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", 0xe00, 0x8001}], 0x1000010, &(0x7f0000000580)={[{':#'}, {}, {}, {'+'}, {'/dev/input/mouse#\x00'}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@dont_measure='dont_measure'}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/hwrng\x00'}}, {@subj_role={'subj_role', 0x3d, '+)*-%'}}, {@seclabel='seclabel'}, {@fsmagic={'fsmagic', 0x3d, 0xfff}}, {@euid_gt={'euid>', 0xee00}}, {@pcr={'pcr', 0x3d, 0x5}}]}) 01:55:30 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffffffffffd53) 01:55:30 executing program 2: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000004c0)={0xf7, 0x0, 0xa0000}, 0x20) [ 570.086838][T32153] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 570.115395][T32154] loop4: detected capacity change from 0 to 128 01:55:30 executing program 2: syz_mount_image$omfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000700)="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", 0x200}], 0x0, 0x0) [ 570.135184][T32153] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:55:30 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf9", 0x3b, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) [ 570.216522][T32154] loop4: detected capacity change from 0 to 128 [ 570.237007][T32171] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:55:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) [ 570.276578][T32177] loop2: detected capacity change from 0 to 1 01:55:30 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf9", 0x3b, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) [ 570.348107][T32177] loop2: detected capacity change from 0 to 1 01:55:30 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xa, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:55:30 executing program 0: syz_mount_image$erofs(&(0x7f0000000080)='erofs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000580)=[{&(0x7f0000000480)="de", 0x1, 0xffffffff}], 0x1140000, &(0x7f00000009c0)) 01:55:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x6, 0xff, 0xc, 0x0, @local, @remote, 0x10, 0x20, 0x2, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f00000001c0)={'tunl0\x00', r2, 0x8000, 0x8000, 0x7, 0xffffffff, {{0x9, 0x4, 0x2, 0x0, 0x24, 0x64, 0x0, 0x8, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x7b, 0x0, 0x7, [0x401, 0x1000]}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfd, 0x80000000}, 0xc) r8 = socket(0x10, 0x803, 0x0) sendto$packet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="002d1f00ffff0000010000000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_SLAVE2={0x8, 0x2, r11}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0xffffffffffffff16, &(0x7f0000000300)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x4, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r11}]}]}, 0x1c}}, 0x20000000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00', r0) 01:55:30 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf9", 0x3b, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 01:55:30 executing program 4: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) connect$caif(r0, &(0x7f0000000080)=@util={0x25, "9bd7faf77a4b2da4e02f9f75bb2c2207"}, 0x18) 01:55:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00)='802.15.4 MAC\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x24}}, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, 0x0}, 0x4040811) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080)='802.15.4 MAC\x00', r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd25, 0xfffffffc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0xfd}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0xffffffffffffff2e, 0x34, 0x5}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) [ 570.903008][T32210] loop0: detected capacity change from 0 to 264192 [ 570.914425][T32209] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 01:55:31 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000700)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/133) [ 570.975983][T32210] loop0: detected capacity change from 0 to 264192 [ 570.977216][T32214] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 571.003641][T32216] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:55:31 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 01:55:31 executing program 1: io_uring_setup(0x3bb, &(0x7f0000000040)={0x0, 0x69e1, 0x8}) 01:55:31 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd", 0x58, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 01:55:31 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/hwrng\x00', 0x0, 0x0) read$hiddev(r0, 0x0, 0x0) 01:55:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x1c0, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0x1a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x66, 0x4, "1cc46737f0c38d83652136a86a0f610ab514c0e7e62773c2aa4d6b367eb887654a3dcf6cf6edc011b42f3be11763cf6b813d9dda09552241dffbffa124e62a4a44b6cd9147cfdd9124caae8b2126c7ba3a1880aa70baa292c5133cb0da529890b747"}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x04'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#}]-$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffa4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x44, 0x2, 'ethtool\xba{\x84F\x14l\xad\x023\x99\x1f\t\xbd\x96\xb5V\xac\xe0]\xc6\xac\x11\xd9\xb9[\x9e\xb2n\x15\x99\xfc\xde\x884\xaa\x94\x81\xff\x05\x00\x00\x00\x00\xf5E\x06h\x9aH&,5\x82$\x1e\xe2\xf9'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '#&}*,@]^-^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%}\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5d1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '@'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1c0}}, 0x0) 01:55:31 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)={&(0x7f0000000540)='./file0\x00'}, 0x10) 01:55:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x2, 0x0) 01:55:31 executing program 1: socket(0x1d, 0x0, 0x28000) 01:55:31 executing program 2: syz_open_dev$vim2m(&(0x7f00000024c0)='/dev/video#\x00', 0x0, 0x2) 01:55:31 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd", 0x58, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 01:55:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', r0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4040010}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) 01:55:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x1, &(0x7f0000000180)=@raw=[@jmp], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:55:31 executing program 4: r0 = socket(0x11, 0x3, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 01:55:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) 01:55:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_DURATION={0x5}]}, 0x2c}}, 0x0) 01:55:31 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd", 0x58, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 01:55:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0xe850) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000940)='team\x00', r0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000c00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000980)={0x21c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4c, 0x4, [{0x3, 0x66, 0x3f, 0x9}, {0x2, 0x4, 0x4, 0x8}, {0x6, 0x40, 0x2}, {0x4, 0x3, 0xfb, 0xffffffff}, {0x8, 0x3f, 0x7c, 0x48000000}, {0x3, 