syzkaller login: [  471.162198][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'.
[  481.298601][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'.
[  481.344479][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'.
[  481.405639][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'.
Warning: Permanently added '[localhost]:54405' (ECDSA) to the list of known hosts.
1970/01/01 00:08:58 fuzzer started
1970/01/01 00:09:11 dialing manager at localhost:34061
[  558.422833][ T2027] cgroup: Unknown subsys name 'net'
[  559.414894][ T2027] cgroup: Unknown subsys name 'rlimit'
1970/01/01 00:09:19 syscalls: 2918
1970/01/01 00:09:19 code coverage: enabled
1970/01/01 00:09:19 comparison tracing: enabled
1970/01/01 00:09:19 extra coverage: enabled
1970/01/01 00:09:19 delay kcov mmap: mmap returned an invalid pointer
1970/01/01 00:09:19 setuid sandbox: enabled
1970/01/01 00:09:19 namespace sandbox: enabled
1970/01/01 00:09:19 Android sandbox: /sys/fs/selinux/policy does not exist
1970/01/01 00:09:19 fault injection: enabled
1970/01/01 00:09:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
1970/01/01 00:09:19 net packet injection: enabled
1970/01/01 00:09:19 net device setup: enabled
1970/01/01 00:09:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
1970/01/01 00:09:19 devlink PCI setup: PCI device 0000:00:10.0 is not available
1970/01/01 00:09:19 NIC VF setup: PCI device 0000:00:11.0 is not available
1970/01/01 00:09:19 USB emulation: enabled
1970/01/01 00:09:19 hci packet injection: /dev/vhci does not exist
1970/01/01 00:09:19 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist
1970/01/01 00:09:19 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist
1970/01/01 00:09:19 fetching corpus: 0, signal 0/2000 (executing program)
1970/01/01 00:09:23 fetching corpus: 50, signal 34938/38186 (executing program)
1970/01/01 00:09:27 fetching corpus: 100, signal 49432/53796 (executing program)
1970/01/01 00:09:31 fetching corpus: 150, signal 56234/61739 (executing program)
1970/01/01 00:09:34 fetching corpus: 199, signal 66397/72707 (executing program)
1970/01/01 00:09:38 fetching corpus: 249, signal 74580/81592 (executing program)
1970/01/01 00:09:40 fetching corpus: 299, signal 78874/86751 (executing program)
1970/01/01 00:09:43 fetching corpus: 349, signal 83859/92476 (executing program)
1970/01/01 00:09:46 fetching corpus: 399, signal 87789/97146 (executing program)
1970/01/01 00:09:48 fetching corpus: 449, signal 91371/101362 (executing program)
1970/01/01 00:09:51 fetching corpus: 499, signal 93734/104456 (executing program)
1970/01/01 00:09:55 fetching corpus: 549, signal 96418/107761 (executing program)
1970/01/01 00:09:57 fetching corpus: 598, signal 99386/111298 (executing program)
1970/01/01 00:10:00 fetching corpus: 648, signal 103279/115555 (executing program)
1970/01/01 00:10:02 fetching corpus: 698, signal 106207/118903 (executing program)
1970/01/01 00:10:07 fetching corpus: 748, signal 108517/121661 (executing program)
1970/01/01 00:10:09 fetching corpus: 798, signal 111132/124567 (executing program)
1970/01/01 00:10:12 fetching corpus: 848, signal 112738/126608 (executing program)
1970/01/01 00:10:14 fetching corpus: 898, signal 114779/128993 (executing program)
1970/01/01 00:10:17 fetching corpus: 948, signal 117241/131670 (executing program)
1970/01/01 00:10:20 fetching corpus: 998, signal 118870/133657 (executing program)
1970/01/01 00:10:22 fetching corpus: 1048, signal 120536/135594 (executing program)
1970/01/01 00:10:24 fetching corpus: 1098, signal 122439/137759 (executing program)
1970/01/01 00:10:27 fetching corpus: 1147, signal 123903/139508 (executing program)
1970/01/01 00:10:30 fetching corpus: 1197, signal 125753/141482 (executing program)
1970/01/01 00:10:32 fetching corpus: 1247, signal 127493/143387 (executing program)
1970/01/01 00:10:35 fetching corpus: 1297, signal 128850/144944 (executing program)
1970/01/01 00:10:37 fetching corpus: 1347, signal 130045/146366 (executing program)
1970/01/01 00:10:39 fetching corpus: 1397, signal 131906/148244 (executing program)
1970/01/01 00:10:42 fetching corpus: 1447, signal 133638/149941 (executing program)
1970/01/01 00:10:44 fetching corpus: 1497, signal 135330/151598 (executing program)
1970/01/01 00:10:47 fetching corpus: 1547, signal 136582/152928 (executing program)
1970/01/01 00:10:50 fetching corpus: 1597, signal 137963/154302 (executing program)
1970/01/01 00:10:53 fetching corpus: 1647, signal 139206/155588 (executing program)
1970/01/01 00:10:56 fetching corpus: 1697, signal 140880/157128 (executing program)
1970/01/01 00:10:59 fetching corpus: 1747, signal 142237/158425 (executing program)
1970/01/01 00:11:02 fetching corpus: 1797, signal 143531/159621 (executing program)
1970/01/01 00:11:05 fetching corpus: 1847, signal 144843/160808 (executing program)
