[ 5.889338][ T1477] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 13.341535][ T24] kauditd_printk_skb: 36 callbacks suppressed [ 13.341547][ T24] audit: type=1400 audit(1652429533.639:72): avc: denied { transition } for pid=1638 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.346002][ T24] audit: type=1400 audit(1652429533.639:73): avc: denied { write } for pid=1638 comm="sh" path="pipe:[14781]" dev="pipefs" ino=14781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 [ 13.917470][ T1639] sshd (1639) used greatest stack depth: 11560 bytes left Warning: Permanently added '10.128.1.42' (ECDSA) to the list of known hosts. 2022/05/13 08:12:19 fuzzer started 2022/05/13 08:12:20 dialing manager at 10.128.0.163:37939 [ 19.798763][ T24] audit: type=1400 audit(1652429540.099:74): avc: denied { mounton } for pid=1805 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.811617][ T1805] cgroup: Unknown subsys name 'net' [ 19.821536][ T24] audit: type=1400 audit(1652429540.099:75): avc: denied { mount } for pid=1805 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.848812][ T24] audit: type=1400 audit(1652429540.129:76): avc: denied { unmount } for pid=1805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.978618][ T1805] cgroup: Unknown subsys name 'rlimit' 2022/05/13 08:12:20 syscalls: 2727 2022/05/13 08:12:20 code coverage: enabled 2022/05/13 08:12:20 comparison tracing: enabled 2022/05/13 08:12:20 extra coverage: enabled 2022/05/13 08:12:20 delay kcov mmap: enabled 2022/05/13 08:12:20 setuid sandbox: enabled 2022/05/13 08:12:20 namespace sandbox: enabled 2022/05/13 08:12:20 Android sandbox: enabled 2022/05/13 08:12:20 fault injection: enabled 2022/05/13 08:12:20 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2022/05/13 08:12:20 net packet injection: enabled 2022/05/13 08:12:20 net device setup: enabled 2022/05/13 08:12:20 concurrency sanitizer: enabled 2022/05/13 08:12:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/05/13 08:12:20 USB emulation: /dev/raw-gadget does not exist 2022/05/13 08:12:20 hci packet injection: /dev/vhci does not exist 2022/05/13 08:12:20 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2022/05/13 08:12:20 802.15.4 emulation: enabled [ 20.078480][ T24] audit: type=1400 audit(1652429540.379:77): avc: denied { mounton } for pid=1805 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.094362][ T1805] syz-executor (1805) used greatest stack depth: 11488 bytes left 2022/05/13 08:12:20 fetching corpus: 0, signal 0/2000 (executing program) [ 20.103254][ T24] audit: type=1400 audit(1652429540.379:78): avc: denied { mount } for pid=1805 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.134403][ T24] audit: type=1400 audit(1652429540.389:79): avc: denied { create } for pid=1805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 20.155037][ T24] audit: type=1400 audit(1652429540.389:80): avc: denied { write } for pid=1805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 2022/05/13 08:12:20 fetching corpus: 28, signal 11400/11400 (executing program) 2022/05/13 08:12:20 fetching corpus: 28, signal 11400/11400 (executing program) 2022/05/13 08:12:20 fetching corpus: 28, signal 11400/11400 (executing program) 2022/05/13 08:12:20 fetching corpus: 28, signal 11400/11400 (executing program) [ 20.175580][ T24] audit: type=1400 audit(1652429540.389:81): avc: denied { read } for pid=1805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 2022/05/13 08:12:21 starting 6 fuzzer processes 08:12:21 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7b}, [@ldst={0x0, 0x0, 0xe001}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x2f) 08:12:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x5, 0x6}]}) 08:12:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x40000000007, 0x8081) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000001140)=0xf1a) 08:12:21 executing program 2: r0 = syz_io_uring_setup(0xfee, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) io_uring_enter(r0, 0x3954, 0x6287, 0x3, &(0x7f0000000100)={[0x81]}, 0x45) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 08:12:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x48}}, 0x0) 08:12:21 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) tee(r1, r0, 0x2, 0xa) [ 21.752139][ T24] audit: type=1400 audit(1652429542.049:82): avc: denied { execmem } for pid=1809 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.811547][ T24] audit: type=1400 audit(1652429542.069:83): avc: denied { read } for pid=1814 comm="syz-executor.0" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 22.036243][ T1814] chnl_net:caif_netlink_parms(): no params data found [ 22.119898][ T1817] chnl_net:caif_netlink_parms(): no params data found [ 22.181286][ T1814] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.188365][ T1814] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.195752][ T1814] device bridge_slave_0 entered promiscuous mode [ 22.230777][ T1814] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.238264][ T1814] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.246169][ T1814] device bridge_slave_1 entered promiscuous mode [ 22.256277][ T1831] chnl_net:caif_netlink_parms(): no params data found [ 22.269049][ T1817] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.276299][ T1817] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.285070][ T1817] device bridge_slave_0 entered promiscuous mode [ 22.294129][ T1817] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.301344][ T1817] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.308907][ T1817] device bridge_slave_1 entered promiscuous mode [ 22.342278][ T1817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.352376][ T1814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.369244][ T1817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.379062][ T1814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.439645][ T1817] team0: Port device team_slave_0 added [ 22.449820][ T1814] team0: Port device team_slave_0 added [ 22.469923][ T1828] chnl_net:caif_netlink_parms(): no params data found [ 22.479460][ T1817] team0: Port device team_slave_1 added [ 22.485520][ T1814] team0: Port device team_slave_1 added [ 22.498637][ T1831] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.505660][ T1831] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.513143][ T1831] device bridge_slave_0 entered promiscuous mode [ 22.522391][ T1831] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.529450][ T1831] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.537054][ T1831] device bridge_slave_1 entered promiscuous mode [ 22.547762][ T1834] chnl_net:caif_netlink_parms(): no params data found [ 22.561897][ T1814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.568932][ T1814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.594819][ T1814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.614940][ T1837] chnl_net:caif_netlink_parms(): no params data found [ 22.632443][ T1817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.639415][ T1817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.665376][ T1817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.676401][ T1814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.683350][ T1814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.709998][ T1814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.725877][ T1831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.741386][ T1817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.748472][ T1817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.774439][ T1817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.789472][ T1831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.818263][ T1817] device hsr_slave_0 entered promiscuous mode [ 22.824544][ T1817] device hsr_slave_1 entered promiscuous mode [ 22.854630][ T1831] team0: Port device team_slave_0 added [ 22.873854][ T1814] device hsr_slave_0 entered promiscuous mode [ 22.880364][ T1814] device hsr_slave_1 entered promiscuous mode [ 22.886619][ T1814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 22.894181][ T1814] Cannot create hsr debugfs directory [ 22.904320][ T1831] team0: Port device team_slave_1 added [ 22.921735][ T1828] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.929122][ T1828] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.936528][ T1828] device bridge_slave_0 entered promiscuous mode [ 22.943589][ T1828] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.950663][ T1828] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.958359][ T1828] device bridge_slave_1 entered promiscuous mode [ 22.972263][ T1834] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.979344][ T1834] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.987953][ T1834] device bridge_slave_0 entered promiscuous mode [ 23.009553][ T1837] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.016577][ T1837] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.024211][ T1837] device bridge_slave_0 entered promiscuous mode [ 23.031040][ T1834] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.038295][ T1834] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.045737][ T1834] device bridge_slave_1 entered promiscuous mode [ 23.060602][ T1831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.067573][ T1831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.093484][ T1831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.104270][ T1837] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.111343][ T1837] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.118984][ T1837] device bridge_slave_1 entered promiscuous mode [ 23.134797][ T1828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.151817][ T1831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.158784][ T1831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.184780][ T1831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.209770][ T1828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.222076][ T1837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.233754][ T1834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.251816][ T1828] team0: Port device team_slave_0 added [ 23.258208][ T1837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.273917][ T1834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.293248][ T1828] team0: Port device team_slave_1 added [ 23.315635][ T1831] device hsr_slave_0 entered promiscuous mode [ 23.322051][ T1831] device hsr_slave_1 entered promiscuous mode [ 23.328638][ T1831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.336176][ T1831] Cannot create hsr debugfs directory [ 23.354108][ T1837] team0: Port device team_slave_0 added [ 23.374215][ T1828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.381200][ T1828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.407121][ T1828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.419987][ T1828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.426971][ T1828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.452992][ T1828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.464185][ T1837] team0: Port device team_slave_1 added [ 23.470494][ T1834] team0: Port device team_slave_0 added [ 23.491523][ T1834] team0: Port device team_slave_1 added [ 23.511631][ T1837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.518586][ T1837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.544708][ T1837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.555548][ T1814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 23.571369][ T1828] device hsr_slave_0 entered promiscuous mode [ 23.578609][ T1828] device hsr_slave_1 entered promiscuous mode [ 23.584949][ T1828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.592635][ T1828] Cannot create hsr debugfs directory [ 23.600127][ T1837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.607082][ T1837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.633025][ T1837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.646171][ T1814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 23.668686][ T1814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 23.676973][ T1834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.683991][ T1834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.709938][ T1834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.723336][ T1834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.730316][ T1834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.756554][ T1834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.779513][ T1814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 23.795034][ T1837] device hsr_slave_0 entered promiscuous mode [ 23.801718][ T1837] device hsr_slave_1 entered promiscuous mode [ 23.807977][ T1837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.815496][ T1837] Cannot create hsr debugfs directory [ 23.824401][ T1817] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 23.838630][ T1834] device hsr_slave_0 entered promiscuous mode [ 23.845192][ T1834] device hsr_slave_1 entered promiscuous mode [ 23.851549][ T1834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.859114][ T1834] Cannot create hsr debugfs directory [ 23.869657][ T1817] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 23.878219][ T1817] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 23.887166][ T1817] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 23.950892][ T1831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 23.969591][ T1831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 23.977951][ T1831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 23.994666][ T1831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.022963][ T1828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.032564][ T1828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.057759][ T1817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.066546][ T1828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.077133][ T1828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.097969][ T1817] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.109406][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.116973][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.132895][ T1834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.142342][ T1814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.159938][ T1834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.169082][ T1834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.181102][ T1834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.190483][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.198939][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.207332][ T1902] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.214394][ T1902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.222310][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.230840][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.239123][ T1902] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.246132][ T1902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.253915][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 24.262476][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 24.271206][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 24.279607][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 24.288271][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 24.296716][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 24.305188][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.313442][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.326614][ T1837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.336480][ T1837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.345111][ T1837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.353462][ T1837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.369022][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.376878][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 24.388602][ T1814] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.411510][ T1831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.419397][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.427017][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.435137][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.443338][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.469199][ T1817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 24.483994][ T1831] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.491307][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.500037][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.508415][ T1899] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.515530][ T1899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.523544][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.532010][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.540564][ T1899] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.547660][ T1899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.555320][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 24.564077][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 24.572822][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 24.581475][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 24.589905][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 24.598348][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 24.606709][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.614498][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.631861][ T1814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.642464][ T1814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.659453][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.667930][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 24.678964][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.687084][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.695448][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.703487][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.711753][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 24.733749][ T1817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.746210][ T1828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.758859][ T1834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.769728][ T1834] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.778792][ T1907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.787027][ T1907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.796331][ T1907] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.803388][ T1907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.811272][ T1907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.819816][ T1907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.828355][ T1907] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.835372][ T1907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.843195][ T1907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 24.852087][ T1907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 24.859580][ T1907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 