001}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 2.440516682s ago: executing program 5 (id=2710): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100"/496], 0x290) 2.440041639s ago: executing program 4 (id=2711): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0x72f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x8, 0xffff}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xa}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2.316317397s ago: executing program 1 (id=2712): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f00"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.269551608s ago: executing program 5 (id=2713): syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) 1.261881069s ago: executing program 6 (id=2714): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gre0\x00'}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r6, 0x0, 0x2f, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1800000, 0x22051, r3, 0x10000000) 278.376544ms ago: executing program 1 (id=2715): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 246.040199ms ago: executing program 3 (id=2716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xbc}}, 0x0) 0s ago: executing program 4 (id=2717): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) socket$netlink(0x10, 0x3, 0x14) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) kernel console output (not intermixed with test programs): etdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.971510][ T5812] veth0_vlan: entered promiscuous mode [ 119.979367][ T5818] veth0_macvtap: entered promiscuous mode [ 120.046362][ T5818] veth1_macvtap: entered promiscuous mode [ 120.072665][ T5812] veth1_vlan: entered promiscuous mode [ 120.222208][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.233706][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.233724][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.237285][ T5813] veth0_macvtap: entered promiscuous mode [ 120.300882][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.313817][ T5813] veth1_macvtap: entered promiscuous mode [ 120.375372][ T5920] Zero length message leads to an empty skb [ 120.395527][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.408240][ T5920] bridge_slave_0: left allmulticast mode [ 120.408278][ T5920] bridge_slave_0: left promiscuous mode [ 120.408921][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.486196][ T5920] bridge_slave_1: left allmulticast mode [ 120.486220][ T5920] bridge_slave_1: left promiscuous mode [ 120.486381][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.563916][ T5920] bond0: (slave bond_slave_0): Releasing backup interface [ 120.655002][ T5920] bond0: (slave bond_slave_1): Releasing backup interface [ 120.721206][ T5920] team0: Port device team_slave_0 removed [ 120.757114][ T5920] team0: Port device team_slave_1 removed [ 120.757909][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.757930][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.806855][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.806879][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.845277][ T5920] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 120.877305][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.910540][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.935597][ T5812] veth0_macvtap: entered promiscuous mode [ 120.940093][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.959942][ T2235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.959964][ T2235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.049673][ T5812] veth1_macvtap: entered promiscuous mode [ 121.061962][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.189021][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.290207][ T2235] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.291480][ T2235] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.291755][ T2235] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.292085][ T2235] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.338726][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.469349][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.647337][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.651524][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.651545][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.652455][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.694963][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.735188][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.978233][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.978252][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.071203][ T5936] netlink: 'syz.2.12': attribute type 1 has an invalid length. [ 122.412337][ T119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.412357][ T119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.566502][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.566523][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.734839][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.734860][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.948486][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.948508][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.448957][ T5967] tipc: Started in network mode [ 123.448995][ T5967] tipc: Node identity fe40ee5bdbe2, cluster identity 4711 [ 123.449725][ T5967] tipc: Enabled bearer , priority 0 [ 123.768454][ T5966] tipc: Disabling bearer [ 123.906572][ T5972] syzkaller0: entered promiscuous mode [ 123.906606][ T5972] syzkaller0: entered allmulticast mode [ 123.929685][ T5981] tipc: Started in network mode [ 123.929721][ T5981] tipc: Node identity ac14142f, cluster identity 4711 [ 123.931500][ T5981] tipc: Enabling of bearer rejected, failed to enable media [ 124.171838][ T5981] netlink: 'syz.0.23': attribute type 1 has an invalid length. [ 125.252519][ T6005] netlink: 28 bytes leftover after parsing attributes in process `syz.1.32'. [ 126.150077][ T6018] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.372509][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 126.372554][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 128.615218][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 129.162031][ T6106] netlink: 32 bytes leftover after parsing attributes in process `syz.1.62'. [ 129.364385][ T6108] netlink: 32 bytes leftover after parsing attributes in process `syz.1.62'. [ 130.685761][ T6155] netlink: 'syz.3.65': attribute type 16 has an invalid length. [ 130.685788][ T6155] netlink: 'syz.3.65': attribute type 21 has an invalid length. [ 130.685803][ T6155] netlink: 'syz.3.65': attribute type 25 has an invalid length. [ 130.685816][ T6155] netlink: 'syz.3.65': attribute type 27 has an invalid length. [ 130.685830][ T6155] netlink: 'syz.3.65': attribute type 28 has an invalid length. [ 130.685843][ T6155] netlink: 'syz.3.65': attribute type 29 has an invalid length. [ 130.685856][ T6155] netlink: 'syz.3.65': attribute type 30 has an invalid length. [ 131.564673][ T6179] tipc: Started in network mode [ 131.564707][ T6179] tipc: Node identity 66d0684ee9bb, cluster identity 4711 [ 131.565170][ T6179] tipc: Enabled bearer , priority 0 [ 131.664330][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 131.893553][ T6178] tipc: Disabling bearer [ 132.417172][ T6207] netlink: 'syz.3.82': attribute type 12 has an invalid length. [ 133.895759][ T6241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.96'. [ 134.126666][ T6244] tipc: Started in network mode [ 134.126696][ T6244] tipc: Node identity ac14142f, cluster identity 4711 [ 134.127661][ T6244] tipc: Enabling of bearer rejected, failed to enable media [ 134.312510][ T6255] netlink: 'syz.0.101': attribute type 16 has an invalid length. [ 134.312534][ T6255] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.101'. [ 134.857111][ T6280] tipc: Enabling of bearer rejected, failed to enable media [ 135.201029][ T6287] netlink: 240 bytes leftover after parsing attributes in process `syz.3.110'. [ 135.815061][ T6298] tipc: Enabling of bearer rejected, failed to enable media [ 136.973749][ T6333] tipc: Started in network mode [ 136.973780][ T6333] tipc: Node identity ac14142f, cluster identity 4711 [ 136.974284][ T6333] tipc: Enabling of bearer rejected, failed to enable media [ 137.348940][ T6346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.134'. [ 137.516659][ T6352] netlink: 240 bytes leftover after parsing attributes in process `syz.3.136'. [ 137.591552][ T6357] tipc: Enabling of bearer rejected, failed to enable media [ 138.022912][ T6305] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 138.023080][ T62] Bluetooth: hci0: command 0x0401 tx timeout [ 138.136693][ T6375] tipc: Enabling of bearer rejected, failed to enable media [ 138.176275][ T6374] netlink: 'syz.4.143': attribute type 16 has an invalid length. [ 138.176300][ T6374] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.143'. [ 138.274146][ T6368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.141'. [ 138.635227][ T6383] netlink: 24 bytes leftover after parsing attributes in process `syz.3.148'. [ 138.906216][ T6390] netlink: 240 bytes leftover after parsing attributes in process `syz.4.150'. [ 138.906242][ T6390] netlink: 72 bytes leftover after parsing attributes in process `syz.4.150'. [ 138.912333][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.912435][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.247440][ T6403] warning: `syz.3.155' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 139.341524][ T6407] tipc: Enabling of bearer rejected, failed to enable media [ 139.642637][ T6412] tipc: Enabling of bearer rejected, failed to enable media [ 139.964685][ T6412] netlink: 'syz.2.157': attribute type 1 has an invalid length. [ 140.245236][ T6427] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 140.295284][ T6427] batman_adv: batadv0: Adding interface: gretap1 [ 140.295302][ T6427] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.295335][ T6427] batman_adv: batadv0: Interface activated: gretap1 [ 140.297799][ T6431] netlink: 'syz.4.164': attribute type 5 has an invalid length. [ 140.441319][ T6430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.165'. [ 140.876364][ T6440] erspan1: entered allmulticast mode [ 141.341187][ T6456] netlink: 'syz.4.175': attribute type 16 has an invalid length. [ 141.341213][ T6456] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.175'. [ 141.480104][ T6458] syz.2.176 uses obsolete (PF_INET,SOCK_PACKET) [ 141.744580][ T6462] netlink: 28 bytes leftover after parsing attributes in process `syz.4.178'. [ 142.183398][ T62] Bluetooth: hci0: command 0x0401 tx timeout [ 142.212895][ T6425] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 142.585055][ T6484] __nla_validate_parse: 1 callbacks suppressed [ 142.585077][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'. [ 144.138841][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 144.219593][ T6526] netlink: 'syz.3.200': attribute type 12 has an invalid length. [ 144.642619][ T6534] netlink: 60 bytes leftover after parsing attributes in process `syz.4.203'. [ 144.665735][ T6534] unsupported nlmsg_type 40 [ 146.235960][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.214'. [ 146.436865][ T6571] syzkaller0: entered promiscuous mode [ 146.436892][ T6571] syzkaller0: entered allmulticast mode [ 146.748248][ T6547] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 146.774433][ T6578] tipc: Enabled bearer , priority 0 [ 146.790353][ T6582] netlink: 'syz.4.217': attribute type 12 has an invalid length. [ 147.107372][ T6570] tipc: Resetting bearer [ 147.302817][ T62] Bluetooth: hci0: command 0x0401 tx timeout [ 147.482588][ T6593] netlink: 60 bytes leftover after parsing attributes in process `syz.3.220'. [ 147.570660][ T6570] tipc: Disabling bearer [ 147.738189][ T6584] tipc: Enabling of bearer rejected, failed to enable media [ 148.549677][ T6628] netlink: 'syz.1.232': attribute type 12 has an invalid length. [ 148.564548][ T6629] netlink: 60 bytes leftover after parsing attributes in process `syz.4.235'. [ 149.285943][ T6638] tipc: Enabling of bearer rejected, failed to enable media [ 150.233134][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'. [ 150.592233][ T6671] netlink: 60 bytes leftover after parsing attributes in process `syz.0.248'. [ 150.864169][ T6680] netlink: 'syz.2.250': attribute type 12 has an invalid length. [ 151.003593][ T6679] syzkaller0: entered promiscuous mode [ 151.003632][ T6679] syzkaller0: entered allmulticast mode [ 151.012222][ T6676] tipc: Enabled bearer , priority 0 [ 151.046496][ T6675] tipc: Resetting bearer [ 151.398150][ T6675] tipc: Disabling bearer [ 151.517883][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.252'. [ 152.667610][ T6725] netlink: 60 bytes leftover after parsing attributes in process `syz.4.265'. [ 153.775695][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 153.776132][ T6727] netlink: 'syz.0.267': attribute type 12 has an invalid length. [ 153.865485][ T6731] syzkaller0: entered promiscuous mode [ 153.865512][ T6731] syzkaller0: entered allmulticast mode [ 153.972365][ T62] Bluetooth: hci4: link tx timeout [ 153.980185][ T62] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.031309][ T6732] tipc: Enabled bearer , priority 0 [ 154.115550][ T6730] tipc: Resetting bearer [ 154.270078][ T6745] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 154.301884][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.276'. [ 154.329541][ T6751] netlink: 14 bytes leftover after parsing attributes in process `syz.3.274'. [ 154.359372][ T6730] tipc: Disabling bearer [ 154.726125][ T6745] bond1 (unregistering): Released all slaves [ 154.889867][ T6747] vlan2: entered promiscuous mode [ 154.889891][ T6747] bridge0: entered promiscuous mode [ 155.873820][ T6751] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.935615][ T6751] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.958862][ T6751] bond0 (unregistering): Released all slaves [ 156.022898][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 156.156573][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 156.248504][ T6771] netlink: 'syz.3.280': attribute type 12 has an invalid length. [ 157.066568][ T6790] syzkaller0: entered promiscuous mode [ 157.066596][ T6790] syzkaller0: entered allmulticast mode [ 157.094564][ T6790] tipc: Enabled bearer , priority 0 [ 157.133154][ T6789] tipc: Resetting bearer [ 157.349074][ T6789] tipc: Disabling bearer [ 157.600666][ T6797] netlink: 'syz.1.289': attribute type 12 has an invalid length. [ 157.980905][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'. [ 158.866919][ T6818] tipc: Enabling of bearer