1970/01/01 00:11:08 fetching corpus: 1897, signal 146025/161923 (executing program)
1970/01/01 00:11:12 fetching corpus: 1947, signal 147281/163021 (executing program)
1970/01/01 00:11:14 fetching corpus: 1996, signal 148387/164020 (executing program)
1970/01/01 00:11:17 fetching corpus: 2046, signal 149564/165035 (executing program)
1970/01/01 00:11:21 fetching corpus: 2095, signal 150703/166002 (executing program)
1970/01/01 00:11:24 fetching corpus: 2145, signal 151835/166917 (executing program)
1970/01/01 00:11:28 fetching corpus: 2195, signal 152796/167754 (executing program)
1970/01/01 00:11:30 fetching corpus: 2244, signal 153562/168459 (executing program)
1970/01/01 00:11:33 fetching corpus: 2294, signal 154818/169386 (executing program)
1970/01/01 00:11:36 fetching corpus: 2344, signal 156460/170505 (executing program)
1970/01/01 00:11:40 fetching corpus: 2394, signal 157498/171272 (executing program)
1970/01/01 00:11:43 fetching corpus: 2444, signal 158972/172206 (executing program)
1970/01/01 00:11:45 fetching corpus: 2493, signal 159824/172874 (executing program)
1970/01/01 00:11:47 fetching corpus: 2543, signal 160977/173624 (executing program)
1970/01/01 00:11:50 fetching corpus: 2593, signal 161864/174266 (executing program)
1970/01/01 00:11:57 fetching corpus: 2643, signal 163180/175023 (executing program)
1970/01/01 00:11:59 fetching corpus: 2693, signal 164278/175654 (executing program)
1970/01/01 00:12:02 fetching corpus: 2743, signal 165102/176196 (executing program)
1970/01/01 00:12:04 fetching corpus: 2793, signal 165855/176644 (executing program)
1970/01/01 00:12:06 fetching corpus: 2843, signal 166706/177134 (executing program)
1970/01/01 00:12:09 fetching corpus: 2893, signal 167436/177565 (executing program)
1970/01/01 00:12:11 fetching corpus: 2943, signal 167945/177871 (executing program)
1970/01/01 00:12:13 fetching corpus: 2993, signal 168843/178330 (executing program)
1970/01/01 00:12:15 fetching corpus: 3043, signal 169661/178766 (executing program)
1970/01/01 00:12:18 fetching corpus: 3093, signal 170865/179309 (executing program)
1970/01/01 00:12:22 fetching corpus: 3143, signal 171983/179773 (executing program)
1970/01/01 00:12:24 fetching corpus: 3192, signal 172855/180154 (executing program)
1970/01/01 00:12:28 fetching corpus: 3242, signal 173766/180510 (executing program)
1970/01/01 00:12:30 fetching corpus: 3292, signal 174764/180891 (executing program)
1970/01/01 00:12:33 fetching corpus: 3342, signal 175643/181208 (executing program)
1970/01/01 00:12:36 fetching corpus: 3392, signal 176361/181492 (executing program)
1970/01/01 00:12:38 fetching corpus: 3442, signal 177123/181767 (executing program)
1970/01/01 00:12:40 fetching corpus: 3492, signal 177935/182012 (executing program)
1970/01/01 00:12:44 fetching corpus: 3542, signal 178660/182229 (executing program)
1970/01/01 00:12:46 fetching corpus: 3592, signal 179606/182488 (executing program)
1970/01/01 00:12:49 fetching corpus: 3642, signal 180310/182693 (executing program)
1970/01/01 00:12:49 fetching corpus: 3642, signal 180310/182737 (executing program)
1970/01/01 00:12:49 fetching corpus: 3642, signal 180310/182767 (executing program)
1970/01/01 00:12:49 fetching corpus: 3643, signal 180396/182835 (executing program)
1970/01/01 00:12:49 fetching corpus: 3643, signal 180396/182866 (executing program)
1970/01/01 00:12:49 fetching corpus: 3643, signal 180396/182898 (executing program)
1970/01/01 00:12:50 fetching corpus: 3643, signal 180396/182935 (executing program)
1970/01/01 00:12:50 fetching corpus: 3643, signal 180396/182976 (executing program)
1970/01/01 00:12:50 fetching corpus: 3643, signal 180396/183011 (executing program)
1970/01/01 00:12:50 fetching corpus: 3643, signal 180396/183039 (executing program)
1970/01/01 00:12:50 fetching corpus: 3644, signal 180400/183076 (executing program)
1970/01/01 00:12:50 fetching corpus: 3644, signal 180400/183107 (executing program)
1970/01/01 00:12:51 fetching corpus: 3644, signal 180400/183135 (executing program)
1970/01/01 00:12:51 fetching corpus: 3644, signal 180400/183170 (executing program)
1970/01/01 00:12:51 fetching corpus: 3644, signal 180400/183212 (executing program)
1970/01/01 00:12:51 fetching corpus: 3644, signal 180400/183250 (executing program)
1970/01/01 00:12:51 fetching corpus: 3644, signal 180400/183277 (executing program)
1970/01/01 00:12:51 fetching corpus: 3644, signal 180400/183307 (executing program)
1970/01/01 00:12:51 fetching corpus: 3644, signal 180400/183324 (executing program)
1970/01/01 00:12:52 fetching corpus: 3644, signal 180400/183324 (executing program)
1970/01/01 00:14:40 starting 2 fuzzer processes
00:14:40 executing program 0:
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "db2351", 0x18, 0x0, 0x0, @dev, @private0, {[@routing={0x0, 0x2, 0x1, 0x5, 0x0, [@private1]}]}}}}}, 0x0)