24.866916][ T1907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 24.874538][ T1907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 24.881950][ T1907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.889654][ T1907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.897150][ T1907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 24.909858][ T1828] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.922738][ T1814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.936992][ T1837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.945599][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.953711][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.961692][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.969211][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.977740][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.986248][ T1909] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.993306][ T1909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.001013][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.009545][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.017834][ T1909] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.024850][ T1909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.044717][ T1831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.055137][ T1831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.074341][ T1837] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.081504][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.089848][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 25.098726][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.107501][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.115796][ T1909] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.122835][ T1909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.130426][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 25.139075][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.147522][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.155729][ T1909] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.162761][ T1909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.170469][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 25.178828][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 25.187410][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 25.196223][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 25.204792][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 25.213331][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 25.221753][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 25.230219][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.238414][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.246626][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.254868][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.263046][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.270648][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.278232][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 25.286432][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 25.294839][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.303275][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.311505][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.319702][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.331328][ T1834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 25.351874][ T1828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.362249][ T1828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.373900][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.381824][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 25.390145][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 25.397968][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 25.405670][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 25.414206][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 25.422480][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 25.430931][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.439419][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.447780][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.454834][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.462559][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.471187][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.479404][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.486426][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.494131][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 25.502823][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 25.511445][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 25.520017][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 25.528746][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 25.537257][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 25.545743][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.553911][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.562266][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.570568][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.579232][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 25.586934][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.595094][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 25.602853][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 25.612210][ T1907] ================================================================== [ 25.613661][ T1831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.620293][ T1907] BUG: KCSAN: data-race in prandom_seed / prandom_u32 [ 25.633799][ T1907] [ 25.634980][ T1834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.636142][ T1907] read to 0xffff888237c28850 of 8 bytes by task 1831 on cpu 1: [ 25.650507][ T1907] prandom_seed+0xd3/0x270 [ 25.654608][ T1828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.654928][ T1907] __inet_insert_ifa+0x3a6/0x600 [ 25.666588][ T1907] inet_rtm_newaddr+0x854/0xb40 [ 25.671448][ T1907] rtnetlink_rcv_msg+0x74f/0x7e0 [ 25.676470][ T1907] netlink_rcv_skb+0x13e/0x240 [ 25.681233][ T1907] rtnetlink_rcv+0x18/0x20 [ 25.685648][ T1907] netlink_unicast+0x58a/0x660 [ 25.690414][ T1907] netlink_sendmsg+0x661/0x750 [ 25.695183][ T1907] __sys_sendto+0x21e/0x2c0 [ 25.699687][ T1907] __x64_sys_sendto+0x74/0x90 [ 25.704362][ T1907] do_syscall_64+0x2b/0x70 [ 25.708778][ T1907] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 25.714679][ T1907] [ 25.717001][ T1907] write to 0xffff888237c28850 of 8 bytes by task 1907 on cpu 0: [ 25.724622][ T1907] prandom_u32+0x11f/0x190 [ 25.729048][ T1907] mld_ifc_work+0x6dd/0x800 [ 25.733565][ T1907] process_one_work+0x3d3/0x720 [ 25.738363][ T1814] device veth0_vlan entered promiscuous mode [ 25.738414][ T1907] worker_thread+0x618/0xa70 [ 25.746848][ T1814] device veth1_vlan entered promiscuous mode [ 25.748947][ T1907] kthread+0x1a9/0x1e0 [ 25.748965][ T1907] ret_from_fork+0x1f/0x30 [ 25.763458][ T1907] [ 25.764315][ T1814] device veth0_macvtap entered promiscuous mode [ 25.765769][ T1907] value changed: 0xfe0427de898e68ad -> 0xe5b770e1b07c06a9 [ 25.776286][ T1814] device veth1_macvtap entered promiscuous mode [ 25.779066][ T1907] [ 25.779070][ T1907] Reported by Kernel Concurrency Sanitizer on: [ 25.779075][ T1907] CPU: 0 PID: 1907 Comm: kworker/0:5 Not tainted 5.18.0-rc6-syzkaller-00085-gf3f19f939c11-dirty #0 [ 25.779096][ T1907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 25.779107][ T1907] Workqueue: mld mld_ifc_work [ 25.798331][ T1814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.805096][ T1907] [ 25.805101][ T1907] ================================================================== [ 25.830850][ T1814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.844909][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 25.853467][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 25.862504][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 25.871425][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 25.878975][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 25.887323][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 25.896544][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.904643][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.913725][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.921845][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.930955][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 25.938303][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 25.945651][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.955278][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.963843][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.972884][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.981182][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 25.989958][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 25.998012][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.006203][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.015260][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.023066][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.032406][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.040832][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.050252][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.058693][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.067094][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.078169][ T1837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 