rejected, failed to enable media [ 159.019566][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'. [ 159.289246][ T6831] syzkaller0: entered promiscuous mode [ 159.289275][ T6831] syzkaller0: entered allmulticast mode [ 159.360710][ T6831] tipc: Enabled bearer , priority 0 [ 159.401816][ T6830] tipc: Resetting bearer [ 160.158045][ T6830] tipc: Disabling bearer [ 160.374988][ T5875] tipc: Node number set to 2886997039 [ 160.598091][ T6838] netlink: 'syz.4.301': attribute type 12 has an invalid length. [ 160.613190][ T6843] netlink: 'syz.0.305': attribute type 12 has an invalid length. [ 160.614657][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.306'. [ 162.284042][ T6896] netlink: 14 bytes leftover after parsing attributes in process `syz.0.320'. [ 162.328813][ T5875] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x1 [ 162.328856][ T5875] hid-generic 0005:0C45:1012.0001: ignoring exceeding usage max [ 162.330570][ T5875] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x4 [ 162.330600][ T5875] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x5 [ 162.330754][ T5875] hid-generic 0005:0C45:1012.0001: reserved main item tag 0xd [ 162.330783][ T5875] hid-generic 0005:0C45:1012.0001: item fetching failed at offset 31/252 [ 162.331622][ T5875] hid-generic 0005:0C45:1012.0001: probe with driver hid-generic failed with error -22 [ 162.385802][ T6891] bond1 (unregistering): Released all slaves [ 163.493905][ T6896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.553475][ T6896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.598114][ T6896] bond0 (unregistering): Released all slaves [ 164.746304][ T6958] netlink: 'syz.2.338': attribute type 12 has an invalid length. [ 165.606094][ T6970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.178793][ T6998] netlink: 'syz.0.351': attribute type 1 has an invalid length. [ 168.045166][ T7048] bond1: option mode: unable to set because the bond device is up [ 168.080574][ T7051] bond_slave_0: entered promiscuous mode [ 168.080653][ T7051] bond_slave_1: entered promiscuous mode [ 168.093734][ T7051] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 168.117647][ T7051] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 168.844245][ T7074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.381'. [ 169.300170][ T7088] netlink: 'syz.4.384': attribute type 1 has an invalid length. [ 169.472662][ T7088] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.481263][ T7093] bond2: (slave wlan0): Opening slave failed [ 171.199563][ T7131] netlink: 'syz.1.401': attribute type 16 has an invalid length. [ 171.199587][ T7131] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.401'. [ 171.885134][ T7147] netlink: 14 bytes leftover after parsing attributes in process `syz.2.407'. [ 172.034593][ T7145] bond1 (unregistering): Released all slaves [ 172.899350][ T7163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.411'. [ 173.207899][ T7147] bond0 (unregistering): Released all slaves [ 173.651048][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'. [ 173.773370][ T7183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.773403][ T7183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.818337][ T7183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.818368][ T7183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.087966][ T7189] netlink: 36 bytes leftover after parsing attributes in process `syz.1.419'. [ 174.388150][ T7196] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96 [ 174.961697][ T7207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.426'. [ 175.066940][ T7206] netlink: 'syz.4.425': attribute type 1 has an invalid length. [ 175.499294][ T7216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.721760][ T7229] netlink: 36 bytes leftover after parsing attributes in process `syz.2.433'. [ 175.891780][ T7231] netlink: 'syz.4.432': attribute type 29 has an invalid length. [ 175.974315][ T7232] netlink: 'syz.4.432': attribute type 29 has an invalid length. [ 176.006572][ T7231] netlink: 'syz.4.432': attribute type 29 has an invalid length. [ 176.006899][ T7231] netlink: 'syz.4.432': attribute type 29 has an invalid length. [ 176.007174][ T7231] netlink: 'syz.4.432': attribute type 29 has an invalid length. [ 176.018412][ T7234] tipc: Enabled bearer , priority 0 [ 176.027455][ T7234] syzkaller0: entered promiscuous mode [ 176.027491][ T7234] syzkaller0: entered allmulticast mode [ 176.244105][ T7245] netlink: 36 bytes leftover after parsing attributes in process `syz.3.435'. [ 176.244133][ T7245] netlink: 16 bytes leftover after parsing attributes in process `syz.3.435'. [ 176.244170][ T7245] netlink: 36 bytes leftover after parsing attributes in process `syz.3.435'. [ 176.244319][ T7245] netlink: 36 bytes leftover after parsing attributes in process `syz.3.435'. [ 176.325918][ T7235] tipc: Resetting bearer [ 176.384783][ T7233] tipc: Resetting bearer [ 176.506511][ T7233] tipc: Disabling bearer [ 176.675366][ T7257] netlink: 'syz.2.441': attribute type 12 has an invalid length. [ 176.782230][ T7260] tipc: Enabling of bearer rejected, failed to enable media [ 177.666185][ T7275] netlink: 'syz.3.448': attribute type 29 has an invalid length. [ 177.666867][ T7281] netlink: 'syz.3.448': attribute type 29 has an invalid length. [ 177.667169][ T7276] netlink: 'syz.3.448': attribute type 29 has an invalid length. [ 177.667339][ T7281] netlink: 'syz.3.448': attribute type 29 has an invalid length. [ 177.667627][ T7281] netlink: 'syz.3.448': attribute type 29 has an invalid length. [ 178.122998][ T7294] netlink: 60 bytes leftover after parsing attributes in process `syz.1.452'. [ 178.273484][ T7292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.454'. [ 179.550794][ T7317] netlink: 'syz.2.463': attribute type 29 has an invalid length. [ 179.584194][ T7322] netlink: 'syz.2.463': attribute type 29 has an invalid length. [ 179.584609][ T7320] netlink: 'syz.2.463': attribute type 29 has an invalid length. [ 179.584800][ T7322] netlink: 'syz.2.463': attribute type 29 has an invalid length. [ 179.904508][ T7338] netlink: 60 bytes leftover after parsing attributes in process `syz.0.469'. [ 180.473481][ T7348] tipc: Enabled bearer , priority 0 [ 180.474634][ T7348] syzkaller0: entered promiscuous mode [ 180.474659][ T7348] syzkaller0: entered allmulticast mode [ 180.773965][ T7350] tipc: Resetting bearer [ 180.824314][ T7345] tipc: Resetting bearer [ 181.001879][ T7345] tipc: Disabling bearer [ 181.219141][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.475'. [ 181.230991][ T7365] syzkaller0: entered promiscuous mode [ 181.231026][ T7365] syzkaller0: entered allmulticast mode [ 181.240821][ T7371] tipc: Enabled bearer , priority 0 [ 181.375802][ T7358] tipc: Resetting bearer [ 181.591796][ T7358] tipc: Disabling bearer [ 181.611449][ T7381] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.484'. [ 181.993498][ T7388] netlink: 60 bytes leftover after parsing attributes in process `syz.3.487'. [ 182.553787][ T7400] validate_nla: 3 callbacks suppressed [ 182.553809][ T7400] netlink: 'syz.4.492': attribute type 29 has an invalid length. [ 182.564885][ T7405] netlink: 'syz.4.492': attribute type 29 has an invalid length. [ 182.567389][ T7403] netlink: 'syz.4.492': attribute type 29 has an invalid length. [ 182.568007][ T7405] netlink: 'syz.4.492': attribute type 29 has an invalid length. [ 182.568336][ T7405] netlink: 'syz.4.492': attribute type 29 has an invalid length. [ 182.578673][ T7402] tipc: Enabled bearer , priority 0 [ 182.584312][ T7402] syzkaller0: entered promiscuous mode [ 182.584341][ T7402] syzkaller0: entered allmulticast mode [ 182.863397][ T7401] tipc: Resetting bearer [ 183.207278][ T7401] tipc: Disabling bearer [ 183.274252][ T7420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.501'. [ 183.359299][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'. [ 183.550868][ T7436] netlink: 'syz.1.506': attribute type 29 has an invalid length. [ 183.562025][ T7436] netlink: 'syz.1.506': attribute type 29 has an invalid length. [ 183.564891][ T7436] netlink: 'syz.1.506': attribute type 29 has an invalid length. [ 183.565239][ T7436] netlink: 'syz.1.506': attribute type 29 has an invalid length. [ 183.565567][ T7436] netlink: 'syz.1.506': attribute type 29 has an invalid length. [ 183.743048][ T7440] tipc: Enabled bearer , priority 0 [ 183.743949][ T7440] syzkaller0: entered promiscuous mode [ 183.743975][ T7440] syzkaller0: entered allmulticast mode [ 183.788583][ T7440] tipc: Resetting bearer [ 183.824954][ T7438] tipc: Resetting bearer [ 183.954903][ T7438] tipc: Disabling bearer [ 184.667540][ T7458] netlink: 28 bytes leftover after parsing attributes in process `syz.0.515'. [ 184.855936][ T7474] tipc: Enabled bearer , priority 0 [ 184.858229][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 185.396943][ T7478] syzkaller0: entered promiscuous mode [ 185.396973][ T7478] syzkaller0: entered allmulticast mode [ 185.504187][ T7469] tipc: Resetting bearer [ 185.696087][ T7469] tipc: Disabling bearer [ 186.360368][ T7505] tipc: Enabled bearer , priority 0 [ 186.361300][ T7505] syzkaller0: entered promiscuous mode [ 186.361325][ T7505] syzkaller0: entered allmulticast mode [ 186.394098][ T7505] tipc: Resetting bearer [ 186.444811][ T7503] tipc: Resetting bearer [ 186.593954][ T7503] tipc: Disabling bearer [ 187.949653][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.539'. [ 188.703598][ T7550] tipc: Enabled bearer , priority 0 [ 188.704809][ T7550] syzkaller0: entered promiscuous mode [ 188.704836][ T7550] syzkaller0: entered allmulticast mode [ 188.778988][ T7550] tipc: Resetting bearer [ 188.831275][ T7547] tipc: Resetting bearer [ 188.962182][ T7547] tipc: Disabling bearer [ 189.905880][ T7575] syzkaller0: entered promiscuous mode [ 189.905911][ T7575] syzkaller0: entered allmulticast mode [ 191.086193][ T7600] netlink: 28 bytes leftover after parsing attributes in process `syz.3.556'. [ 191.269828][ T7611] validate_nla: 11 callbacks suppressed [ 191.269850][ T7611] netlink: 'syz.1.558': attribute type 16 has an invalid length. [ 191.269866][ T7611] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.558'. [ 191.778842][ T7627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.565'. [ 192.545937][ T7651] tipc: Enabled bearer , priority 0 [ 192.753500][ T7653] syzkaller0: entered promiscuous mode [ 192.753529][ T7653] syzkaller0: entered allmulticast mode [ 192.816930][ T7647] tipc: Resetting bearer [ 193.097963][ T7647] tipc: Disabling bearer [ 193.807979][ T7671] tipc: Enabled bearer , priority 0 [ 193.830145][ T7675] syzkaller0: entered promiscuous mode [ 193.830176][ T7675] syzkaller0: entered allmulticast mode [ 193.854954][ T7677] syzkaller0: entered promiscuous mode [ 193.854982][ T7677] syzkaller0: entered allmulticast mode [ 193.965193][ T7697] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 193.986673][ T7697] batman_adv: batadv0: Adding interface: gretap1 [ 193.986691][ T7697] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.986725][ T7697] batman_adv: batadv0: Interface activated: gretap1 [ 194.053837][ T7664] tipc: Resetting bearer [ 194.185826][ T7664] tipc: Disabling bearer [ 194.733453][ T7721] netlink: 36 bytes leftover after parsing attributes in process `syz.0.584'. [ 195.155034][ T7732] netlink: 14 bytes leftover after parsing attributes in process `syz.1.586'. [ 195.458087][ T7738] netlink: 24 bytes leftover after parsing attributes in process `syz.2.588'. [ 195.513707][ T7729] bond1 (unregistering): Released all slaves [ 195.759367][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.591'. [ 196.724068][ T7732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.780708][ T7732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.820974][ T7732] bond0 (unregistering): Released all slaves [ 196.875138][ T7744] tipc: Enabled bearer , priority 0 [ 196.918326][ T7759] netlink: 'syz.3.592': attribute type 12 has an invalid length. [ 196.919686][ T7746] syzkaller0: entered promiscuous mode [ 196.919712][ T7746] syzkaller0: entered allmulticast mode [ 197.016667][ T7740] tipc: Resetting bearer [ 197.165759][ T7740] tipc: Disabling bearer [ 197.313981][ T7771] netlink: 'syz.1.594': attribute type 1 has an invalid length. [ 197.369451][ T7731] netlink: 32 bytes leftover after parsing attributes in process `syz.4.587'. [ 197.369811][ T7733] netlink: 32 bytes leftover after parsing attributes in process `syz.4.587'. [ 197.426806][ T7766] tipc: Enabling of bearer rejected, failed to enable media [ 197.454879][ T7769] syzkaller0: entered promiscuous mode [ 197.454911][ T7769] syzkaller0: entered allmulticast mode [ 197.576927][ T7763] tipc: Enabled bearer , priority 0 [ 197.613062][ T7762] tipc: Resetting bearer [ 197.761491][ T7762] tipc: Disabling bearer [ 198.338905][ T7812] netlink: 14 bytes leftover after parsing attributes in process `syz.1.604'. [ 198.707496][ T7811] bond0 (unregistering): Released all slaves [ 198.997478][ T7821] netlink: 'syz.2.605': attribute type 12 has an invalid length. [ 199.907967][ T7836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.611'. [ 199.980830][ T7838] tipc: Enabled bearer , priority 0 [ 200.060032][ T7838] syzkaller0: entered promiscuous mode [ 200.060064][ T7838] syzkaller0: entered allmulticast mode [ 200.068935][ T7841] syzkaller0: entered promiscuous mode [ 200.068979][ T7841] syzkaller0: entered allmulticast mode [ 200.123196][ T7838] tipc: Resetting bearer [ 200.126689][ T7844] tipc: Enabled bearer , priority 0 [ 200.166524][ T7840] tipc: Resetting bearer [ 200.287946][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'. [ 200.351330][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.351405][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.357526][ T7840] tipc: Disabling bearer [ 200.563958][ T7856] netlink: 'syz.0.618': attribute type 1 has an invalid length. [ 200.584077][ T7834] tipc: Resetting bearer [ 200.744237][ T7834] tipc: Disabling bearer [ 200.895665][ T7854] tipc: Enabling of bearer rejected, failed to enable media [ 201.150842][ T7872] netlink: 'syz.1.623': attribute type 12 has an invalid length. [ 201.868102][ T7888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.629'. [ 202.266382][ T7891] syzkaller0: entered promiscuous mode [ 202.266416][ T7891] syzkaller0: entered allmulticast mode [ 202.300166][ T7891] tipc: Enabled bearer , priority 0 [ 202.344980][ T7890] tipc: Resetting bearer [ 202.596535][ T7890] tipc: Disabling bearer [ 203.019881][ T7903] tipc: Enabling of bearer rejected, failed to enable media [ 203.051098][ T7903] netlink: 'syz.1.636': attribute type 1 has an invalid length. [ 203.988282][ T7930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.644'. [ 