00:14:40 executing program 1:
prlimit64(0x0, 0x6, &(0x7f0000000000), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00')
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2020)
setreuid(r1, 0x0)
r2 = getuid()
setreuid(0xee00, r2)
prlimit64(0x0, 0x6, &(0x7f0000000240)={0x0, 0x6}, 0x0)

[  907.595050][ T2039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  908.080266][ T2039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  908.176892][ T2038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  908.964013][ T2038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  923.423673][ T2039] device hsr_slave_0 entered promiscuous mode
[  923.474866][ T2039] device hsr_slave_1 entered promiscuous mode
[  924.702198][ T2038] device hsr_slave_0 entered promiscuous mode
[  924.762757][ T2038] device hsr_slave_1 entered promiscuous mode
[  924.795638][ T2038] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  924.801831][ T2038] Cannot create hsr debugfs directory
[  931.264808][ T2039] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  931.444878][ T2039] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  931.712813][ T2039] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  932.086012][ T2039] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  933.074140][ T2038] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  933.284456][ T2038] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  933.363895][ T2038] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  933.621393][ T2038] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  942.873298][ T2039] 8021q: adding VLAN 0 to HW filter on device bond0
[  943.686219][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  943.773714][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  945.765827][ T2038] 8021q: adding VLAN 0 to HW filter on device bond0
[  946.625270][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  946.676550][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  951.233397][ T2421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  951.302679][ T2421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  951.553078][ T1969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  951.612568][ T1969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  951.932141][ T1969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  952.399792][ T1969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  953.363238][ T1969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  953.455684][ T1969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  954.165859][ T2039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  954.474876][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  954.565223][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  956.355787][  T830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  956.421915][  T830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  956.474149][  T830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  956.515873][  T830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  956.561599][  T830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  956.799758][ T1969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  958.246759][ T2038] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  958.260496][ T2038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  958.786157][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  958.824403][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  958.855835][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  958.912679][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  959.045564][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  961.304458][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  961.312854][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  965.935490][ T2421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  965.953838][ T2421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  979.239232][ T2261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  979.285053][ T2261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  980.821762][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  980.931534][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  985.786811][ T2421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  985.844985][ T2421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  986.026293][ T2039] device veth0_vlan entered promiscuous mode
[  986.149792][ T2421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  986.233860][ T2421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  986.680560][ T2039] device veth1_vlan entered promiscuous mode
[  987.760680][ T2421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  987.816555][ T2421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  988.062774][ T2039] device veth0_macvtap entered promiscuous mode
[  988.441413][ T2039] device veth1_macvtap entered promiscuous mode
[  989.139148][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  989.184817][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  989.285725][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  989.315577][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  989.382680][ T2038] device veth0_vlan entered promiscuous mode
[  990.112890][ T2038] device veth1_vlan entered promiscuous mode
[  990.252838][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  990.339915][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  990.360035][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  990.386507][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  990.514178][ T2039] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  990.519422][ T2039] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  990.521244][ T2039] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  990.522828][ T2039] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  992.702782][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  992.718268][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  992.914771][ T2038] device veth0_macvtap entered promiscuous mode
[  993.203583][ T2038] device veth1_macvtap entered promiscuous mode
[  993.796707][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  994.131313][ T2261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  994.204404][ T2261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  994.764256][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  994.804965][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  995.042642][ T2038] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  995.044093][ T2038] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  995.045204][ T2038] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  995.046254][ T2038] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
00:16:39 executing program 0:
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "db2351", 0x18, 0x0, 0x0, @dev, @private0, {[@routing={0x0, 0x2, 0x1, 0x5, 0x0, [@private1]}]}}}}}, 0x0)

00:16:43 executing program 1:
prlimit64(0x0, 0x6, &(0x7f0000000000), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00')
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2020)
setreuid(r1, 0x0)
r2 = getuid()
setreuid(0xee00, r2)
prlimit64(0x0, 0x6, &(0x7f0000000240)={0x0, 0x6}, 0x0)

00:16:44 executing program 0:
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "db2351", 0x18, 0x0, 0x0, @dev, @private0, {[@routing={0x0, 0x2, 0x1, 0x5, 0x0, [@private1]}]}}}}}, 0x0)

00:16:48 executing program 1:
prlimit64(0x0, 0x6, &(0x7f0000000000), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00')
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2020)
setreuid(r1, 0x0)
r2 = getuid()
setreuid(0xee00, r2)
prlimit64(0x0, 0x6, &(0x7f0000000240)={0x0, 0x6}, 0x0)

00:16:48 executing program 0:
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "db2351", 0x18, 0x0, 0x0, @dev, @private0, {[@routing={0x0, 0x2, 0x1, 0x5, 0x0, [@private1]}]}}}}}, 0x0)

00:16:53 executing program 1:
prlimit64(0x0, 0x6, &(0x7f0000000000), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00')
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2020)
setreuid(r1, 0x0)
r2 = getuid()
setreuid(0xee00, r2)
prlimit64(0x0, 0x6, &(0x7f0000000240)={0x0, 0x6}, 0x0)

00:16:55 executing program 0:
prlimit64(0x0, 0x6, &(0x7f0000000000), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00')
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2020)
setreuid(r1, 0x0)
r2 = getuid()
setreuid(0xee00, r2)
prlimit64(0x0, 0x6, &(0x7f0000000240)={0x0, 0x6}, 0x0)

00:16:59 executing program 0:
prlimit64(0x0, 0x6, &(0x7f0000000000), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00')
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2020)
setreuid(r1, 0x0)
r2 = getuid()
setreuid(0xee00, r2)
prlimit64(0x0, 0x6, &(0x7f0000000240)={0x0, 0x6}, 0x0)

00:17:01 executing program 1:
prlimit64(0x0, 0x6, &(0x7f0000000000), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00')
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2020)
setreuid(r1, 0x0)
r2 = getuid()
setreuid(0xee00, r2)
prlimit64(0x0, 0x6, &(0x7f0000000240)={0x0, 0x6}, 0x0)