26.094399][ T1814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.103243][ T1814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.112025][ T1814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.120847][ T1814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.131240][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.139195][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.146996][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 26.165720][ T1837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.185269][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 26.195272][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 26.219984][ T1817] device veth0_vlan entered promiscuous mode [ 26.240753][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 26.240766][ T24] audit: type=1400 audit(1652429546.539:90): avc: denied { mounton } for pid=1814 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 26.271778][ T1907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.280753][ T1907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.293659][ T1907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.303369][ T1907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.312159][ T1907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.320772][ T1907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.330070][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.338934][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.347841][ T1817] device veth1_vlan entered promiscuous mode [ 26.358480][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 26.366568][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.382196][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.405071][ T1817] device veth0_macvtap entered promiscuous mode 08:12:26 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7b}, [@ldst={0x0, 0x0, 0xe001}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x2f) [ 26.412585][ T24] audit: type=1400 audit(1652429546.709:91): avc: denied { read write } for pid=1814 comm="syz-executor.0" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.421652][ T1817] device veth1_macvtap entered promiscuous mode 08:12:26 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7b}, [@ldst={0x0, 0x0, 0xe001}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x2f) 08:12:26 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7b}, [@ldst={0x0, 0x0, 0xe001}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x2f) 08:12:26 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0xd7) r1 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/3, 0x3}], 0x3}}], 0x1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="4c0000001000fff1fefefd956f76d5b724a6008000000000000000683440150024001b0000000000000000593ab700000000043d51d7b57ba83c7c9d6fa2613b6a0840000063158809079881", 0x4c}], 0x1}, 0x0) [ 26.460659][ T24] audit: type=1400 audit(1652429546.709:92): avc: denied { open } for pid=1814 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.485001][ T24] audit: type=1400 audit(1652429546.709:93): avc: denied { ioctl } for pid=1814 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.510593][ T24] audit: type=1400 audit(1652429546.739:94): avc: denied { prog_load } for pid=1980 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.529886][ T24] audit: type=1400 audit(1652429546.739:95): avc: denied { bpf } for pid=1980 comm="syz-executor.0" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 26.550864][ T24] audit: type=1400 audit(1652429546.739:96): avc: denied { perfmon } for pid=1980 comm="syz-executor.0" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 26.571948][ T24] audit: type=1400 audit(1652429546.839:97): avc: denied { create } for pid=1992 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.591928][ T24] audit: type=1400 audit(1652429546.839:98): avc: denied { read } for pid=1992 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.593238][ T1994] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 26.612350][ T24] audit: type=1400 audit(1652429546.889:99): avc: denied { setopt } for pid=1992 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.619781][ T1994] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 26.652618][ T1994] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 26.662747][ T1994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 26.670560][ T1994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 26.690152][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.700757][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.709852][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 08:12:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0xd7) r1 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/3, 0x3}], 0x3}}], 0x1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="4c0000001000fff1fefefd956f76d5b724a6008000000000000000683440150024001b0000000000000000593ab700000000043d51d7b57ba83c7c9d6fa2613b6a0840000063158809079881", 0x4c}], 0x1}, 0x0) [ 26.725613][ T1834] device veth0_vlan entered promiscuous mode [ 26.735950][ T1994] syz-executor.0 (1994) used greatest stack depth: 11480 bytes left [ 26.754187][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 26.762348][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.770780][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.786184][ T1831] device veth0_vlan entered promiscuous mode [ 26.799616][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.807349][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.815104][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.823352][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.835326][ T1828] device veth0_vlan entered promiscuous mode [ 26.842010][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.850010][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.857755][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.866066][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.874828][ T1817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 26.885367][ T1817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.896482][ T1817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.905566][ T1834] device veth1_vlan entered promiscuous mode [ 26.912741][ T2004] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 26.920978][ T2004] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 26.933161][ T2004] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 26.943979][ T2004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 26.951688][ T2004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 26.971097][ T1831] device veth1_vlan entered promiscuous mode [ 26.981254][ T1828] device veth1_vlan entered promiscuous mode [ 26.990909][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 26.999167][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.006965][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.014745][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.022650][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 08:12:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0xd7) r1 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/3, 0x3}], 0x3}}], 0x1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="4c0000001000fff1fefefd956f76d5b724a6008000000000000000683440150024001b0000000000000000593ab700000000043d51d7b57ba83c7c9d6fa2613b6a0840000063158809079881", 0x4c}], 0x1}, 0x0) [ 27.030626][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.039212][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.048656][ T1817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 27.059265][ T1817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.070914][ T1817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.085179][ T1817] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.093940][ T1817] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.102879][ T1817] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.111624][ T1817] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.126795][ T1828] device veth0_macvtap entered promiscuous mode [ 27.142774][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.151260][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.159352][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.167265][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.176010][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.184696][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.193406][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.216172][ T1828] device veth1_macvtap entered promiscuous mode [ 27.223275][ T2009] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 27.231497][ T2009] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 27.244181][ T2009] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 27.255799][ T2009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.263281][ T2009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.287329][ T1831] device veth0_macvtap entered promiscuous mode 08:12:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0xd7) r1 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/3, 0x3}], 0x3}}], 0x1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="4c0000001000fff1fefefd956f76d5b724a6008000000000000000683440150024001b0000000000000000593ab700000000043d51d7b57ba83c7c9d6fa2613b6a0840000063158809079881", 0x4c}], 0x1}, 0x0) [ 27.298661][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.306485][ T2009] syz-executor.0 (2009) used greatest stack depth: 11448 bytes left [ 