204.503171][ T7939] Illegal XDP return value 4294967294 on prog (id 124) dev N/A, expect packet loss! [ 204.736148][ T7955] netlink: 60 bytes leftover after parsing attributes in process `syz.4.649'. [ 204.966423][ T7939] bond0: option arp_validate: invalid value (18446744073491447809) [ 204.968470][ T7942] netlink: 'syz.1.647': attribute type 13 has an invalid length. [ 205.019652][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'. [ 205.040589][ T7939] bond0 (unregistering): Released all slaves [ 205.826875][ T7942] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.834037][ T7942] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.467581][ T7942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.482585][ T7942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.335675][ T7982] syzkaller0: entered promiscuous mode [ 207.335807][ T7982] syzkaller0: entered allmulticast mode [ 207.369300][ T1277] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.499674][ T8000] netlink: 'syz.1.657': attribute type 16 has an invalid length. [ 207.499699][ T8000] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.657'. [ 207.884736][ T1277] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.914146][ T1277] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.919450][ T1277] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.339195][ T8011] tipc: Can't bind to reserved service type 1 [ 208.741544][ T8028] netlink: 44 bytes leftover after parsing attributes in process `syz.4.668'. [ 208.741569][ T8028] netlink: 24 bytes leftover after parsing attributes in process `syz.4.668'. [ 208.820340][ T8024] tipc: Enabled bearer , priority 0 [ 209.125900][ T8021] tipc: Disabling bearer [ 209.165855][ T8044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'. [ 209.808006][ T8066] netlink: 36 bytes leftover after parsing attributes in process `syz.1.675'. [ 209.808031][ T8066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.675'. [ 209.808050][ T8066] netlink: 36 bytes leftover after parsing attributes in process `syz.1.675'. [ 209.808095][ T8066] netlink: 36 bytes leftover after parsing attributes in process `syz.1.675'. [ 209.884270][ T8049] syzkaller0: entered promiscuous mode [ 209.884303][ T8049] syzkaller0: entered allmulticast mode [ 210.012213][ T8068] netlink: 'syz.2.676': attribute type 12 has an invalid length. [ 210.894198][ T8080] erspan1: entered allmulticast mode [ 211.145684][ T8083] netlink: 28 bytes leftover after parsing attributes in process `syz.4.679'. [ 212.068475][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'. [ 212.267072][ T8114] syzkaller0: entered promiscuous mode [ 212.267103][ T8114] syzkaller0: entered allmulticast mode [ 212.438864][ T8118] tipc: Enabled bearer , priority 0 [ 212.830406][ T8116] tipc: Disabling bearer [ 212.993091][ T8133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.694'. [ 213.326980][ T8146] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 213.763988][ T8154] netlink: 'syz.4.702': attribute type 12 has an invalid length. [ 213.852712][ T8164] erspan1: entered allmulticast mode [ 214.165862][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.708'. [ 214.165888][ T8166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.243640][ T8166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.764248][ T62] Bluetooth: hci4: link tx timeout [ 214.764270][ T62] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 215.089851][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.717'. [ 216.011158][ T8220] netlink: 14 bytes leftover after parsing attributes in process `syz.1.724'. [ 216.386714][ T8217] bond0 (unregistering): Released all slaves [ 216.831173][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 217.158821][ T8237] netlink: 36 bytes leftover after parsing attributes in process `syz.1.729'. [ 217.158848][ T8237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.729'. [ 217.158868][ T8237] netlink: 36 bytes leftover after parsing attributes in process `syz.1.729'. [ 217.158933][ T8237] netlink: 36 bytes leftover after parsing attributes in process `syz.1.729'. [ 217.691645][ T8239] erspan1: entered allmulticast mode [ 217.931981][ T8246] batadv1: entered promiscuous mode [ 217.935550][ T8246] batadv1: entered allmulticast mode [ 218.189364][ T8249] netlink: 32 bytes leftover after parsing attributes in process `syz.4.734'. [ 218.365442][ T8253] netlink: 32 bytes leftover after parsing attributes in process `syz.4.734'. [ 219.223388][ T8281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.744'. [ 219.274977][ T8281] vlan2: entered promiscuous mode [ 219.274995][ T8281] ip6gretap0: entered promiscuous mode [ 219.417747][ T8284] netlink: 'syz.2.743': attribute type 1 has an invalid length. [ 219.515169][ T8279] tipc: Enabling of bearer rejected, failed to enable media [ 221.235408][ T8330] tipc: Enabling of bearer rejected, failed to enable media [ 221.466967][ T8330] netlink: 'syz.0.757': attribute type 1 has an invalid length. [ 221.811377][ T8343] netlink: 36 bytes leftover after parsing attributes in process `syz.3.759'. [ 221.811403][ T8343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.759'. [ 221.811422][ T8343] netlink: 36 bytes leftover after parsing attributes in process `syz.3.759'. [ 222.964892][ T8375] tipc: Enabling of bearer rejected, failed to enable media [ 223.130256][ T8375] netlink: 'syz.0.771': attribute type 1 has an invalid length. [ 223.595046][ T8385] __nla_validate_parse: 1 callbacks suppressed [ 223.595069][ T8385] netlink: 28 bytes leftover after parsing attributes in process `syz.3.775'. [ 224.267062][ T8408] netlink: 36 bytes leftover after parsing attributes in process `syz.3.780'. [ 224.267088][ T8408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.780'. [ 224.267107][ T8408] netlink: 36 bytes leftover after parsing attributes in process `syz.3.780'. [ 224.267154][ T8408] netlink: 36 bytes leftover after parsing attributes in process `syz.3.780'. [ 224.761840][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'. [ 225.280963][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.786'. [ 225.280990][ T8426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.281016][ T8426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.354845][ T8426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.354877][ T8426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.388297][ T8426] batman_adv: batadv0: Interface deactivated: gretap1 [ 225.388325][ T8426] batman_adv: batadv0: Removing interface: gretap1 [ 226.425141][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 227.726292][ T8484] netlink: 'syz.3.796': attribute type 12 has an invalid length. [ 227.852075][ T8488] tipc: Enabling of bearer rejected, failed to enable media [ 228.456913][ T8504] netlink: 60 bytes leftover after parsing attributes in process `syz.1.799'. [ 229.438121][ T8526] netlink: 14 bytes leftover after parsing attributes in process `syz.4.808'. [ 230.060074][ T8524] bond3 (unregistering): Released all slaves [ 230.305513][ T8526] bond_slave_0: left promiscuous mode [ 230.305666][ T8526] bond_slave_1: left promiscuous mode [ 230.473231][ T8555] netlink: 36 bytes leftover after parsing attributes in process `syz.2.817'. [ 230.476996][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 230.750780][ T8559] netlink: 'syz.3.818': attribute type 1 has an invalid length. [ 231.323805][ T8526] bond1: (slave macvlan2): Removing an active aggregator [ 231.328996][ T8526] bond1: (slave macvlan2): Releasing backup interface [ 231.464242][ T8526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.523840][ T8526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.575603][ T8526] bond0 (unregistering): Released all slaves [ 231.645202][ T8544] batadv0: entered promiscuous mode [ 231.645230][ T8544] batadv0: entered allmulticast mode [ 231.749333][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.819'. [ 231.774084][ T8554] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 231.779317][ T8558] tipc: Enabling of bearer rejected, failed to enable media [ 231.965829][ T8569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.821'. [ 232.010358][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'. [ 232.072641][ T8569] vlan2: entered promiscuous mode [ 232.072826][ T8569] ip6gretap0: entered promiscuous mode [ 232.130212][ T8574] netlink: 60 bytes leftover after parsing attributes in process `syz.3.822'. [ 233.120379][ T8595] syzkaller0: entered promiscuous mode [ 233.120407][ T8595] syzkaller0: entered allmulticast mode [ 233.157272][ T8561] Bluetooth: hci1: command 0x0406 tx timeout [ 233.157340][ T8561] Bluetooth: hci2: command 0x0406 tx timeout [ 233.157368][ T8561] Bluetooth: hci0: command 0x0401 tx timeout [ 233.157394][ T8561] Bluetooth: hci3: command 0x0406 tx timeout [ 233.296279][ T8614] netlink: 'syz.1.833': attribute type 16 has an invalid length. [ 233.296303][ T8614] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.833'. [ 233.453558][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.832'. [ 233.524608][ T8616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.524640][ T8616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.574355][ T8616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.574386][ T8616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.653648][ T8616] batman_adv: batadv0: Interface deactivated: gretap1 [ 233.653681][ T8616] batman_adv: batadv0: Removing interface: gretap1 [ 234.895271][ T8649] tipc: Enabling of bearer rejected, failed to enable media [ 234.898678][ T8649] netlink: 'syz.0.841': attribute type 1 has an invalid length. [ 235.531025][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.848'. [ 236.616969][ T8689] tipc: Enabling of bearer rejected, failed to enable media [ 236.639531][ T8689] netlink: 'syz.0.854': attribute type 1 has an invalid length. [ 237.536510][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'. [ 238.603203][ T8733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.871'. [ 239.268123][ T8755] netlink: 'syz.0.878': attribute type 12 has an invalid length. [ 240.168594][ T8770] syzkaller0: entered promiscuous mode [ 240.168622][ T8770] syzkaller0: entered allmulticast mode [ 240.406594][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.886'. [ 240.647211][ T8779] erspan0: entered promiscuous mode [ 240.673366][ T8779] erspan0: left promiscuous mode [ 240.881953][ T8792] netlink: 14 bytes leftover after parsing attributes in process `syz.1.889'. [ 241.030309][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.891'. [ 241.111637][ T8790] bond0 (unregistering): Released all slaves [ 241.621090][ T8808] netlink: 'syz.3.893': attribute type 16 has an invalid length. [ 241.621114][ T8808] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.893'. [ 241.792513][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'. [ 242.098194][ T8821] tipc: Enabled bearer , priority 0 [ 242.139944][ T8821] tipc: Resetting bearer [ 242.346022][ T8819] tipc: Disabling bearer [ 242.934020][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.903'. [ 244.009193][ T8868] netlink: 'syz.2.910': attribute type 12 has an invalid length. [ 244.892033][ T8882] batadv0: entered promiscuous mode [ 244.892164][ T8882] batadv0: entered allmulticast mode [ 245.037714][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'. [ 245.089677][ T8889] erspan0: entered promiscuous mode [ 245.115485][ T8889] erspan0: left promiscuous mode [ 245.457439][ T8893] netlink: 'syz.0.919': attribute type 1 has an invalid length. [ 245.457460][ T8893] netlink: 244 bytes leftover after parsing attributes in process `syz.0.919'. [ 246.314673][ T8913] netlink: 'syz.1.926': attribute type 12 has an invalid length. [ 247.345845][ T8930] netlink: 'syz.3.931': attribute type 16 has an invalid length. [ 247.345868][ T8930] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.931'. [ 247.405473][ T8931] syzkaller0: entered promiscuous mode [ 247.405503][ T8931] syzkaller0: entered allmulticast mode [ 247.542088][ T8931] tipc: Enabled bearer , priority 0 [ 247.646300][ T8929] tipc: Resetting bearer [ 247.925622][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.934'. [ 247.931148][ T8929] tipc: Disabling bearer [ 249.344321][ T8967] netlink: 'syz.4.938': attribute type 12 has an invalid length. [ 250.102800][ T5117] Bluetooth: hci4: command 0x0406 tx timeout [ 250.595549][ T8982] netlink: 28 bytes leftover after parsing attributes in process `syz.2.944'. [ 251.092044][ T9001] tipc: Enabling of bearer rejected, failed to enable media [ 251.187679][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'. [ 252.187825][ T5117] Bluetooth: hci4: command 0x0406 tx timeout [ 252.367460][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.956'. [ 254.262827][ T5117] Bluetooth: hci4: command 0x0406 tx timeout [ 254.567381][ T9060] tipc: Enabling of bearer rejected, failed to enable media [ 254.971735][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.969'. [ 256.563602][ T9116] netlink: 'syz.2.983': attribute type 11 has an invalid length. [ 256.563628][ T9116] netlink: 244 bytes leftover after parsing attributes in process `syz.2.983'. [ 256.908923][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.985'. [ 258.114317][ T9149] netlink: 'syz.4.992': attribute type 16 has an invalid length. [ 258.114343][ T9149] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.992'. [ 258.404541][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.995'. [ 258.929689][ T9175] netlink: 'syz.2.998': attribute type 12 has an invalid length. [ 261.792638][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.804609][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.922263][ T9228] netlink: 'syz.4.1014': attribute type 16 has an invalid length. [ 261.922287][ T9228] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1014'. [ 262.086020][ T9230] batadv0: entered promiscuous mode [ 262.086051][ T9230] batadv0: entered allmulticast mode [ 263.303448][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 263.745020][ T9265] netlink: 'syz.0.1027': attribute type 16 has an invalid length. [ 263.745047][ T9265] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1027'. [ 264.497203][ T9279] tipc: Enabled bearer , priority 0 [ 264.556909][ T9279] tipc: Resetting bearer [ 264.804293][ T9278] tipc: Disabling bearer [ 266.115912][ T9325] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 266.188962][ T9327] netlink: 'syz.2.1049': attribute type 12 has an invalid length. [ 267.669139][ T9346] tipc: Enabled bearer , priority 0 [ 267.682540][ T9348] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1055'. [ 267.689823][ T9352] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1055'. [ 268.221377][ T9345] tipc: Disabling bearer [ 268.432241][ T9361] batadv0: entered promiscuous mode [ 268.432270][ T9361] batadv0: entered allmulticast mode [ 268.835789][ T9369] netlink: 'syz.0.1059': attribute type 1 has an invalid length. [ 269.420186][ T9388] netlink: 'syz.0.1063': attribute type 12 has an invalid length. [ 270.332487][ T9408] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1069'. [ 270.444773][ T9411] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1069'. [ 271.094616][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 271.130361][ T9431] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 271.359194][ T9424] netlink: 'syz.3.1073': attribute type 1 has an invalid length. [ 272.010367][ T9454] netlink: 'syz.3.1079': attribute type 12 has an invalid length. [ 273.582616][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1088'. [ 274.074435][ T9493] batadv0: entered promiscuous mode [ 274.074461][ T9493] batadv0: entered allmulticast mode [ 274.321242][ T9490] netlink: 'syz.1.1089': attribute type 1 has an invalid length. [ 274.526199][ T9496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1091'. [ 274.838557][ T9520] netlink: 'syz.2.1095': attribute type 12 has an invalid length. [ 275.547521][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'. [ 276.686872][ T9545] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1101'. [ 276.744330][ T9548] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1101'. [ 279.017924][ T9592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1111'. [ 279.836870][ T9600] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1115'. [ 279.880576][ T9601] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1115'. [ 280.196456][ T9617] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1118'. [ 280.196481][ T9617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1118'. [ 280.196501][ T9617] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1118'. [ 280.196546][ T9617] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1118'. [ 281.099390][ T9638] netlink: 'syz.2.1121': attribute type 12 has an invalid length. [ 282.041285][ T9654] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1127'. [ 282.298102][ T9662] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1130'. [ 282.350089][ T9666] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1130'. [ 282.811890][ T9675] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1133'. [ 282.811914][ T9675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1133'. [ 282.811933][ T9675] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1133'. [ 282.811977][ T9675] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1133'. [ 283.440721][ T9689] bond0: (slave macvlan2): Opening slave failed [ 284.548428][ T9709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1141'. [ 285.793329][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 285.793353][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1148'. [ 286.495513][ T9748] netlink: 'syz.2.1150': attribute type 12 has an invalid length. [ 287.700942][ T9767] batadv0: entered promiscuous mode [ 287.700971][ T9767] batadv0: entered allmulticast mode [ 288.255818][ T9780] __nla_validate_parse: 4 callbacks suppressed [ 288.255838][ T9780] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1162'. [ 288.308249][ T9777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1161'. [ 288.653401][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1165'. [ 288.864362][ T9788] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1164'. [ 288.864870][ T9794] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1164'. [ 289.477872][ T9811] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1170'. [ 289.477897][ T9811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1170'. [ 289.477915][ T9811] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1170'. [ 289.477966][ T9811] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1170'. [ 289.554610][ T9812] netlink: 'syz.3.1169': attribute type 12 has an invalid length. [ 290.460493][ T9823] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1176'. [ 290.961464][ T9835] syzkaller0: entered promiscuous mode [ 290.961494][ T9835] syzkaller0: entered allmulticast mode [ 290.988841][ T9835] tipc: Enabled bearer , priority 0 [ 291.014383][ T9833] tipc: Resetting bearer [ 291.278603][ T9833] tipc: Disabling bearer [ 291.423527][ T9846] netlink: 'syz.4.1185': attribute type 1 has an invalid length. [ 291.445938][ T9843] tipc: Enabling of bearer rejected, failed to enable media [ 292.843309][ T9888] syzkaller0: entered promiscuous mode [ 292.843340][ T9888] syzkaller0: entered allmulticast mode [ 292.922372][ T9888] tipc: Enabled bearer , priority 0 [ 292.955213][ T9887] tipc: Resetting bearer [ 293.216468][ T9887] tipc: Disabling bearer [ 294.236018][ T9919] tipc: Enabling of bearer rejected, failed to enable media [ 294.636701][ T9934] __nla_validate_parse: 5 callbacks suppressed [ 294.636723][ T9934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1215'. [ 295.257491][ T9958] syzkaller0: create flow: hash 147576827 index 2 [ 295.823718][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1224'. [ 295.892898][ T9946] syzkaller0: delete flow: hash 147576827 index 2 [ 296.534207][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1227'. [ 307.725053][ T9985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1229'. [ 307.937822][ T9996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1232'. [ 308.118723][T10000] syzkaller0: entered promiscuous mode [ 308.118753][T10000] syzkaller0: entered allmulticast mode [ 308.588236][T10008] netlink: 'syz.3.1234': attribute type 12 has an invalid length. [ 309.766015][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1240'. [ 310.386045][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1242'. [ 310.634784][T10038] syzkaller0: create flow: hash 147576827 index 2 [ 311.037207][T10041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1244'. [ 311.229947][T10036] syzkaller0: delete flow: hash 147576827 index 2 [ 323.227243][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.227343][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.116525][T10050] syzkaller0: entered promiscuous mode [ 324.116560][T10050] syzkaller0: entered allmulticast mode [ 324.362052][T10078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1256'. [ 324.379312][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1257'. [ 326.016717][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1268'. [ 326.220029][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1269'. [ 327.489957][T10149] netlink: 'syz.2.1277': attribute type 12 has an invalid length. [ 327.920636][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1282'. [ 328.687495][T10182] tipc: Enabled bearer , priority 0 [ 328.969849][T10185] syzkaller0: entered promiscuous mode [ 328.969879][T10185] syzkaller0: entered allmulticast mode [ 329.024281][T10172] tipc: Resetting bearer [ 329.166102][T10172] tipc: Disabling bearer [ 329.315442][T10192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1290'. [ 329.805287][T10211] netlink: 'syz.1.1296': attribute type 1 has an invalid length. [ 329.805312][T10211] netlink: 'syz.1.1296': attribute type 7 has an invalid length. [ 329.805326][T10211] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1296'. [ 330.100191][T10219] netlink: 'syz.2.1298': attribute type 12 has an invalid length. [ 330.297374][T10223] syzkaller0: entered promiscuous mode [ 330.297402][T10223] syzkaller0: entered allmulticast mode [ 330.909507][T10229] tipc: Enabled bearer , priority 0 [ 330.911415][T10236] syzkaller0: entered promiscuous mode [ 330.911443][T10236] syzkaller0: entered allmulticast mode [ 330.945480][T10235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1306'. [ 331.015026][T10228] tipc: Resetting bearer [ 331.189276][T10252] netlink: zone id is out of range [ 331.189294][T10252] netlink: zone id is out of range [ 331.189303][T10252] netlink: zone id is out of range [ 331.189311][T10252] netlink: zone id is out of range [ 331.189319][T10252] netlink: zone id is out of range [ 331.189327][T10252] netlink: zone id is out of range [ 331.189334][T10252] netlink: zone id is out of range [ 331.189343][T10252] netlink: zone id is out of range [ 331.189351][T10252] netlink: zone id is out of range [ 331.189359][T10252] netlink: zone id is out of range [ 331.197326][T10228] tipc: Disabling bearer [ 331.979188][T10272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.015015][T10269] syzkaller0: entered promiscuous mode [ 332.015048][T10269] syzkaller0: entered allmulticast mode [ 332.017680][T10280] netlink: 'syz.3.1316': attribute type 12 has an invalid length. [ 332.844725][ T9] IPVS: starting estimator thread 0... [ 332.968563][T10309] IPVS: using max 7 ests per chain, 16800 per kthread [ 333.403232][T10314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1330'. [ 333.522307][T10325] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1333'. [ 333.522334][T10325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1333'. [ 333.522354][T10325] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1333'. [ 333.522397][T10325] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1333'. [ 333.602146][T10331] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1339'. [ 334.333766][T10351] syzkaller0: entered promiscuous mode [ 334.333957][T10351] syzkaller0: entered allmulticast mode [ 334.812324][T10358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1349'. [ 335.115450][T10384] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1356'. [ 335.350623][T10387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1358'. [ 335.350651][T10387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1358'. [ 335.350682][T10387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1358'. [ 335.350731][T10387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1358'. [ 335.901064][T10408] syzkaller0: entered promiscuous mode [ 335.901093][T10408] syzkaller0: entered allmulticast mode [ 336.054637][T10412] netlink: 'syz.3.1367': attribute type 12 has an invalid length. [ 337.120646][T10446] netlink: 'syz.0.1378': attribute type 12 has an invalid length. [ 337.465677][T10453] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1380'. [ 337.465702][T10453] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1380'. [ 337.465722][T10453] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1380'. [ 337.465769][T10453] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1380'. [ 337.622126][T10454] netlink: 'syz.1.1381': attribute type 12 has an invalid length. [ 338.589306][T10464] syzkaller0: entered promiscuous mode [ 338.589347][T10464] syzkaller0: entered allmulticast mode [ 339.242961][T10487] tipc: Enabled bearer , priority 0 [ 339.417721][T10491] syzkaller0: entered promiscuous mode [ 339.417754][T10491] syzkaller0: entered allmulticast mode [ 339.697221][T10481] tipc: Resetting bearer [ 339.903783][T10510] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1396'. [ 339.933772][T10481] tipc: Disabling bearer [ 340.522289][T10506] netlink: 'syz.3.1395': attribute type 12 has an invalid length. [ 341.076224][T10529] syzkaller0: entered promiscuous mode [ 341.076252][T10529] syzkaller0: entered allmulticast mode [ 341.258714][T10532] syzkaller0: entered promiscuous mode [ 341.258742][T10532] syzkaller0: entered allmulticast mode [ 341.384413][T10546] netlink: 'syz.0.1410': attribute type 1 has an invalid length. [ 341.439711][T10547] __nla_validate_parse: 3 callbacks suppressed [ 341.439732][T10547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1410'. [ 342.012992][T10557] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1411'. [ 342.013019][T10557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1411'. [ 342.013038][T10557] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1411'. [ 342.013081][T10557] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1411'. [ 342.215565][T10546] bond1: entered promiscuous mode [ 342.216395][T10546] 8021q: adding VLAN 0 to HW filter on device bond1 [ 342.222349][T10547] bond1: entered allmulticast mode [ 342.385005][T10553] bond1: (slave bridge1): making interface the new active one [ 342.385061][T10553] bridge1: entered promiscuous mode [ 342.385301][T10553] bridge1: entered allmulticast mode [ 342.390385][T10553] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 342.705066][T10564] netlink: 'syz.4.1412': attribute type 12 has an invalid length. [ 343.182408][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'. [ 343.677534][ T9] IPVS: starting estimator thread 0... [ 343.793670][T10594] IPVS: using max 7 ests per chain, 16800 per kthread [ 344.729395][T10597] netlink: 'syz.2.1426': attribute type 12 has an invalid length. [ 345.343165][T10620] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1430'. [ 345.343190][T10620] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1430'. [ 345.343208][T10620] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1430'. [ 345.343262][T10620] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1430'. [ 345.413729][T10602] syzkaller0: entered promiscuous mode [ 345.413758][T10602] syzkaller0: entered allmulticast mode [ 345.952104][T10626] bond0: option mode: unable to set because the bond device is up [ 346.010642][T10626] bond0: (slave macvlan2): Opening slave failed [ 346.755925][T10647] syzkaller0: entered promiscuous mode [ 346.755955][T10647] syzkaller0: entered allmulticast mode [ 347.655869][T10652] batadv0: entered promiscuous mode [ 347.655890][T10652] batadv0: entered allmulticast mode [ 347.803911][T10670] __nla_validate_parse: 1 callbacks suppressed [ 347.803936][T10670] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1446'. [ 347.803953][T10670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1446'. [ 347.803973][T10670] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1446'. [ 347.804019][T10670] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1446'. [ 347.939399][ T9] IPVS: starting estimator thread 0... [ 348.033702][T10673] IPVS: using max 7 ests per chain, 16800 per kthread [ 360.238838][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1455'. [ 360.908209][T10716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.997387][T10714] syzkaller0: entered promiscuous mode [ 360.997427][T10714] syzkaller0: entered allmulticast mode [ 361.593177][T10734] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1464'. [ 361.593202][T10734] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1464'. [ 361.593220][T10734] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1464'. [ 