00:17:05 executing program 0:
prlimit64(0x0, 0x6, &(0x7f0000000000), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00')
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2020)
setreuid(r1, 0x0)
r2 = getuid()
setreuid(0xee00, r2)
prlimit64(0x0, 0x6, &(0x7f0000000240)={0x0, 0x6}, 0x0)

00:17:06 executing program 1:
prlimit64(0x0, 0x6, &(0x7f0000000000), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00')
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2020)
setreuid(r1, 0x0)
r2 = getuid()
setreuid(0xee00, r2)
prlimit64(0x0, 0x6, &(0x7f0000000240)={0x0, 0x6}, 0x0)

00:17:10 executing program 0:
r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000099d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0)
io_uring_enter(r0, 0x74fd, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000003d80)={0x2020}, 0x2020)

00:17:10 executing program 1:
prlimit64(0x0, 0x6, &(0x7f0000000000), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00')
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2020)
setreuid(r1, 0x0)
r2 = getuid()
setreuid(0xee00, r2)
prlimit64(0x0, 0x6, &(0x7f0000000240)={0x0, 0x6}, 0x0)

00:17:14 executing program 0:
r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000099d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0)
io_uring_enter(r0, 0x74fd, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000003d80)={0x2020}, 0x2020)

00:17:17 executing program 1:
r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000099d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0)
io_uring_enter(r0, 0x74fd, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000003d80)={0x2020}, 0x2020)

00:17:19 executing program 0:
r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000099d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0)
io_uring_enter(r0, 0x74fd, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000003d80)={0x2020}, 0x2020)

00:17:20 executing program 1:
r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000099d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0)
io_uring_enter(r0, 0x74fd, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000003d80)={0x2020}, 0x2020)

00:17:22 executing program 0:
r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000099d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0)
io_uring_enter(r0, 0x74fd, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000003d80)={0x2020}, 0x2020)

00:17:25 executing program 1:
r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000099d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0)
io_uring_enter(r0, 0x74fd, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000003d80)={0x2020}, 0x2020)

00:17:27 executing program 0:
r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000099d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0)
io_uring_enter(r0, 0x74fd, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000003d80)={0x2020}, 0x2020)

00:17:30 executing program 1:
r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000099d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0)
io_uring_enter(r0, 0x74fd, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000003d80)={0x2020}, 0x2020)

00:17:31 executing program 0:
r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000099d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0)
io_uring_enter(r0, 0x74fd, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000003d80)={0x2020}, 0x2020)

00:17:33 executing program 1:
r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000099d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0)
io_uring_enter(r0, 0x74fd, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000003d80)={0x2020}, 0x2020)

00:17:34 executing program 0:
r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000099d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0)
io_uring_enter(r0, 0x74fd, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000003d80)={0x2020}, 0x2020)

00:17:36 executing program 1:
r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000099d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0)
io_uring_enter(r0, 0x74fd, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000003d80)={0x2020}, 0x2020)

00:17:38 executing program 0:
r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000099d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0)
io_uring_enter(r0, 0x74fd, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000003d80)={0x2020}, 0x2020)

00:17:41 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x5, 0x6, @broadcast}, 0x10)

[ 1063.492261][ T2794] device batadv_slave_1 entered promiscuous mode
[ 1063.604691][ T2793] device batadv_slave_1 left promiscuous mode
00:17:44 executing program 0:
r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000099d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0)
io_uring_enter(r0, 0x74fd, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000003d80)={0x2020}, 0x2020)

00:17:45 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x5, 0x6, @broadcast}, 0x10)

[ 1067.969356][ T2798] device batadv_slave_1 entered promiscuous mode
[ 1067.996086][ T2797] device batadv_slave_1 left promiscuous mode
00:17:48 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x5, 0x6, @broadcast}, 0x10)

00:17:48 executing program 0:
r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000099d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0)
io_uring_enter(r0, 0x74fd, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000003d80)={0x2020}, 0x2020)

[ 1070.990018][ T2801] device batadv_slave_1 entered promiscuous mode
[ 1071.040531][ T2799] device batadv_slave_1 left promiscuous mode
00:17:51 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x5, 0x6, @broadcast}, 0x10)

00:17:53 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10)
close(r0)
execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0)

[ 1074.433676][ T2804] device batadv_slave_1 entered promiscuous mode
[ 1074.496008][ T2803] device batadv_slave_1 left promiscuous mode
[ 1075.540424][ T2806] device batadv_slave_1 entered promiscuous mode
00:17:55 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r1, &(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e)

[ 1078.283825][ T2805] device batadv_slave_1 left promiscuous mode
00:17:58 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r1, &(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e)

00:17:59 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10)
close(r0)
execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0)

[ 1081.921476][ T2814] device batadv_slave_1 entered promiscuous mode
00:18:02 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r1, &(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e)

[ 1084.611333][ T2812] device batadv_slave_1 left promiscuous mode
00:18:05 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10)
close(r0)
execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0)

00:18:06 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r1, &(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e)

[ 1088.774604][ T2821] device batadv_slave_1 entered promiscuous mode
[ 1091.434983][ T2819] device batadv_slave_1 left promiscuous mode
00:18:11 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10)
close(r0)
execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0)

00:18:12 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10)
close(r0)
execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0)

[ 1093.883951][ T2826] device batadv_slave_1 entered promiscuous mode
[ 1096.126535][ T2825] device batadv_slave_1 left promiscuous mode
[ 1096.965791][ T2830] device batadv_slave_1 entered promiscuous mode
00:18:16 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10)
close(r0)
execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0)

[ 1098.965515][ T2828] device batadv_slave_1 left promiscuous mode
[ 1100.103414][ T2834] device batadv_slave_1 entered promiscuous mode
00:18:21 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10)
close(r0)
execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0)