27.306657][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.322891][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.331680][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.340625][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.349434][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.367309][ T1834] device veth0_macvtap entered promiscuous mode [ 27.376001][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.384376][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.393051][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.405048][ T1831] device veth1_macvtap entered promiscuous mode [ 27.414652][ T1834] device veth1_macvtap entered promiscuous mode [ 27.422356][ T2016] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 27.430591][ T2016] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 27.444212][ T2016] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 27.454236][ T2016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.461840][ T2016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.486383][ T1828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 27.496834][ T1828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.506683][ T1828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 27.517111][ T1828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.529695][ T1828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.537004][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.545206][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.553420][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.561786][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.570197][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.584887][ T1831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 27.595353][ T1831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.605164][ T1831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 27.615618][ T1831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.625443][ T1831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 27.635909][ T1831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.647077][ T1831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.659308][ T1834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 27.670018][ T1834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.679982][ T1834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 27.690394][ T1834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.700249][ T1834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 27.710648][ T1834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.720442][ T1834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 27.730862][ T1834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.743173][ T1834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.752030][ T1834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 27.762801][ T1834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.772684][ T1834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 27.783338][ T1834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.794273][ T1834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.804029][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.812607][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.822122][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.830756][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.839677][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.848391][ T1899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.858464][ T1831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 27.869037][ T1831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.878825][ T1831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 27.889219][ T1831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.899020][ T1831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 27.909422][ T1831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.920583][ T1831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.928258][ T1828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 27.938702][ T1828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.948722][ T1828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 27.959313][ T1828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.969212][ T1828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 27.979676][ T1828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.989533][ T1828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 27.999961][ T1828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.012117][ T1828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.020722][ T1834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.029563][ T1834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.038268][ T1834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.046990][ T1834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.061258][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.069885][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.078502][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.087123][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.098020][ T1831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.106708][ T1831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.115606][ T1831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.124359][ T1831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.148972][ T1828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.157735][ T1828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.166450][ T1828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.175191][ T1828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.187866][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.196000][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.206268][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.214010][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.232868][ T1837] device veth0_vlan entered promiscuous mode 08:12:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x5, 0x6}]}) 08:12:28 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0xd7) r1 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/3, 0x3}], 0x3}}], 0x1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="4c0000001000fff1fefefd956f76d5b724a6008000000000000000683440150024001b0000000000000000593ab700000000043d51d7b57ba83c7c9d6fa2613b6a0840000063158809079881", 0x4c}], 0x1}, 0x0) 08:12:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x40000000007, 0x8081) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000001140)=0xf1a) 08:12:28 executing program 2: r0 = syz_io_uring_setup(0xfee, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) io_uring_enter(r0, 0x3954, 0x6287, 0x3, &(0x7f0000000100)={[0x81]}, 0x45) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 28.289466][ T1837] device veth1_vlan entered promiscuous mode [ 28.320130][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.339103][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.360497][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.369177][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.385550][ T1837] device veth0_macvtap entered promiscuous mode [ 28.392882][ T2041] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 28.401162][ T2041] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 28.415779][ T2041] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 28.425816][ T2041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.433221][ T2041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.468627][ T1837] device veth1_macvtap entered promiscuous mode [ 28.480505][ T1837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 28.490985][ T1837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.500823][ T1837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 28.511290][ T1837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.521250][ T1837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 28.531672][ T1837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.541493][ T1837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 28.552008][ T1837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.561954][ T1837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 28.572366][ T1837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.588619][ T1837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.596660][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.604819][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.612903][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.621389][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.639774][ T1837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 28.650418][ T1837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.660323][ T1837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 28.670797][ T1837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.680611][ T1837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 28.691094][ T1837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.700978][ T1837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 28.711418][ T1837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.721247][ T1837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 28.731837][ T1837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.743116][ T1837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.752681][ T1908] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 08:12:29 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) tee(r1, r0, 0x2, 0xa) 08:12:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x48}}, 