361.593262][T10734] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1464'. [ 364.184487][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.194392][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.197929][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.199704][ T5816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.255989][ T5816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 366.343774][ T5816] Bluetooth: hci5: command tx timeout [ 368.422896][ T5816] Bluetooth: hci5: command tx timeout [ 370.502951][ T5816] Bluetooth: hci5: command tx timeout [ 372.583398][ T5816] Bluetooth: hci5: command tx timeout [ 373.901646][T10742] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1468'. [ 374.150537][T10749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1472'. [ 374.895459][T10759] netlink: 'syz.3.1476': attribute type 12 has an invalid length. [ 374.896638][T10762] netlink: 'syz.4.1475': attribute type 12 has an invalid length. [ 376.579038][ T5117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.584038][ T5117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.603115][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.608081][ T5117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.609483][ T5117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 376.752900][T10798] net_ratelimit: 5 callbacks suppressed [ 376.752916][T10798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.198073][T10744] chnl_net:caif_netlink_parms(): no params data found [ 377.829520][T10804] syzkaller0: entered promiscuous mode [ 377.829542][T10804] syzkaller0: entered allmulticast mode [ 377.832819][T10814] netlink: 'syz.1.1491': attribute type 12 has an invalid length. [ 378.336380][ T1166] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.404170][T10823] tipc: Enabled bearer , priority 0 [ 378.404794][T10828] syzkaller0: entered promiscuous mode [ 378.404813][T10828] syzkaller0: entered allmulticast mode [ 378.478909][T10832] tipc: Resetting bearer [ 378.633531][T10822] tipc: Resetting bearer [ 378.665013][ T5117] Bluetooth: hci1: command tx timeout [ 378.801756][T10847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1498'. [ 378.817505][T10822] tipc: Disabling bearer [ 379.266028][ T1166] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.535826][T10859] netlink: 'syz.3.1502': attribute type 12 has an invalid length. [ 380.325326][ T1166] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.385140][T10866] syzkaller0: entered promiscuous mode [ 380.385171][T10866] syzkaller0: entered allmulticast mode [ 380.520477][T10881] bond0: option mode: unable to set because the bond device is up [ 380.535952][T10884] bond0: (slave macvlan2): Opening slave failed [ 380.745298][ T5117] Bluetooth: hci1: command tx timeout [ 380.844092][T10744] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.844245][T10744] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.844524][T10744] bridge_slave_0: entered allmulticast mode [ 380.847128][T10744] bridge_slave_0: entered promiscuous mode [ 380.860162][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1508'. [ 381.076131][ T1166] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.121393][T10893] netlink: 'syz.4.1510': attribute type 1 has an invalid length. [ 381.140133][T10744] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.140295][T10744] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.140854][T10744] bridge_slave_1: entered allmulticast mode [ 381.148645][T10744] bridge_slave_1: entered promiscuous mode [ 381.183387][T10894] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1510'. [ 381.231463][T10893] bond0: entered promiscuous mode [ 381.232059][T10893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.581949][T10896] bond0: (slave bridge3): making interface the new active one [ 381.582002][T10896] bridge3: entered promiscuous mode [ 381.587230][T10896] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 381.916867][T10744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.938957][T10908] netlink: 'syz.4.1515': attribute type 12 has an invalid length. [ 382.046436][T10744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.390672][T10917] syzkaller0: entered promiscuous mode [ 382.390703][T10917] syzkaller0: entered allmulticast mode [ 382.523472][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1519'. [ 382.614001][T10928] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1520'. [ 382.710878][T10744] team0: Port device team_slave_0 added [ 382.833052][ T5117] Bluetooth: hci1: command tx timeout [ 383.060075][T10744] team0: Port device team_slave_1 added [ 383.108114][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1521'. [ 383.161194][T10933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1521'. [ 383.345205][T10939] netlink: 'syz.3.1523': attribute type 1 has an invalid length. [ 383.345229][T10939] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1523'. [ 383.427526][T10744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.427545][T10744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.427575][T10744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.511086][T10744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.511106][T10744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.511136][T10744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.672346][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.672421][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.908699][ T5117] Bluetooth: hci1: command tx timeout [ 385.776238][ T1166] bond0 (unregistering): Released all slaves [ 385.961378][T10952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1527'. [ 386.209945][ T1166] tipc: Left network mode [ 386.353295][T10955] netlink: 'syz.3.1528': attribute type 12 has an invalid length. [ 386.446299][T10957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1529'. [ 386.720106][T10744] hsr_slave_0: entered promiscuous mode [ 386.721950][T10744] hsr_slave_1: entered promiscuous mode [ 386.730599][T10967] netlink: 'syz.1.1532': attribute type 1 has an invalid length. [ 386.730630][T10967] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1532'. [ 386.763700][T10744] debugfs: 'hsr0' already exists in 'hsr' [ 386.763731][T10744] Cannot create hsr debugfs directory [ 386.826915][T10962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.827535][T10962] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 386.828549][T10962] bond0: (slave sit0): Error -95 calling set_mac_address [ 387.507932][T10793] chnl_net:caif_netlink_parms(): no params data found [ 387.632039][T10991] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1536'. [ 388.120959][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1539'. [ 390.205562][T11049] bond0: option mode: unable to set because the bond device is up [ 390.444791][T10793] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.444927][T10793] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.445274][T10793] bridge_slave_0: entered allmulticast mode [ 390.487762][T10793] bridge_slave_0: entered promiscuous mode [ 390.541505][T10793] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.541666][T10793] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.541930][T10793] bridge_slave_1: entered allmulticast mode [ 390.576060][T10793] bridge_slave_1: entered promiscuous mode [ 390.894423][T11080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1555'. [ 391.122446][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1557'. [ 391.122487][T11085] netlink: 'syz.1.1557': attribute type 5 has an invalid length. [ 391.122507][T11085] netlink: 'syz.1.1557': attribute type 8 has an invalid length. [ 391.122521][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1557'. [ 391.319439][T11085] geneve3: entered promiscuous mode [ 391.319468][T11085] geneve3: entered allmulticast mode [ 391.331477][T10793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.483605][T11081] bridge_slave_0: left allmulticast mode [ 391.483631][T11081] bridge_slave_0: left promiscuous mode [ 391.483896][T11081] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.539449][T11081] bridge_slave_1: left allmulticast mode [ 391.539475][T11081] bridge_slave_1: left promiscuous mode [ 391.539875][T11081] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.656212][T11081] team0: Port device team_slave_0 removed [ 391.705430][T11081] team0: Port device team_slave_1 removed [ 391.705946][T11081] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 391.732700][ T119] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 391.758242][T10793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.783106][ T119] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 391.975676][T11103] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1564'. [ 392.012969][ T1166] hsr_slave_0: left promiscuous mode [ 392.052966][ T1166] hsr_slave_1: left promiscuous mode [ 392.147047][ T1166] veth1_macvtap: left promiscuous mode [ 392.147241][ T1166] veth0_macvtap: left promiscuous mode [ 392.147913][ T1166] veth1_vlan: left promiscuous mode [ 392.148179][ T1166] veth0_vlan: left promiscuous mode [ 396.873433][ T119] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 396.997600][T11103] IPVS: Error connecting to the multicast addr [ 397.015342][ T119] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 397.352538][T10793] team0: Port device team_slave_0 added [ 397.538730][T10793] team0: Port device team_slave_1 added [ 398.261710][T10793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.261728][T10793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.261757][T10793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.312717][T10744] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 398.371535][T11137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1576'. [ 398.389365][T10793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.389384][T10793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.389414][T10793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.396388][T10744] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 398.507002][T11133] syzkaller0: entered promiscuous mode [ 398.507033][T11133] syzkaller0: entered allmulticast mode [ 398.512288][T10744] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 398.835627][T10744] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 398.896680][ T1166] IPVS: stop unused estimator thread 0... [ 399.318558][T10793] hsr_slave_0: entered promiscuous mode [ 399.330244][T10793] hsr_slave_1: entered promiscuous mode [ 399.390747][T11170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1586'. [ 400.126514][ T1166] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.658165][ T1166] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.724406][T11195] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1595'. [ 400.850930][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1596'. [ 400.850959][T11197] netlink: 'syz.3.1596': attribute type 5 has an invalid length. [ 400.850971][T11197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1596'. [ 400.909621][T11197] geneve3: entered promiscuous mode [ 400.909642][T11197] geneve3: entered allmulticast mode [ 401.119839][ T1166] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.164731][ T1156] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 401.224637][ T1156] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 401.254467][ T1156] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 401.256170][ T1156] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 401.547490][ T1166] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.076273][T11215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1602'. [ 402.332559][T11221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1604'. [ 402.418886][T10793] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 402.496072][T10793] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 402.537926][T10793] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 402.549902][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1607'. [ 402.549940][T11228] netlink: 'syz.4.1607': attribute type 5 has an invalid length. [ 402.549958][T11228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1607'. [ 402.724479][T11228] geneve3: entered promiscuous mode [ 402.724509][T11228] geneve3: entered allmulticast mode [ 402.729282][ T1166] bridge_slave_1: left allmulticast mode [ 402.729315][ T1166] bridge_slave_1: left promiscuous mode [ 402.762542][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.867579][ T1166] bridge_slave_0: left allmulticast mode [ 402.867963][ T1166] bridge_slave_0: left promiscuous mode [ 402.868271][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.009999][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1612'. [ 404.123496][ T1166] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 404.123797][ T1166] bridge1 (unregistering): left promiscuous mode [ 404.123820][ T1166] bridge1 (unregistering): left allmulticast mode [ 405.019576][ T1166] bond0 (unregistering): Released all slaves [ 405.715605][ T1166] bond1 (unregistering): Released all slaves [ 405.755823][T10793] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 405.833525][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 405.860927][T10744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.866443][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 405.880188][ T1166] tipc: Left network mode [ 405.880251][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 405.880786][ T13] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 406.077144][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1615'. [ 406.124051][T10744] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.204468][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.205189][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.435498][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.435660][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.543175][T11270] netlink: 'syz.1.1620': attribute type 1 has an invalid length. [ 406.709159][T11270] bond0: entered promiscuous mode [ 406.710061][T11270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.815885][T11271] bond0: (slave bridge1): making interface the new active one [ 406.815974][T11271] bridge1: entered promiscuous mode [ 406.818460][T11271] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 407.238993][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1622'. [ 407.911013][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1625'. [ 408.383009][ T1166] hsr_slave_0: left promiscuous mode [ 408.417192][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1635'. [ 408.439081][ T1166] hsr_slave_1: left promiscuous mode [ 408.603855][ T1166] veth1_macvtap: left promiscuous mode [ 408.603969][ T1166] veth0_macvtap: left promiscuous mode [ 408.604235][ T1166] veth1_vlan: left promiscuous mode [ 408.607249][ T1166] veth0_vlan: left promiscuous mode [ 408.667135][T11325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1636'. [ 410.974889][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 411.203766][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 413.682060][T11332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1637'. [ 413.819319][T10793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.904691][T11337] openvswitch: netlink: Flow actions attr not present in new flow. [ 414.000704][T10793] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.053335][T10744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.072570][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.088346][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.134570][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.134670][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.228903][T11346] tipc: Enabled bearer , priority 0 [ 414.241755][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1645'. [ 414.269041][T11346] tipc: Resetting bearer [ 414.444317][T11344] tipc: Disabling bearer [ 414.599797][T11361] Bluetooth: MGMT ver 1.23 [ 414.830217][T11367] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1651'. [ 415.232037][ T1166] IPVS: stop unused estimator thread 0... [ 415.378284][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1655'. [ 415.752956][T10744] veth0_vlan: entered promiscuous mode [ 415.811955][T10744] veth1_vlan: entered promiscuous mode [ 416.041258][T10793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.140184][T10744] veth0_macvtap: entered promiscuous mode [ 416.213313][T10744] veth1_macvtap: entered promiscuous mode [ 416.301933][T11411] netlink: 'syz.4.1663': attribute type 1 has an invalid length. [ 416.333641][T11411] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1663'. [ 416.450149][T10744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.468622][T10744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.518254][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.535432][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.539875][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.550419][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.110998][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.111022][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.381122][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.381146][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.874270][T10793] veth0_vlan: entered promiscuous mode [ 418.062806][T10793] veth1_vlan: entered promiscuous mode [ 418.451490][T10793] veth0_macvtap: entered promiscuous mode [ 418.564467][T10793] veth1_macvtap: entered promiscuous mode [ 418.810879][T10793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.979866][T10793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.262417][ T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.269098][ T43] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.273860][ T43] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.273917][ T43] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.613232][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1686'. [ 420.964334][ T1414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.964358][ T1414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.208718][T11520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.228434][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.228455][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.615035][T11531] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1703'. [ 421.615064][T11531] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1703'. [ 421.617456][T11531] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1703'. [ 421.617496][T11531] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1703'. [ 422.237860][T11545] netlink: zone id is out of range [ 422.237878][T11545] netlink: zone id is out of range [ 423.045044][T11556] batadv1: entered promiscuous mode [ 423.045074][T11556] batadv1: entered allmulticast mode [ 423.351575][T11564] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1481'. [ 423.351602][T11564] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1481'. [ 423.351622][T11564] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1481'. [ 423.351665][T11564] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1481'. [ 424.144320][T11595] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1723'. [ 424.218393][T11594] tipc: Started in network mode [ 424.218431][T11594] tipc: Node identity 523b32369187, cluster identity 4711 [ 424.241329][T11594] tipc: Enabled bearer , priority 0 [ 424.903409][ T5816] Bluetooth: hci1: command 0x0405 tx timeout [ 424.965908][T11593] tipc: Disabling bearer [ 425.079776][T11613] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1730'. [ 425.079809][T11613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1730'. [ 425.079829][T11613] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1730'. [ 425.079877][T11613] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1730'. [ 427.001772][T11646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1743'. [ 427.097535][T11625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1737'. [ 427.429570][T11651] tipc: Enabled bearer , priority 0 [ 427.462767][ T5816] Bluetooth: hci1: command 0x0405 tx timeout [ 427.621067][T11663] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1747'. [ 427.621095][T11663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1747'. [ 427.621116][T11663] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1747'. [ 427.621159][T11663] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1747'. [ 427.688045][T11648] tipc: Disabling bearer [ 429.199412][T11694] tipc: Started in network mode [ 429.199449][T11694] tipc: Node identity f639bd010f3b, cluster identity 4711 [ 429.199662][T11694] tipc: Enabled bearer , priority 0 [ 429.300203][T11693] tipc: Disabling bearer [ 429.301183][T11703] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 430.666090][T11745] tipc: Enabled bearer , priority 0 [ 430.765916][T11743] tipc: Disabling bearer [ 431.543207][ T5816] Bluetooth: hci1: command 0x0405 tx timeout [ 431.736821][T11783] __nla_validate_parse: 5 callbacks suppressed [ 431.736845][T11783] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1787'. [ 431.736861][T11783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1787'. [ 431.736880][T11783] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1787'. [ 431.736929][T11783] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1787'. [ 431.947329][T11789] netlink: 'syz.6.1792': attribute type 12 has an invalid length. [ 431.947365][T11789] netlink: 'syz.6.1792': attribute type 29 has an invalid length. [ 431.947378][T11789] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1792'. [ 433.033916][ T5117] Bluetooth: hci1: link tx timeout [ 433.036347][ T5117] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 433.937864][T11814] netlink: 'syz.6.1803': attribute type 12 has an invalid length. [ 433.937890][T11814] netlink: 'syz.6.1803': attribute type 29 has an invalid length. [ 433.937904][T11814] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1803'. [ 434.282061][T11837] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1809'. [ 434.282084][T11837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1809'. [ 434.282102][T11837] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1809'. [ 434.282162][T11837] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1809'. [ 434.867716][ T5117] Bluetooth: hci1: link tx timeout [ 434.867739][ T5117] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 435.062857][ T5117] Bluetooth: hci1: command 0x0405 tx timeout [ 435.243326][T11856] netlink: 'syz.6.1820': attribute type 12 has an invalid length. [ 435.243353][T11856] netlink: 'syz.6.1820': attribute type 29 has an invalid length. [ 436.041601][T11893] netlink: 'syz.3.1833': attribute type 12 has an invalid length. [ 436.041623][T11893] netlink: 'syz.3.1833': attribute type 29 has an invalid length. [ 436.179987][T11901] netlink: 'syz.3.1836': attribute type 1 has an invalid length. [ 436.180040][T11901] NCSI netlink: No device for ifindex 0 [ 436.252300][T11898] syzkaller0: entered promiscuous mode [ 436.252329][T11898] syzkaller0: entered allmulticast mode [ 436.752875][T11906] __nla_validate_parse: 8 callbacks suppressed [ 436.752897][T11906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1838'. [ 437.142264][T11924] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1843'. [ 437.142291][T11924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1843'. [ 437.142313][T11924] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1843'. [ 437.142360][T11924] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1843'. [ 437.727199][T11945] syzkaller0: entered promiscuous mode [ 437.727234][T11945] syzkaller0: entered allmulticast mode [ 438.112702][T11948] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1853'. [ 438.937525][T11976] tipc: Enabled bearer , priority 0 [ 439.261540][T11976] tipc: Disabling bearer [ 439.293415][T11989] netlink: 'syz.5.1863': attribute type 13 has an invalid length. [ 439.293441][T11989] netlink: 'syz.5.1863': attribute type 17 has an invalid length. [ 439.293455][T11989] netlink: 'syz.5.1863': attribute type 27 has an invalid length. [ 439.461593][T11995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.465194][T11997] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1864'. [ 439.465217][T11997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1864'. [ 439.465239][T11997] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1864'. [ 439.465292][T11997] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1864'. [ 439.537500][T11985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.721115][T11998] syzkaller0: entered promiscuous mode [ 439.721145][T11998] syzkaller0: entered allmulticast mode [ 441.050793][T12025] netlink: 'syz.6.1873': attribute type 5 has an invalid length. [ 441.050821][T12025] netlink: 'syz.6.1873': attribute type 8 has an invalid length. [ 441.078012][T12025] geneve2: entered promiscuous mode [ 441.078048][T12025] geneve2: entered allmulticast mode [ 441.080649][ T12] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 441.082545][ T12] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 441.088061][ T12] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 441.088108][ T12] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 442.086696][T12067] netlink: 'syz.6.1885': attribute type 1 has an invalid length. [ 442.089140][T12067] __nla_validate_parse: 9 callbacks suppressed [ 442.089160][T12067] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1885'. [ 442.467312][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1888'. [ 442.467365][T12076] netlink: 'syz.6.1888': attribute type 5 has an invalid length. [ 442.467382][T12076] netlink: 'syz.6.1888': attribute type 8 has an invalid length. [ 442.467395][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1888'. [ 442.531333][T12089] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1893'. [ 442.615943][T12090] syzkaller0: entered promiscuous mode [ 442.615971][T12090] syzkaller0: entered allmulticast mode [ 443.073045][T12102] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1899'. [ 443.073076][T12102] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1899'. [ 443.324115][T12115] openvswitch: netlink: Flow actions attr not present in new flow. [ 443.347640][T12118] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1906'. [ 443.395059][T12120] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1903'. [ 443.395674][T12120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1903'. [ 443.395697][T12120] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1903'. [ 443.567189][T12121] netlink: 'syz.4.1905': attribute type 5 has an invalid length. [ 443.567213][T12121] netlink: 'syz.4.1905': attribute type 8 has an invalid length. [ 444.175968][T12143] bridge_slave_0: left allmulticast mode [ 444.175999][T12143] bridge_slave_0: left promiscuous mode [ 444.176264][T12143] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.229880][T12152] openvswitch: netlink: Flow actions attr not present in new flow. [ 444.284428][T12143] bridge_slave_1: left allmulticast mode [ 444.284460][T12143] bridge_slave_1: left promiscuous mode [ 444.284725][T12143] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.415663][T12143] team0: Port device team_slave_0 removed [ 444.463287][T12143] team0: Port device team_slave_1 removed [ 444.470863][T12143] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 444.532224][T12144] syzkaller0: entered promiscuous mode [ 444.532252][T12144] syzkaller0: entered allmulticast mode [ 444.735461][T12160] validate_nla: 2 callbacks suppressed [ 444.735481][T12160] netlink: 'syz.6.1920': attribute type 5 has an invalid length. [ 444.735498][T12160] netlink: 'syz.6.1920': attribute type 8 has an invalid length. [ 445.095360][T12181] openvswitch: netlink: Flow actions attr not present in new flow. [ 445.669186][T12205] syzkaller0: entered promiscuous mode [ 445.669216][T12205] syzkaller0: entered allmulticast mode [ 446.110053][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.110126][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.555905][T12237] syzkaller0: entered promiscuous mode [ 446.555936][T12237] syzkaller0: entered allmulticast mode [ 446.906872][T12254] syzkaller0: entered promiscuous mode [ 446.906902][T12254] syzkaller0: entered allmulticast mode [ 447.176091][T12263] __nla_validate_parse: 24 callbacks suppressed [ 447.176117][T12263] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1966'. [ 447.176133][T12263] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1966'. [ 447.176152][T12263] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1966'. [ 447.176198][T12263] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1966'. [ 447.400698][T12273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1971'. [ 447.519718][T12273] ipvlan0: entered promiscuous mode [ 447.521819][T12273] ipvlan0: left promiscuous mode [ 448.176366][T12302] syzkaller0: entered promiscuous mode [ 448.176397][T12302] syzkaller0: entered allmulticast mode [ 448.245319][T12303] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1983'. [ 448.245345][T12303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1983'. [ 448.245367][T12303] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1983'. [ 