[ 1103.805140][ T2833] device batadv_slave_1 left promiscuous mode
[ 1104.010573][ T2838] device batadv_slave_1 entered promiscuous mode
00:18:25 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10)
close(r0)
execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0)

[ 1107.150661][ T2836] device batadv_slave_1 left promiscuous mode
00:18:27 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10)
close(r0)
execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0)

[ 1109.696098][ T2842] device batadv_slave_1 entered promiscuous mode
[ 1112.481177][ T2841] device batadv_slave_1 left promiscuous mode
[ 1112.854957][ T2846] device batadv_slave_1 entered promiscuous mode
[ 1116.741283][ T2844] device batadv_slave_1 left promiscuous mode
00:18:36 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r1, &(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e)

00:18:38 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10)
close(r0)
execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0)

00:18:41 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r1, &(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e)

[ 1123.559017][ T2852] device batadv_slave_1 entered promiscuous mode
[ 1129.224435][ T2851] device batadv_slave_1 left promiscuous mode
00:18:48 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r1, &(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e)

00:18:54 executing program 0:
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x32, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)

00:18:56 executing program 1:
r0 = socket(0x2, 0xa, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}}, 0x0)

00:18:57 executing program 0:
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x32, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)

[ 1138.581522][ T2862] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET)
00:18:59 executing program 1:
r0 = socket(0x2, 0xa, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}}, 0x0)

00:19:00 executing program 0:
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x32, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)

00:19:03 executing program 1:
r0 = socket(0x2, 0xa, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}}, 0x0)

00:19:04 executing program 0:
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x32, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)

00:19:06 executing program 1:
r0 = socket(0x2, 0xa, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}}, 0x0)

00:19:07 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil})

00:19:09 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil})

00:19:10 executing program 1:
r0 = memfd_create(&(0x7f0000001500)='TIPCv2\x00', 0x0)
fstatfs(r0, &(0x7f0000001540)=""/179)

00:19:12 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil})

00:19:13 executing program 1:
r0 = memfd_create(&(0x7f0000001500)='TIPCv2\x00', 0x0)
fstatfs(r0, &(0x7f0000001540)=""/179)

00:19:15 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil})

00:19:16 executing program 1:
r0 = memfd_create(&(0x7f0000001500)='TIPCv2\x00', 0x0)
fstatfs(r0, &(0x7f0000001540)=""/179)

00:19:19 executing program 1:
r0 = memfd_create(&(0x7f0000001500)='TIPCv2\x00', 0x0)
fstatfs(r0, &(0x7f0000001540)=""/179)

00:19:20 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x4004662b, &(0x7f0000000440)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='mnt\x00', 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)

00:19:22 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000002880)='./file0\x00', &(0x7f00000028c0), 0x0)

00:19:27 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000002880)='./file0\x00', &(0x7f00000028c0), 0x0)

00:19:27 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x4004662b, &(0x7f0000000440)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='mnt\x00', 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)

00:19:37 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000002880)='./file0\x00', &(0x7f00000028c0), 0x0)

00:19:37 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x4004662b, &(0x7f0000000440)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='mnt\x00', 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)

00:19:40 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000002880)='./file0\x00', &(0x7f00000028c0), 0x0)

00:19:44 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x4004662b, &(0x7f0000000440)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='mnt\x00', 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)

00:19:46 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x4004662b, &(0x7f0000000440)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='mnt\x00', 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)

00:19:55 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000002880)='./file0\x00', &(0x7f00000028c0), 0x0)

00:19:59 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x4004662b, &(0x7f0000000440)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='mnt\x00', 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)

00:20:00 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000002880)='./file0\x00', &(0x7f00000028c0), 0x0)

00:20:05 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x4004662b, &(0x7f0000000440)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='mnt\x00', 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)

00:20:07 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000002880)='./file0\x00', &(0x7f00000028c0), 0x0)

00:20:15 executing program 1:
prctl$PR_SET_MM_EXE_FILE(0x8, 0xd, 0xffffffffffffffff)

00:20:16 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0xfffffffffffffffc, &(0x7f0000000000))

00:20:17 executing program 1:
prctl$PR_SET_MM_EXE_FILE(0x8, 0xd, 0xffffffffffffffff)

00:20:18 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0xfffffffffffffffc, &(0x7f0000000000))

00:20:20 executing program 1:
prctl$PR_SET_MM_EXE_FILE(0x8, 0xd, 0xffffffffffffffff)

00:20:21 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0xfffffffffffffffc, &(0x7f0000000000))

00:20:22 executing program 1:
prctl$PR_SET_MM_EXE_FILE(0x8, 0xd, 0xffffffffffffffff)

00:20:24 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0xfffffffffffffffc, &(0x7f0000000000))

00:20:25 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x140, 0x320, 0x0, 0x0, 0x0, 0x0, 0x85c21187d4a51092})

00:20:27 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_MSCBIT(r0, 0x4004556b, 0x0)

00:20:28 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x140, 0x320, 0x0, 0x0, 0x0, 0x0, 0x85c21187d4a51092})

[ 1230.486269][ T2945] input: syz1 as /devices/virtual/input/input0
00:20:31 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x140, 0x320, 0x0, 0x0, 0x0, 0x0, 0x85c21187d4a51092})

00:20:32 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_MSCBIT(r0, 0x4004556b, 0x0)

[ 1234.841539][ T2955] input: syz1 as /devices/virtual/input/input1
00:20:34 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x140, 0x320, 0x0, 0x0, 0x0, 0x0, 0x85c21187d4a51092})