0x0) 08:12:29 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x40000000007, 0x8081) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000001140)=0xf1a) 08:12:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x5, 0x6}]}) 08:12:29 executing program 2: r0 = syz_io_uring_setup(0xfee, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) io_uring_enter(r0, 0x3954, 0x6287, 0x3, &(0x7f0000000100)={[0x81]}, 0x45) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 08:12:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0xd7) r1 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/3, 0x3}], 0x3}}], 0x1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="4c0000001000fff1fefefd956f76d5b724a6008000000000000000683440150024001b0000000000000000593ab700000000043d51d7b57ba83c7c9d6fa2613b6a0840000063158809079881", 0x4c}], 0x1}, 0x0) [ 28.762130][ T1908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.778838][ T1837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.787618][ T1837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.796290][ T1837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.804971][ T1837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 08:12:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x5, 0x6}]}) 08:12:29 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) tee(r1, r0, 0x2, 0xa) 08:12:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x48}}, 0x0) 08:12:29 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x40000000007, 0x8081) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000001140)=0xf1a) 08:12:29 executing program 2: r0 = syz_io_uring_setup(0xfee, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) io_uring_enter(r0, 0x3954, 0x6287, 0x3, &(0x7f0000000100)={[0x81]}, 0x45) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 08:12:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x48}}, 0x0) 08:12:29 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) tee(r1, r0, 0x2, 0xa) 08:12:29 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) tee(r1, r0, 0x2, 0xa) 08:12:29 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) tee(r1, r0, 0x2, 0xa) 08:12:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x5, 0x6}]}) 08:12:29 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) tee(r1, r0, 0x2, 0xa) [ 28.913223][ T2069] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 28.921443][ T2069] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 08:12:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0xd7) r1 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/3, 0x3}], 0x3}}], 0x1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="4c0000001000fff1fefefd956f76d5b724a6008000000000000000683440150024001b0000000000000000593ab700000000043d51d7b57ba83c7c9d6fa2613b6a0840000063158809079881", 0x4c}], 0x1}, 0x0) 08:12:29 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) tee(r1, r0, 0x2, 0xa) 08:12:29 executing program 4: r0 = syz_io_uring_setup(0xfee, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) io_uring_enter(r0, 0x3954, 0x6287, 0x3, &(0x7f0000000100)={[0x81]}, 0x45) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 08:12:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x5, 0x6}]}) 08:12:29 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) tee(r1, r0, 0x2, 0xa) 08:12:29 executing program 3: r0 = syz_io_uring_setup(0xfee, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) io_uring_enter(r0, 0x3954, 0x6287, 0x3, &(0x7f0000000100)={[0x81]}, 0x45) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 28.976185][ T2069] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 28.989198][ T2069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.996582][ T2069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 08:12:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x5, 0x6}]}) 08:12:29 executing program 4: r0 = syz_io_uring_setup(0xfee, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) io_uring_enter(r0, 0x3954, 0x6287, 0x3, &(0x7f0000000100)={[0x81]}, 0x45) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 08:12:29 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) tee(r1, r0, 0x2, 0xa) 08:12:29 executing program 3: r0 = syz_io_uring_setup(0xfee, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) io_uring_enter(r0, 0x3954, 0x6287, 0x3, &(0x7f0000000100)={[0x81]}, 0x45) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 08:12:29 executing program 2: r0 = syz_io_uring_setup(0xfee, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) io_uring_enter(r0, 0x3954, 0x6287, 0x3, &(0x7f0000000100)={[0x81]}, 0x45) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 08:12:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x40000000007, 0x8081) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000001140)=0xf1a) [ 29.163038][ T2111] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 29.171235][ T2111] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 29.185704][ T2111] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 29.197231][ T2111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.204820][ T2111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 08:12:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x40000000007, 0x8081) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000001140)=0xf1a) 08:12:29 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0xd7) r1 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/3, 0x3}], 0x3}}], 0x1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="4c0000001000fff1fefefd956f76d5b724a6008000000000000000683440150024001b0000000000000000593ab700000000043d51d7b57ba83c7c9d6fa2613b6a0840000063158809079881", 0x4c}], 0x1}, 0x0) 08:12:29 executing program 4: r0 = syz_io_uring_setup(0xfee, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) io_uring_enter(r0, 0x3954, 0x6287, 0x3, &(0x7f0000000100)={[0x81]}, 0x45) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 08:12:29 executing program 3: r0 = syz_io_uring_setup(0xfee, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) io_uring_enter(r0, 0x3954, 0x6287, 0x3, &(0x7f0000000100)={[0x81]}, 0x45) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 08:12:29 executing program 2: r0 = syz_io_uring_setup(0xfee, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) io_uring_enter(r0, 0x3954, 0x6287, 0x3, &(0x7f0000000100)={[0x81]}, 0x45) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 08:12:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0xd7) r1 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/3, 0x3}], 0x3}}], 0x1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="4c0000001000fff1fefefd956f76d5b724a6008000000000000000683440150024001b0000000000000000593ab700000000043d51d7b57ba83c7c9d6fa2613b6a0840000063158809079881", 0x4c}], 0x1}, 0x0) 08:12:29 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0xd7) r1 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/3, 0x3}], 0x3}}], 0x1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="4c0000001000fff1fefefd956f76d5b724a6008000000000000000683440150024001b0000000000000000593ab700000000043d51d7b57ba83c7c9d6fa2613b6a0840000063158809079881", 0x4c}], 0x1}, 0x0) 08:12:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x6, 0x4, &(0x7f0000001200)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x50}]}, &(0x7f0000001240)='GPL\x00', 0x3, 0xe9, &(0x7f0000001280)=""/233, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0), 0x8, 0x10, &(0x7f0000001400), 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001480)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x40) 08:12:29 executing program 2: r0 = syz_io_uring_setup(0xfee, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) io_uring_enter(r0, 0x3954, 0x6287, 0x3, &(0x7f0000000100)={[0x81]}, 0x45) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 08:12:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x40000000007, 0x8081) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000001140)=0xf1a) 08:12:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x6, 0x4, &(0x7f0000001200)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x50}]}, &(0x7f0000001240)='GPL\x00', 0x3, 0xe9, &(0x7f0000001280)=""/233, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0), 0x8, 0x10, &(0x7f0000001400), 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001480)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x40) 08:12:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63d4c0d1629efc0f73eb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) syz_clone(0x72a66000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:12:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x6, 0x4, &(0x7f0000001200)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x50}]}, &(0x7f0000001240)='GPL\x00', 0x3, 0xe9, &(0x7f0000001280)=""/233, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0), 0x8, 0x10, &(0x7f0000001400), 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001480)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x40) [ 29.317626][ T2136] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 29.325816][ T2136] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 29.349991][ T2136] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 29.363134][ T2136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.371377][ T2136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.400554][ T2139] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 29.408767][ T2139] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 08:12:29 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0xd7) r1 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/3, 