448.245433][T12303] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1983'. [ 448.779771][T12312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1986'. [ 449.990772][T12344] syzkaller0: entered promiscuous mode [ 449.990809][T12344] syzkaller0: entered allmulticast mode [ 450.730009][T12378] netlink: 'syz.5.2007': attribute type 12 has an invalid length. [ 450.730039][T12378] netlink: 'syz.5.2007': attribute type 29 has an invalid length. [ 451.632517][T12403] tipc: Enabled bearer , priority 0 [ 451.688199][T12403] tipc: Resetting bearer [ 451.856719][T12401] tipc: Disabling bearer [ 452.291232][T12416] __nla_validate_parse: 7 callbacks suppressed [ 452.291252][T12416] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2021'. [ 453.386466][T12441] netlink: 'syz.3.2031': attribute type 12 has an invalid length. [ 453.386493][T12441] netlink: 'syz.3.2031': attribute type 29 has an invalid length. [ 453.386507][T12441] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2031'. [ 453.490618][T12449] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2035'. [ 453.490648][T12449] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2035'. [ 453.530948][T12420] syz.6.2024 (12420) used greatest stack depth: 18488 bytes left [ 454.027690][T12470] netlink: zone id is out of range [ 454.027707][T12470] netlink: zone id is out of range [ 454.252947][T12480] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2049'. [ 454.252978][T12480] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2049'. [ 455.018329][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2055'. [ 455.018366][T12495] netlink: 'syz.4.2055': attribute type 5 has an invalid length. [ 455.018385][T12495] netlink: 'syz.4.2055': attribute type 8 has an invalid length. [ 455.018399][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2055'. [ 455.197661][T12507] netlink: 'syz.6.2061': attribute type 12 has an invalid length. [ 455.197685][T12507] netlink: 'syz.6.2061': attribute type 29 has an invalid length. [ 455.197700][T12507] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2061'. [ 455.300292][T12511] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2062'. [ 455.542318][T12526] syzkaller1: entered promiscuous mode [ 455.542347][T12526] syzkaller1: entered allmulticast mode [ 456.011863][T12530] tipc: Enabled bearer , priority 0 [ 456.076876][T12528] tipc: Resetting bearer [ 456.122141][T12535] syzkaller0: entered promiscuous mode [ 456.122170][T12535] syzkaller0: entered allmulticast mode [ 456.365384][T12527] tipc: Resetting bearer [ 456.563940][T12527] tipc: Disabling bearer [ 457.603324][T12593] netlink: 'syz.3.2087': attribute type 10 has an invalid length. [ 457.657030][T12598] netlink: 'syz.3.2087': attribute type 10 has an invalid length. [ 458.142345][T12593] team0: Port device dummy0 added [ 458.267206][T12598] team0: Port device dummy0 removed [ 458.285413][T12601] syzkaller0: entered promiscuous mode [ 458.285444][T12601] syzkaller0: entered allmulticast mode [ 458.949777][T12629] syz.4.2097 (12629) used greatest stack depth: 17424 bytes left [ 459.221720][T12641] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 459.326285][T12647] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 459.658284][T12664] netlink: 'syz.6.2114': attribute type 8 has an invalid length. [ 459.658318][T12664] netlink: 'syz.6.2114': attribute type 9 has an invalid length. [ 459.658332][T12664] netlink: 'syz.6.2114': attribute type 10 has an invalid length. [ 459.658347][T12664] netlink: 'syz.6.2114': attribute type 11 has an invalid length. [ 459.658361][T12664] __nla_validate_parse: 3 callbacks suppressed [ 459.658373][T12664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2114'. [ 459.728047][T12667] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2113'. [ 459.768909][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.768930][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.710961][T12700] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 460.772999][T12699] netlink: 'syz.6.2129': attribute type 12 has an invalid length. [ 460.773026][T12699] netlink: 'syz.6.2129': attribute type 29 has an invalid length. [ 460.773038][T12699] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2129'. [ 461.387623][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2132'. [ 461.387661][T12714] netlink: 'syz.6.2132': attribute type 5 has an invalid length. [ 461.387678][T12714] netlink: 'syz.6.2132': attribute type 8 has an invalid length. [ 461.387692][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2132'. [ 461.648919][T12730] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2142'. [ 461.751031][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2143'. [ 462.700431][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2152'. [ 462.700471][T12754] validate_nla: 2 callbacks suppressed [ 462.700484][T12754] netlink: 'syz.3.2152': attribute type 5 has an invalid length. [ 462.700502][T12754] netlink: 'syz.3.2152': attribute type 8 has an invalid length. [ 462.700516][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2152'. [ 462.782804][T12767] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 462.814168][T12765] netlink: 'syz.5.2158': attribute type 12 has an invalid length. [ 462.814193][T12765] netlink: 'syz.5.2158': attribute type 29 has an invalid length. [ 462.814209][T12765] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2158'. [ 463.773885][T12807] netlink: 'syz.4.2174': attribute type 1 has an invalid length. [ 463.852178][T12807] bond3: entered promiscuous mode [ 463.856871][T12807] 8021q: adding VLAN 0 to HW filter on device bond3 [ 463.933448][T12808] netlink: 'syz.6.2172': attribute type 5 has an invalid length. [ 463.933476][T12808] netlink: 'syz.6.2172': attribute type 8 has an invalid length. [ 464.163549][T12818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.163585][T12818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.212261][T12818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.212292][T12818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.537920][T12835] tipc: Enabled bearer , priority 0 [ 464.676101][T12834] tipc: Disabling bearer [ 464.816276][T12851] netlink: 'syz.6.2190': attribute type 1 has an invalid length. [ 464.879569][T12843] bridge0: entered promiscuous mode [ 464.919250][T12853] __nla_validate_parse: 7 callbacks suppressed [ 464.919272][T12853] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2190'. [ 465.010346][T12851] bond1: entered promiscuous mode [ 465.011093][T12851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 465.023378][T12852] syz_tun: entered allmulticast mode [ 465.262062][T12852] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2188'. [ 466.090186][T12884] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2197'. [ 466.398504][T12897] netlink: 'syz.1.2204': attribute type 1 has an invalid length. [ 466.474243][T12903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2204'. [ 466.502169][T12897] bond1: entered promiscuous mode [ 466.513735][T12897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 466.514729][T12900] tipc: Enabled bearer , priority 0 [ 466.879339][T12892] tipc: Disabling bearer [ 468.980499][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2236'. [ 468.980539][T12976] netlink: 'syz.4.2236': attribute type 5 has an invalid length. [ 468.980557][T12976] netlink: 'syz.4.2236': attribute type 8 has an invalid length. [ 468.980571][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2236'. [ 470.250900][T13024] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2258'. [ 470.757250][T13041] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2265'. [ 470.793933][T13042] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2262'. [ 471.813265][T13072] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2277'. [ 472.403567][T13100] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2285'. [ 472.465230][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.465255][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.931883][T13117] netlink: 'syz.6.2294': attribute type 10 has an invalid length. [ 472.997307][T13121] netlink: 'syz.6.2294': attribute type 10 has an invalid length. [ 473.119159][T13117] team0: Port device dummy0 added [ 473.194696][T13121] team0: Port device dummy0 removed [ 473.271009][T13121] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 474.781603][ T5816] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 475.097846][T13189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2321'. [ 476.048553][T13205] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2327'. [ 476.288114][T13224] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2336'. [ 477.061837][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2344'. [ 477.062299][T13242] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2344'. [ 477.157176][T13247] netlink: zone id is out of range [ 477.157192][T13247] netlink: zone id is out of range [ 477.275907][T13251] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2348'. [ 477.629728][T13263] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2354'. [ 477.868621][T13283] netlink: zone id is out of range [ 477.868640][T13283] netlink: zone id is out of range [ 477.911153][T13278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2359'. [ 477.911742][T13278] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2359'. [ 477.998103][T13287] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2362'. [ 478.850744][ T5816] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 478.979184][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2374'. [ 478.990741][T13313] netlink: zone id is out of range [ 478.990763][T13313] netlink: zone id is out of range [ 479.145350][T13318] netlink: 'syz.5.2377': attribute type 1 has an invalid length. [ 479.333466][ T5875] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 479.561161][ T5875] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 479.561212][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 479.561241][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 479.561266][ T5875] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 479.561333][ T5875] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 479.561359][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.629870][ T5875] usb 7-1: config 0 descriptor?? [ 480.230001][ T5875] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 480.305539][ T5875] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 480.446571][T13343] netlink: zone id is out of range [ 480.446585][T13343] netlink: zone id is out of range [ 480.446593][T13343] netlink: zone id is out of range [ 480.567202][T13349] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 481.773771][T13376] __nla_validate_parse: 5 callbacks suppressed [ 481.773796][T13376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2399'. [ 481.774235][T13376] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2399'. [ 481.839598][T13378] netlink: zone id is out of range [ 481.893091][ T980] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 482.042782][ T980] usb 7-1: device descriptor read/64, error -32 [ 482.302994][ T980] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 482.328522][T13392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2405'. [ 482.452867][ T980] usb 7-1: device descriptor read/64, error -32 [ 482.713572][ T980] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 482.748901][ T980] usb 7-1: device descriptor read/8, error -32 [ 482.910953][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2411'. [ 482.968758][T13404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2411'. [ 483.354943][T13415] tipc: Enabled bearer , priority 0 [ 483.358138][T13415] syzkaller0: entered promiscuous mode [ 483.358166][T13415] syzkaller0: entered allmulticast mode [ 483.417250][T13415] tipc: Resetting bearer [ 483.459899][T13414] tipc: Resetting bearer [ 483.625728][T13414] tipc: Disabling bearer [ 483.704063][ T5791] usb 7-1: USB disconnect, device number 2 [ 484.015529][T13436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2425'. [ 484.584770][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2427'. [ 484.658060][T13453] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2427'. [ 485.810737][T13482] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2436'. [ 486.268834][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2442'. [ 487.243783][ T5117] Bluetooth: hci1: link tx timeout [ 487.243806][ T5117] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 487.657851][T13539] macsec2: entered promiscuous mode [ 487.657883][T13539] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 487.658122][T13539] macsec2: entered allmulticast mode [ 487.658140][T13539] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 488.367371][ T62] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 488.642633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 488.762643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 488.763496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 488.764669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 488.765850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 488.767010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 489.152962][ T62] Bluetooth: hci5: command 0x0406 tx timeout [ 489.252642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 489.779078][ T62] Bluetooth: hci1: command 0x0405 tx timeout [ 489.962680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 489.962745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 489.962840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 492.211671][T13585] tipc: Enabled bearer , priority 0 [ 492.441499][T13593] syzkaller0: entered promiscuous mode [ 492.480158][T13593] syzkaller0: entered allmulticast mode [ 493.285277][ T5890] tipc: Node number set to 2886997039 [ 495.334099][T13593] tipc: Resetting bearer [ 495.605431][T13593] tipc: Disabling bearer [ 495.754605][T13604] __nla_validate_parse: 1 callbacks suppressed [ 495.754627][T13604] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2486'. [ 495.938013][ T5117] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 496.559180][T13641] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2495'. [ 496.584071][T13639] tipc: Enabled bearer , priority 0 [ 496.588620][T13639] syzkaller0: entered promiscuous mode [ 496.588654][T13639] syzkaller0: entered allmulticast mode [ 496.657808][T13639] tipc: Resetting bearer [ 496.693009][T13636] tipc: Resetting bearer [ 496.720291][T13645] netlink: 'syz.5.2499': attribute type 10 has an invalid length. [ 496.776291][T13653] netlink: 'syz.5.2499': attribute type 10 has an invalid length. [ 496.901099][T13636] tipc: Disabling bearer [ 497.509825][T13645] team0: Port device dummy0 added [ 497.628556][T13653] team0: Port device dummy0 removed [ 497.733966][T13653] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 498.073783][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2503'. [ 498.358283][T13673] tipc: Enabled bearer , priority 0 [ 498.359208][T13673] syzkaller0: entered promiscuous mode [ 498.359234][T13673] syzkaller0: entered allmulticast mode [ 498.373527][T13673] tipc: Resetting bearer [ 498.414723][T13672] tipc: Resetting bearer [ 498.460633][T13680] netlink: 'syz.1.2510': attribute type 1 has an invalid length. [ 498.584590][T13672] tipc: Disabling bearer [ 498.649682][T13682] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2511'. [ 498.935455][T13696] tipc: Enabled bearer , priority 0 [ 498.997922][T13692] tipc: Resetting bearer [ 499.006838][T13699] syzkaller0: entered promiscuous mode [ 499.006874][T13699] syzkaller0: entered allmulticast mode [ 499.032984][T13691] tipc: Resetting bearer [ 499.226971][T13691] tipc: Disabling bearer [ 499.363709][T13715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2519'. [ 499.702919][T13730] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2523'. [ 500.117074][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2533'. [ 500.127968][T13749] netlink: 'syz.5.2532': attribute type 13 has an invalid length. [ 500.127999][T13749] netlink: 'syz.5.2532': attribute type 17 has an invalid length. [ 500.128016][T13749] netlink: 'syz.5.2532': attribute type 27 has an invalid length. [ 500.155377][T13748] netlink: 'syz.6.2534': attribute type 10 has an invalid length. [ 500.211851][T13752] netlink: 'syz.6.2534': attribute type 10 has an invalid length. [ 500.217740][T13748] bond0: (slave dummy0): Releasing backup interface [ 500.238919][T13741] nbd0: detected capacity change from 0 to 8589934655 [ 500.251566][ T5117] block nbd0: Receive control failed (result -32) [ 500.303420][T13748] team0: Port device dummy0 added [ 500.362071][T13752] team0: Port device dummy0 removed [ 500.388635][T13752] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 501.155373][T13778] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2545'. [ 501.331583][T13784] netlink: 'syz.3.2547': attribute type 10 has an invalid length. [ 501.354144][T13784] team0: Port device dummy0 added [ 501.403953][T13784] netlink: 'syz.3.2547': attribute type 10 has an invalid length. [ 501.563978][T13784] team0: Port device dummy0 removed [ 502.084410][T13801] netlink: 360 bytes leftover after parsing attributes in process `syz.4.2553'. [ 502.691526][T13810] netlink: 'syz.6.2555': attribute type 13 has an invalid length. [ 502.691553][T13810] netlink: 'syz.6.2555': attribute type 17 has an invalid length. [ 502.691569][T13810] netlink: 'syz.6.2555': attribute type 27 has an invalid length. [ 505.972919][ T5791] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 506.154589][ T5791] usb 7-1: Using ep0 maxpacket: 32 [ 506.189008][ T5791] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.189040][ T5791] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 506.189083][ T5791] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 506.189108][ T5791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.220585][ T5791] usb 7-1: config 0 descriptor?? [ 507.064719][T13858] netlink: 'syz.5.2569': attribute type 13 has an invalid length. [ 507.064744][T13858] netlink: 'syz.5.2569': attribute type 17 has an invalid length. [ 507.064898][T13858] netlink: 'syz.5.2569': attribute type 27 has an invalid length. [ 507.551279][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.739386][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.916729][ C0] vkms_vblank_simulate: vblank timer overrun [ 508.246596][T13876] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2574'. [ 508.246630][T13876] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2574'. [ 509.241699][ T5875] usb 7-1: USB disconnect, device number 3 [ 509.628856][T13905] fuseblk: Bad value for 'fd' [ 509.796394][T13908] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2585'. [ 510.193472][T13903] netlink: 'syz.1.2583': attribute type 12 has an invalid length. [ 510.193871][T13900] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2584'. [ 511.997517][T13940] fuseblk: Bad value for 'fd' [ 512.008332][T13941] netlink: 'syz.3.2594': attribute type 13 has an invalid length. [ 512.008366][T13941] netlink: 'syz.3.2594': attribute type 17 has an invalid length. [ 512.008383][T13941] netlink: 'syz.3.2594': attribute type 27 has an invalid length. [ 513.463380][T13961] netlink: 'syz.3.2600': attribute type 12 has an invalid length. [ 514.295159][T13967] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2601'. [ 515.529785][T13989] netlink: 'syz.3.2610': attribute type 13 has an invalid length. [ 515.529810][T13989] netlink: 'syz.3.2610': attribute type 17 has an invalid length. [ 515.529825][T13989] netlink: 'syz.3.2610': attribute type 27 has an invalid length. [ 516.603038][T14006] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2616'. [ 516.699030][T14013] tipc: Enabled bearer , priority 0 [ 516.756119][T14009] tipc: Resetting bearer [ 518.157129][ T5875] tipc: Node number set to 4177706241 [ 518.380207][T14008] tipc: Disabling bearer [ 518.482848][T14025] netlink: 'syz.1.2621': attribute type 12 has an invalid length. [ 518.734684][T14045] netlink: 'syz.3.2628': attribute type 13 has an invalid length. [ 518.734709][T14045] netlink: 'syz.3.2628': attribute type 17 has an invalid length. [ 518.734724][T14045] netlink: 'syz.3.2628': attribute type 27 has an invalid length. [ 520.264968][T14063] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2633'. [ 520.657606][T14062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2634'. [ 521.014428][T14076] netlink: 'syz.5.2637': attribute type 12 has an invalid length. [ 522.258392][T14069] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.258425][T14069] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 522.473392][T14087] tipc: Enabled bearer , priority 0 [ 522.498938][T14088] tipc: Resetting bearer [ 522.588396][T14083] tipc: Disabling bearer [ 522.964097][T14069] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.964128][T14069] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 523.234859][T14117] netlink: 'syz.4.2646': attribute type 13 has an invalid length. [ 523.234883][T14117] netlink: 'syz.4.2646': attribute type 17 has an invalid length. [ 523.234905][T14117] netlink: 'syz.4.2646': attribute type 27 has an invalid length. [ 523.369468][T14069] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.369501][T14069] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 523.729430][T14069] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.729461][T14069] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 523.803152][T14123] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2649'. [ 525.332893][T14145] netlink: 'syz.1.2651': attribute type 12 has an invalid length. [ 526.194021][T14158] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2662'. [ 526.231856][T14162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2664'. [ 526.232165][T14162] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2664'. [ 526.402929][T14172] netlink: 'syz.5.2665': attribute type 13 has an invalid length. [ 526.402955][T14172] netlink: 'syz.5.2665': attribute type 17 has an invalid length. [ 526.402969][T14172] netlink: 'syz.5.2665': attribute type 27 has an invalid length. [ 526.560550][T14178] net_ratelimit: 2 callbacks suppressed [ 526.560576][T14178] openvswitch: netlink: Flow key attr not present in new flow. [ 526.797782][T14187] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2673'. [ 527.329946][T14198] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2679'. [ 527.422802][T14198] bridge0: entered promiscuous mode [ 527.453994][T14198] syz_tun: entered allmulticast mode [ 527.565379][T14203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2682'. [ 527.749425][T14199] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2679'. [ 527.828378][T14205] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2680'. [ 528.253002][ T5791] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 528.392851][T14220] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2685'. [ 528.402745][ T5791] usb 2-1: Using ep0 maxpacket: 32 [ 528.409832][ T5791] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 528.415335][ T5791] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 528.415375][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 528.415399][ T5791] usb 2-1: Product: syz [ 528.415416][ T5791] usb 2-1: Manufacturer: syz [ 528.415434][ T5791] usb 2-1: SerialNumber: syz [ 528.656046][ T5791] usb 2-1: config 0 descriptor?? [ 528.698123][T14215] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 528.717892][ T5791] hub 2-1:0.0: bad descriptor, ignoring hub [ 528.717940][ T5791] hub 2-1:0.0: probe with driver hub failed with error -5 [ 529.043077][ T6017] usb 2-1: USB disconnect, device number 2 [ 533.153477][ T5117] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 533.352838][ T6017] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 533.525229][ T6017] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 533.525277][ T6017] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 533.525306][ T6017] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 533.525332][ T6017] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 533.525382][ T6017] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 533.525408][ T6017] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.555803][ T6017] usb 7-1: config 0 descriptor?? [ 534.712249][ T6017] usbhid 7-1:0.0: can't add hid device: -71 [ 534.712391][ T6017] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 534.744109][ T6017] usb 7-1: USB disconnect, device number 4 [ 537.694733][ T26] ================================================================== [ 537.694751][ T26] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190 [ 537.694800][ T26] Read of size 8 at addr ffffc90006481090 by task irq_work/1/26 [ 537.694820][ T26] [ 537.694843][ T26] CPU: 1 UID: 0 PID: 26 Comm: irq_work/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 537.694867][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 537.694890][ T26] Call Trace: [ 537.694902][ T26] [ 537.694913][ T26] dump_stack_lvl+0x189/0x250 [ 537.694947][ T26] ? run_irq_workd+0x116/0x190 [ 537.694979][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.695011][ T26] ? __pfx__printk+0x10/0x10 [ 537.695040][ T26] ? __virt_addr_valid+0xdc/0x5c0 [ 537.695073][ T26] ? __virt_addr_valid+0xdc/0x5c0 [ 537.695106][ T26] print_report+0xca/0x240 [ 537.695136][ T26] ? run_irq_workd+0x116/0x190 [ 537.695165][ T26] kasan_report+0x118/0x150 [ 537.695198][ T26] ? run_irq_workd+0x116/0x190 [ 537.695232][ T26] run_irq_workd+0x116/0x190 [ 537.695262][ T26] ? __pfx_run_irq_workd+0x10/0x10 [ 537.695292][ T26] ? schedule+0x91/0x360 [ 537.695319][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 537.695347][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 537.695373][ T26] smpboot_thread_fn+0x542/0xa60 [ 537.695401][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 537.695433][ T26] kthread+0x711/0x8a0 [ 537.695467][ T26] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 537.695502][ T26] ? __pfx_kthread+0x10/0x10 [ 537.695532][ T26] ? rt_spin_unlock+0x150/0x200 [ 537.695557][ T26] ? rt_spin_unlock+0x161/0x200 [ 537.695577][ T26] ? __pfx_kthread+0x10/0x10 [ 537.695610][ T26] ret_from_fork+0x4bc/0x870 [ 537.695637][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 537.695667][ T26] ? __switch_to_asm+0x39/0x70 [ 537.695688][ T26] ? __switch_to_asm+0x33/0x70 [ 537.695710][ T26] ? __pfx_kthread+0x10/0x10 [ 537.695742][ T26] ret_from_fork_asm+0x1a/0x30 [ 537.695774][ T26] [ 537.695782][ T26] [ 537.695788][ T26] The buggy address belongs to a vmalloc virtual mapping [ 537.695816][ T26] Memory state around the buggy address: [ 537.695829][ T26] ffffc90006480f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 537.695845][ T26] ffffc90006481000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 537.695860][ T26] >ffffc90006481080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 537.695875][ T26] ^ [ 537.695887][ T26] ffffc90006481100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 537.695901][ T26] ffffc90006481180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 537.695912][ T26] ================================================================== [ 537.695937][ T26] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 537.695952][ T26] CPU: 1 UID: 0 PID: 26 Comm: irq_work/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 537.695977][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 537.695991][ T26] Call Trace: [ 537.695998][ T26] [ 537.696007][ T26] dump_stack_lvl+0x99/0x250 [ 537.696041][ T26] ? __asan_memcpy+0x40/0x70 [ 537.696065][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.696098][ T26] ? __pfx__printk+0x10/0x10 [ 537.696131][ T26] vpanic+0x237/0x6d0 [ 537.696151][ T26] ? __pfx_vpanic+0x10/0x10 [ 537.696177][ T26] panic+0xb9/0xc0 [ 537.696197][ T26] ? __pfx_panic+0x10/0x10 [ 537.696216][ T26] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 537.696247][ T26] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 537.696280][ T26] ? run_irq_workd+0x116/0x190 [ 537.696339][ T26] check_panic_on_warn+0x89/0xb0 [ 537.696360][ T26] ? run_irq_workd+0x116/0x190 [ 537.696390][ T26] end_report+0x78/0x160 [ 537.696420][ T26] kasan_report+0x129/0x150 [ 537.696451][ T26] ? run_irq_workd+0x116/0x190 [ 537.696501][ T26] run_irq_workd+0x116/0x190 [ 537.696531][ T26] ? __pfx_run_irq_workd+0x10/0x10 [ 537.696560][ T26] ? schedule+0x91/0x360 [ 537.696586][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 537.696614][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 537.696641][ T26] smpboot_thread_fn+0x542/0xa60 [ 537.696669][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 537.696702][ T26] kthread+0x711/0x8a0 [ 537.696734][ T26] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 537.696762][ T26] ? __pfx_kthread+0x10/0x10 [ 537.696793][ T26] ? rt_spin_unlock+0x150/0x200 [ 537.696817][ T26] ? rt_spin_unlock+0x161/0x200 [ 537.696837][ T26] ? __pfx_kthread+0x10/0x10 [ 537.696870][ T26] ret_from_fork+0x4bc/0x870 [ 537.696897][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 537.696927][ T26] ? __switch_to_asm+0x39/0x70 [ 537.696948][ T26] ? __switch_to_asm+0x33/0x70 [ 537.696970][ T26] ? __pfx_kthread+0x10/0x10 [ 537.697002][ T26] ret_from_fork_asm+0x1a/0x30 [ 537.697034][ T26] [ 537.697367][ T26] Kernel Offset: disabled