00:20:35 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_MSCBIT(r0, 0x4004556b, 0x0)

[ 1238.479301][ T2963] input: syz1 as /devices/virtual/input/input2
00:20:40 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_MSCBIT(r0, 0x4004556b, 0x0)

00:20:41 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_MSCBIT(r0, 0x4004556b, 0x0)

[ 1243.192751][ T2969] input: syz1 as /devices/virtual/input/input3
00:20:45 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_MSCBIT(r0, 0x4004556b, 0x0)

[ 1246.748726][ T2975] input: syz1 as /devices/virtual/input/input4
00:20:49 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_MSCBIT(r0, 0x4004556b, 0x0)

[ 1250.420644][ T2981] input: syz1 as /devices/virtual/input/input5
00:20:51 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_MSCBIT(r0, 0x4004556b, 0x0)

[ 1253.804192][ T2987] input: syz1 as /devices/virtual/input/input6
00:20:54 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_MSCBIT(r0, 0x4004556b, 0x0)

[ 1256.096750][ T2994] input: syz1 as /devices/virtual/input/input7
[ 1258.696522][ T3000] input: syz1 as /devices/virtual/input/input8
00:20:58 executing program 1:
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000140))

00:20:59 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_MSCBIT(r0, 0x4004556b, 0x0)

00:21:00 executing program 1:
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000140))

[ 1262.151896][ T3009] input: syz1 as /devices/virtual/input/input9
00:21:03 executing program 1:
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000140))

00:21:05 executing program 0:
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x14, 0x0, 0xfffffffffffffffb, r0, 0x0)

00:21:07 executing program 1:
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000140))

00:21:08 executing program 0:
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x14, 0x0, 0xfffffffffffffffb, r0, 0x0)

00:21:11 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r0, 0xc0045004, 0x0)

00:21:12 executing program 0:
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x14, 0x0, 0xfffffffffffffffb, r0, 0x0)

00:21:15 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r0, 0xc0045004, 0x0)

00:21:16 executing program 0:
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x14, 0x0, 0xfffffffffffffffb, r0, 0x0)

00:21:18 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r0, 0xc0045004, 0x0)

00:21:20 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r0, 0xc0045004, 0x0)

00:21:23 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r0, 0xc0045004, 0x0)

00:21:24 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r0, 0xc0045004, 0x0)

00:21:28 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r0, 0xc0045004, 0x0)

00:21:28 executing program 1:
brk(0x8000000000000000)

00:21:32 executing program 1:
brk(0x8000000000000000)

00:21:34 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000002780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xc0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xa40005c4)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000002640)={{}, {0x1, 0x1}}, 0x24, 0x0)

00:21:36 executing program 1:
brk(0x8000000000000000)

00:21:38 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000002780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xc0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xa40005c4)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000002640)={{}, {0x1, 0x1}}, 0x24, 0x0)

00:21:38 executing program 1:
brk(0x8000000000000000)

00:21:41 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000002780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xc0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xa40005c4)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000002640)={{}, {0x1, 0x1}}, 0x24, 0x0)

00:21:41 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000002780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xc0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xa40005c4)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000002640)={{}, {0x1, 0x1}}, 0x24, 0x0)

00:21:44 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000002780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xc0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xa40005c4)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000002640)={{}, {0x1, 0x1}}, 0x24, 0x0)

00:21:45 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000002780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xc0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xa40005c4)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000002640)={{}, {0x1, 0x1}}, 0x24, 0x0)

00:21:47 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000002780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xc0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xa40005c4)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000002640)={{}, {0x1, 0x1}}, 0x24, 0x0)

00:21:49 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000002780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xc0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xa40005c4)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000002640)={{}, {0x1, 0x1}}, 0x24, 0x0)

00:21:52 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000002780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xc0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xa40005c4)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000002640)={{}, {0x1, 0x1}}, 0x24, 0x0)

00:21:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x64, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xffffffffffffff2a}, {0x6}, {0x5}, {0x6}, {0x8}}]}, 0x64}}, 0x0)

[ 1315.494987][ T3069] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
00:21:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x64, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xffffffffffffff2a}, {0x6}, {0x5}, {0x6}, {0x8}}]}, 0x64}}, 0x0)

00:21:57 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000002780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xc0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xa40005c4)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000002640)={{}, {0x1, 0x1}}, 0x24, 0x0)

[ 1319.068741][ T3072] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
00:21:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x64, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xffffffffffffff2a}, {0x6}, {0x5}, {0x6}, {0x8}}]}, 0x64}}, 0x0)

00:22:01 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x64, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xffffffffffffff2a}, {0x6}, {0x5}, {0x6}, {0x8}}]}, 0x64}}, 0x0)

[ 1322.685351][ T3076] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
00:22:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x64, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xffffffffffffff2a}, {0x6}, {0x5}, {0x6}, {0x8}}]}, 0x64}}, 0x0)

[ 1324.672233][ T3078] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
00:22:05 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x64, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xffffffffffffff2a}, {0x6}, {0x5}, {0x6}, {0x8}}]}, 0x64}}, 0x0)

[ 1326.086263][ T3080] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1328.946602][ T3082] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
00:22:08 executing program 1:
move_pages(0x0, 0x20000000000000be, &(0x7f0000000080)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f00000000c0), &(0x7f0000000140), 0x0)

00:22:09 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x64, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xffffffffffffff2a}, {0x6}, {0x5}, {0x6}, {0x8}}]}, 0x64}}, 0x0)

00:22:10 executing program 1:
move_pages(0x0, 0x20000000000000be, &(0x7f0000000080)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f00000000c0), &(0x7f0000000140), 0x0)