0x3}], 0x3}}], 0x1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="4c0000001000fff1fefefd956f76d5b724a6008000000000000000683440150024001b0000000000000000593ab700000000043d51d7b57ba83c7c9d6fa2613b6a0840000063158809079881", 0x4c}], 0x1}, 0x0) 08:12:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0xc, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:12:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x6, 0x4, &(0x7f0000001200)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x50}]}, &(0x7f0000001240)='GPL\x00', 0x3, 0xe9, &(0x7f0000001280)=""/233, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0), 0x8, 0x10, &(0x7f0000001400), 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001480)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x40) 08:12:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x8, 0x3, 0x7}) [ 29.426424][ T2136] syz-executor.5 (2136) used greatest stack depth: 11408 bytes left [ 29.430019][ T2139] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 29.451617][ T2139] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.460666][ T2139] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 08:12:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0xd7) r1 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/3, 0x3}], 0x3}}], 0x1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="4c0000001000fff1fefefd956f76d5b724a6008000000000000000683440150024001b0000000000000000593ab700000000043d51d7b57ba83c7c9d6fa2613b6a0840000063158809079881", 0x4c}], 0x1}, 0x0) [ 29.495893][ T2140] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 29.504091][ T2140] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 29.521241][ T2140] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 29.532544][ T2140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.543951][ T2140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 08:12:29 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0xd7) r1 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/3, 0x3}], 0x3}}], 0x1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="4c0000001000fff1fefefd956f76d5b724a6008000000000000000683440150024001b0000000000000000593ab700000000043d51d7b57ba83c7c9d6fa2613b6a0840000063158809079881", 0x4c}], 0x1}, 0x0) 08:12:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0xc, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:12:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x8, 0x3, 0x7}) 08:12:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0xc, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:12:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x8, 0x3, 0x7}) [ 29.567385][ C1] hrtimer: interrupt took 31185 ns [ 29.582643][ T2153] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 29.597010][ T2153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.605103][ T2153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.678687][ T2156] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 29.689800][ T2156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.697290][ T2156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.731004][ T2167] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 29.741057][ T2167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.751613][ T2167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.801232][ T2167] syz-executor.4 (2167) used greatest stack depth: 11384 bytes left 08:12:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0xc, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:12:30 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x8, 0x3, 0x7}) 08:12:30 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0xd7) r1 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/3, 0x3}], 0x3}}], 0x1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="4c0000001000fff1fefefd956f76d5b724a6008000000000000000683440150024001b0000000000000000593ab700000000043d51d7b57ba83c7c9d6fa2613b6a0840000063158809079881", 0x4c}], 0x1}, 0x0) 08:12:30 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0xd7) r1 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/3, 0x3}], 0x3}}], 0x1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="4c0000001000fff1fefefd956f76d5b724a6008000000000000000683440150024001b0000000000000000593ab700000000043d51d7b57ba83c7c9d6fa2613b6a0840000063158809079881", 0x4c}], 0x1}, 0x0) 08:12:30 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x43fb, 0xd7) r1 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/3, 0x3}], 0x3}}], 0x1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="4c0000001000fff1fefefd956f76d5b724a6008000000000000000683440150024001b0000000000000000593ab700000000043d51d7b57ba83c7c9d6fa2613b6a0840000063158809079881", 0x4c}], 0x1}, 0x0) 08:12:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63d4c0d1629efc0f73eb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) syz_clone(0x72a66000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:12:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63d4c0d1629efc0f73eb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) syz_clone(0x72a66000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:12:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63d4c0d1629efc0f73eb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) syz_clone(0x72a66000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 30.120544][ T2185] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 30.132048][ T2185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 30.139934][ T2185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 08:12:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63d4c0d1629efc0f73eb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) syz_clone(0x72a66000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 30.172829][ T2186] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 30.184343][ T2186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 30.192135][ T2186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 08:12:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63d4c0d1629efc0f73eb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) syz_clone(0x72a66000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 30.230776][ T2187] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 30.250938][ T2187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 30.262221][ T2187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 30.273063][ T2186] syz-executor.5 (2186) used greatest stack depth: 11368 bytes left 08:12:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63d4c0d1629efc0f73eb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) syz_clone(0x72a66000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:12:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63d4c0d1629efc0f73eb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) syz_clone(0x72a66000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:12:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63d4c0d1629efc0f73eb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) syz_clone(0x72a66000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:12:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63d4c0d1629efc0f73eb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) syz_clone(0x72a66000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:12:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63d4c0d1629efc0f73eb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) syz_clone(0x72a66000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:12:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63d4c0d1629efc0f73eb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) syz_clone(0x72a66000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:12:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63d4c0d1629efc0f73eb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) syz_clone(0x72a66000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:12:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63d4c0d1629efc0f73eb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) syz_clone(0x72a66000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:12:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63d4c0d1629efc0f73eb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) syz_clone(0x72a66000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:12:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63d4c0d1629efc0f73eb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) syz_clone(0x72a66000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:12:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63d4c0d1629efc0f73eb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) syz_clone(0x72a66000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:12:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63d4c0d1629efc0f73eb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) syz_clone(0x72a66000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:12:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63d4c0d1629efc0f73eb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) syz_clone(0x72a66000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:12:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63d4c0d1629efc0f73eb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) syz_clone(0x72a66000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:12:32 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x8, 0x3, 0x7}) 08:12:32 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0xc, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:12:32 