[ 1332.575129][ T3086] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
00:22:14 executing program 1:
move_pages(0x0, 0x20000000000000be, &(0x7f0000000080)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f00000000c0), &(0x7f0000000140), 0x0)

00:22:14 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x31, 0x0, &(0x7f00000001c0))

00:22:16 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x31, 0x0, &(0x7f00000001c0))

00:22:17 executing program 1:
move_pages(0x0, 0x20000000000000be, &(0x7f0000000080)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f00000000c0), &(0x7f0000000140), 0x0)

00:22:19 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x31, 0x0, &(0x7f00000001c0))

00:22:21 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x8}, 0x8)
sendto$inet(r0, &(0x7f0000001340)="8a", 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000), 0x4)

00:22:22 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x31, 0x0, &(0x7f00000001c0))

00:22:24 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x8}, 0x8)
sendto$inet(r0, &(0x7f0000001340)="8a", 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000), 0x4)

00:22:26 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x8}, 0x8)
sendto$inet(r0, &(0x7f0000001340)="8a", 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000), 0x4)

00:22:29 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x8}, 0x8)
sendto$inet(r0, &(0x7f0000001340)="8a", 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000), 0x4)

00:22:29 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x8}, 0x8)
sendto$inet(r0, &(0x7f0000001340)="8a", 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000), 0x4)

00:22:32 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x8}, 0x8)
sendto$inet(r0, &(0x7f0000001340)="8a", 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000), 0x4)

00:22:32 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x8}, 0x8)
sendto$inet(r0, &(0x7f0000001340)="8a", 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000), 0x4)

00:22:37 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x8}, 0x8)
sendto$inet(r0, &(0x7f0000001340)="8a", 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000), 0x4)

00:22:38 executing program 1:
r0 = socket$igmp(0x2, 0x3, 0x2)
socket$packet(0x11, 0x2, 0x300)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @private=0xa010102}, 0x10)
setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr, @dev}, 0x10)

00:22:41 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x8}, 0x8)
sendto$inet(r0, &(0x7f0000001340)="8a", 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000), 0x4)

00:22:46 executing program 1:
r0 = socket$igmp(0x2, 0x3, 0x2)
socket$packet(0x11, 0x2, 0x300)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @private=0xa010102}, 0x10)
setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr, @dev}, 0x10)

00:22:48 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x8}, 0x8)
sendto$inet(r0, &(0x7f0000001340)="8a", 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000), 0x4)

00:22:54 executing program 1:
r0 = socket$igmp(0x2, 0x3, 0x2)
socket$packet(0x11, 0x2, 0x300)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @private=0xa010102}, 0x10)
setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr, @dev}, 0x10)

00:22:56 executing program 0:
r0 = socket$igmp(0x2, 0x3, 0x2)
socket$packet(0x11, 0x2, 0x300)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @private=0xa010102}, 0x10)
setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr, @dev}, 0x10)

00:23:01 executing program 1:
r0 = socket$igmp(0x2, 0x3, 0x2)
socket$packet(0x11, 0x2, 0x300)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @private=0xa010102}, 0x10)
setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr, @dev}, 0x10)

00:23:01 executing program 0:
r0 = socket$igmp(0x2, 0x3, 0x2)
socket$packet(0x11, 0x2, 0x300)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @private=0xa010102}, 0x10)
setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr, @dev}, 0x10)

00:23:07 executing program 0:
r0 = socket$igmp(0x2, 0x3, 0x2)
socket$packet(0x11, 0x2, 0x300)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @private=0xa010102}, 0x10)
setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr, @dev}, 0x10)

00:23:08 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)

00:23:13 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)

00:23:18 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)

00:23:19 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)

00:23:23 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)

00:23:23 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)

00:23:28 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)

00:23:29 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)

00:23:32 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)

00:23:35 executing program 0:
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='U'], 0x48}}, 0x0)

00:23:39 executing program 1:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)

00:23:40 executing program 0:
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='U'], 0x48}}, 0x0)

00:23:46 executing program 0:
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='U'], 0x48}}, 0x0)

00:23:49 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000380))

00:23:53 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000380))

00:23:53 executing program 0:
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='U'], 0x48}}, 0x0)

00:23:57 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000380))

00:24:01 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000380))

00:24:05 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000380))

00:24:06 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000380))

00:24:08 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000380))

00:24:10 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000380))

00:24:11 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000380))

00:24:13 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000380))

00:24:15 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000380))

00:24:17 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000020000103000000000000000002"], 0x30}}, 0x0)

00:24:18 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000380))

[ 1459.938198][ T3291] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
00:24:22 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000380))

00:24:22 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000020000103000000000000000002"], 0x30}}, 0x0)

[ 1465.196066][ T3296] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
00:24:25 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000020000103000000000000000002"], 0x30}}, 0x0)

[ 1466.378896][   T12] Kernel panic - not syncing: corrupted stack end detected inside scheduler
[ 1466.385372][   T12] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0
[ 1466.388202][   T12] Hardware name: riscv-virtio,qemu (DT)
[ 1466.389603][   T12] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker
[ 1466.391300][   T12] Call Trace:
[ 1466.392256][   T12] [<ffffffff8000a228>] dump_backtrace+0x2e/0x3c
[ 1466.393730][   T12] [<ffffffff831668cc>] show_stack+0x34/0x40
[ 1466.394854][   T12] [<ffffffff831756ba>] dump_stack_lvl+0xe4/0x150
[ 1466.396204][   T12] [<ffffffff83175742>] dump_stack+0x1c/0x24
[ 1466.397919][   T12] [<ffffffff83166fa8>] panic+0x24a/0x634
[ 1466.399621][   T12] [<ffffffff831a688a>] schedule+0x0/0x14c
[ 1466.400819][   T12] [<ffffffff831a6b00>] preempt_schedule_common+0x4e/0xde
[ 1466.402058][   T12] [<ffffffff831a6bc4>] preempt_schedule+0x34/0x36
[ 1466.403218][   T12] [<ffffffff831afd78>] _raw_spin_unlock_irqrestore+0x8c/0x98
[ 1466.404447][   T12] [<ffffffff800f86a8>] swake_up_one+0xbc/0xd0
[ 1466.405583][   T12] [<ffffffff80146e20>] rcu_gp_kthread_wake+0x5e/0x8e
[ 1466.406792][   T12] [<ffffffff8014727e>] rcu_report_qs_rsp+0x64/0x206
[ 1466.408547][   T12] [<ffffffff8014e240>] rcu_preempt_deferred_qs_irqrestore+0x7be/0x7c0
[ 1466.409960][   T12] [<ffffffff8015136e>] __rcu_read_unlock+0x166/0x262
[ 1466.411232][   T12] [<ffffffff82715fe0>] __skb_flow_dissect+0x992/0x3094
[ 1466.412511][   T12] [<ffffffff8271895e>] __skb_get_hash+0xda/0x1ec
[ 1466.413772][   T12] [<ffffffff8175e79c>] encrypt_packet+0x53e/0x59c
[ 1466.414958][   T12] [<ffffffff8175fa50>] wg_packet_encrypt_worker+0x21e/0x60a
[ 1466.416204][   T12] [<ffffffff80093b44>] process_one_work+0x654/0xffe
[ 1466.418006][   T12] [<ffffffff8009484e>] worker_thread+0x360/0x8fa
[ 1466.419486][   T12] [<ffffffff800a7f58>] kthread+0x19e/0x1fa
[ 1466.420658][   T12] [<ffffffff80005724>] ret_from_exception+0x0/0x10
[ 1466.422209][   T12] SMP: stopping secondary CPUs
[ 1466.424326][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:43:43  Registers:
info registers vcpu 0
 pc       ffffffff802009d2
 mhartid  0000000000000000
 mstatus  00000000000000a2
 mip      0000000000000000
 mie      00000000000002aa
 mideleg  0000000000000222
 medeleg  000000000000b109
 mtvec    0000000080000540
 stvec    ffffffff800055d4
 mepc     ffffffff8000f97e
 sepc     ffffffff8010b26a
 mcause   0000000000000009
 scause   8000000000000005
 mtval  0000000000000000
 stval  0000000000000000
 x0/zero 0000000000000000 x1/ra ffffffff801159f6 x2/sp ffffaf800c80fac0 x3/gp ffffffff85863ac0
 x4/tp ffffaf800ed23080 x5/t0 fffff5ef01b642e8 x6/t1 1031aefc8db4b300 x7/t2 ffffffffffffffff
 x8/s0 ffffaf800c80fb00 x9/s1 ffffffff83629160 x10/a0 0000000000000000 x11/a1 00000000000f0000
 x12/a2 1ffff5f001da4614 x13/a3 ffffffff831a2498 x14/a4 0000000000000001 x15/a5 ffffffff848003d0
 x16/a6 0000000000000000 x17/a7 ffffffff8176b8f4 x18/s2 0000000000000529 x19/s3 ffffffff8343c5e8
 x20/s4 ffffaf800ed24080 x21/s5 ffffaf800ed23a98 x22/s6 ffffffff858c4ca0 x23/s7 0000000000001fff
 x24/s8 ffffaf800ed23af0 x25/s9 0000000000000000 x26/s10 1ffff5f001901f50 x27/s11 ffffffff8588a420
 x28/t3 fffffffff3f3f300 x29/t4 ffffffff80112282 x30/t5 1ffff5f001901f2c x31/t6 000000000344f460
 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000
 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000
 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000
 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000
 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000
 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000
 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000
 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000
info registers vcpu 1
 pc       ffffffff80dcc67a
 mhartid  0000000000000001
 mstatus  00000000000000a0
 mip      0000000000000080
 mie      00000000000002aa
 mideleg  0000000000000222
 medeleg  000000000000b109
 mtvec    0000000080000540
 stvec    ffffffff800055d4
 mepc     ffffffff8000f97e
 sepc     ffffffff831afd22
 mcause   0000000000000009
 scause   8000000000000005
 mtval  0000000000000000
 stval  0000000000000000
 x0/zero 0000000000000000 x1/ra ffffffff80dcc67a x2/sp ffffaf800741a7f0 x3/gp ffffffff85863ac0
 x4/tp ffffaf8007409840 x5/t0 ffffffff86bcb657 x6/t1 1031aefc8db4b300 x7/t2 0000000000000000
 x8/s0 ffffaf800741a950 x9/s1 ffffffff86bcb640 x10/a0 0000000000000000 x11/a1 ffffaf800740a840
 x12/a2 0000000000000004 x13/a3 ffffffff80dcc666 x14/a4 0000000000000003 x15/a5 0000000000000000
 x16/a6 0000000000f00000 x17/a7 ffffffff80dcc2ca x18/s2 0000000000000070 x19/s3 0000000000000100
 x20/s4 ffffffff86e58900 x21/s5 ffffffff86e58b70 x22/s6 ffffffff86e58950 x23/s7 ffffffff86e58b88
 x24/s8 0000000000000000 x25/s9 ffffffff86e58958 x26/s10 ffffffff858655c0 x27/s11 0000000000000000
 x28/t3 fffffffff3f3f300 x29/t4 ffffffff80112282 x30/t5 1ffff5f000e834a8 x31/t6 ffffffff86bcb657
 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000
 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000
 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000
 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000
 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000
 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000
 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000
 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000