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x8, 0x3, 0x7}) 08:12:32 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0xc, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:12:32 executing program 4: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup3(r0, r1, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r6, {0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r2, {0xf}}}, 0x24}}, 0x0) 08:12:32 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0xc, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:12:32 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r0, r1) 08:12:32 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x8, 0x3, 0x7}) 08:12:32 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r0, r1) 08:12:32 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r0, r1) [ 32.138850][ T24] kauditd_printk_skb: 12 callbacks suppressed [ 32.138863][ T24] audit: type=1400 audit(1652429552.439:112): avc: denied { create } for pid=2248 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.148563][ T2250] __nla_validate_parse: 6 callbacks suppressed [ 32.148642][ T2250] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 08:12:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63d4c0d1629efc0f73eb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) syz_clone(0x72a66000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:12:32 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r0, r1) 08:12:32 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r0, r1) [ 32.204691][ T24] audit: type=1400 audit(1652429552.479:113): avc: denied { setopt } for pid=2248 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.226247][ T24] audit: type=1400 audit(1652429552.479:114): avc: denied { write } for pid=2248 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 08:12:32 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r0, r1) 08:12:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup3(r0, r1, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r6, {0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r2, {0xf}}}, 0x24}}, 0x0) 08:12:32 executing program 4: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:32 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r0, r1) 08:12:32 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r0, r1) 08:12:32 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r0, r1) 08:12:32 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r0, r1) 08:12:32 executing program 0: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup3(r0, r1, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r6, {0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r2, {0xf}}}, 0x24}}, 0x0) [ 32.321612][ T2272] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 32.345076][ T24] audit: type=1400 audit(1652429552.559:115): avc: denied { read } for pid=2248 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.419221][ T2286] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 08:12:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63d4c0d1629efc0f73eb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) syz_clone(0x72a66000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:12:33 executing program 1: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:33 executing program 3: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup3(r0, r1, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r6, {0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r2, {0xf}}}, 0x24}}, 0x0) 08:12:33 executing program 4: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:33 executing program 0: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:33 executing program 5: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) [ 32.697507][ T2292] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 08:12:33 executing program 0: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:33 executing program 3: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:33 executing program 1: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:33 executing program 4: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:33 executing program 5: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:33 executing program 1: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:33 executing program 3: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:33 executing program 4: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:33 executing program 5: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:33 executing program 0: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:33 executing program 2: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:33 executing program 0: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:33 executing program 3: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:33 executing program 4: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:33 executing program 2: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup3(r0, r1, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r6, {0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r2, {0xf}}}, 0x24}}, 0x0) 08:12:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup3(r0, r1, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r6, {0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r2, {0xf}}}, 0x24}}, 0x0) 08:12:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup3(r0, r1, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r6, {0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r2, {0xf}}}, 0x24}}, 0x0) 08:12:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup3(r0, r1, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r6, {0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r2, {0xf}}}, 0x24}}, 0x0) [ 33.284728][ T2353] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 33.295224][ T2354] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 33.321975][ T2359] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:12:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup3(r0, r1, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r6, {0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r2, {0xf}}}, 0x24}}, 0x0) 08:12:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup3(r0, r1, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r6, {0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r2, {0xf}}}, 0x24}}, 0x0) [ 33.350552][ T2363] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 08:12:33 executing program 0: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:33 executing program 4: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:33 executing program 3: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:33 executing program 2: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x10, 0x2, 0x0) dup3(r4, r0, 0x0) 08:12:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup3(r0, r1, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r6, {0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r2, {0xf}}}, 0x24}}, 0x0) 08:12:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup3(r0, r1, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r6, {0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r2, {0xf}}}, 0x24}}, 0x0) [ 33.405738][ T2366] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 33.418834][ T2367] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:12:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup3(r0, r1, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r6, {0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r2, {0xf}}}, 0x24}}, 0x0) 08:12:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup3(r0, r1, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r6, {0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r2, {0xf}}}, 0x24}}, 0x0) 08:12:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup3(r0, r1, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r6, {0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r2, {0xf}}}, 0x24}}, 0x0) 08:12:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup3(r0, r1, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r6, {0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r2, {0xf}}}, 0x24}}, 0x0) 08:12:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup3(r0, r1, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r6, {0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r2, {0xf}}}, 0x24}}, 0x0) 08:12:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400191809004beafd0d8c560284476080ffe0064e200000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 33.560184][ T24] audit: type=1400 audit(1652429553.859:116): avc: denied { create } for pid=2394 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 33.580929][ T24] audit: type=1400 audit(1652429553.859:117): avc: denied { write } for pid=2394 comm="syz-executor.5" path="socket:[18951]" dev="sockfs" ino=18951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 08:12:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400191809004beafd0d8c560284476080ffe0064e200000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 08:12:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400191809004beafd0d8c560284476080ffe0064e200000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 08:12:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup3(r0, r1, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)="8a", 0x1}], 0x1}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r6, {0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r2, {0xf}}}, 0x24}}, 0x0) 08:12:33 executing program 3: r0 = socket(0x1e, 0x4, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4