0x4, 0x4, 0x8001}, {0x6, 0xfe, 0x0, 0xdce}, {0x20, 0x18, 0x23, 0x9}, {0x7, 0x9, 0x0, 0x3}]}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) 01:55:31 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm_plock\x00', 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x10000000) 01:55:31 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x0, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000001440)) 01:55:31 executing program 1: socketpair(0x2b, 0x80000, 0x0, &(0x7f0000000b00)) 01:55:31 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000700)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 01:55:31 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4f", 0x67, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 01:55:31 executing program 0: syz_mount_image$omfs(&(0x7f00000000c0)='omfs\x00', 0x0, 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000140)="e5", 0x1}, {&(0x7f0000000700)='\"', 0x1, 0x8001}], 0x0, &(0x7f0000000580)={[], [{@dont_measure='dont_measure'}]}) 01:55:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x100}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x10001}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000080000000400028018000121801400000000000000000080000000000000000038c769ef44702d2aa2ae9c7ec31cb461e3ee1449455c0ea07f335bbe5dea3fdf1f939fdc327b3718539cdffa778d192ab7a3b1fcb02c93d0d23c34312b7824536c04db9cccb96fb63a4d37f81840ddd62a88de9c8a0ae68a9847c570991a5c1b36dfca28ac4e6825e9d3ce41580d6426497aa8"], 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) 01:55:31 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:55:31 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 01:55:31 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 01:55:32 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4f", 0x67, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) [ 571.964112][T32303] loop0: detected capacity change from 0 to 128 01:55:32 executing program 4: syz_mount_image$omfs(&(0x7f00000000c0)='omfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000380)="9f", 0x1, 0x400000}, {&(0x7f0000000700)="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", 0x1000, 0x8001}], 0x0, &(0x7f0000000580)={[], [{@uid_lt={'uid<', 0xffffffffffffffff}}]}) [ 572.025741][T32303] loop0: detected capacity change from 0 to 128 01:55:32 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4f", 0x67, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 01:55:32 executing program 1: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x7b1980, 0x0) 01:55:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xdcfc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8010) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80000, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c56e580ec3000006c00", @ANYRES16=r2, @ANYBLOB="010000000000000000000800000004000280180001801400020073797a5f74756e000000000000000000"], 0x30}}, 0x0) [ 572.116446][T32316] loop4: detected capacity change from 0 to 16384 01:55:32 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591", 0x6e, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 01:55:32 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000200)={&(0x7f0000000140)={[0x63b]}, 0x8}) 01:55:32 executing program 2: socket$inet(0x2, 0x3, 0xb1) 01:55:32 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591", 0x6e, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 01:55:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) [ 572.271015][T32316] loop4: detected capacity change from 0 to 16384 01:55:32 executing program 1: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000008, 0xffffffffffffffff) 01:55:32 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0x80086301, 0x0) 01:55:32 executing program 2: r0 = socket(0x25, 0x5, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000300), 0x4) 01:55:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) 01:55:32 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591", 0x6e, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 01:55:32 executing program 1: read$hiddev(0xffffffffffffffff, 0x0, 0x0) 01:55:32 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f00000000c0)) 01:55:32 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591e6b3338c", 0x72, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 01:55:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="93e000000000000000002b0000000a0001"], 0x20}}, 0x0) 01:55:33 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) 01:55:33 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x1a) 01:55:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendto$packet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000000002000000000000000000419d459d0e731c00", @ANYRES32=r9, @ANYBLOB="00e4ff0000000000280012e309000100766574680abc"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=@ipv6_newaddr={0x64, 0x14, 0x401, 0x70bd2d, 0x25dfdbfc, {0xa, 0x1, 0x55, 0x48, r9}, [@IFA_FLAGS={0x8, 0x8, 0x344}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_LOCAL={0x14, 0x2, @private1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8005}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_SLAVE2={0x8, 0x2, r11}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x9c, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x2000) 01:55:33 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591e6b3338c", 0x72, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 01:55:33 executing program 4: request_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='C]%\x00', 0xffffffffffffffff) [ 573.285346][T32383] device veth53 entered promiscuous mode 01:55:33 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x9effffff}}, 0x0) 01:55:33 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591e6b3338c", 0x72, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 01:55:33 executing program 2: socket(0x56, 0x0, 0x0) 01:55:33 executing program 1: syz_mount_image$omfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000700)="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", 0x1000, 0x8001}], 0x0, 0x0) 01:55:33 executing program 0: io_uring_setup(0x6aed, &(0x7f0000000040)={0x0, 0x0, 0x8}) 01:55:33 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x129040, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000040)={0x3, 0x10000, 0xfffffffffffffc01}) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000080)={0x200, 0xa18, 0x7}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) 01:55:33 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)) 01:55:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) [ 573.492944][T32404] loop1: detected capacity change from 0 to 128 01:55:33 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591e6b3338ce381", 0x74, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 01:55:33 executing program 0: keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000300), &(0x7f0000000480)={'enc=', 'oaep', ' hash=', {'hmac(sha256-avx2)\x00'}}, 0x0, 0x0) 01:55:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) 01:55:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8800) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xf0, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6a}}}}, [@NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x4]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3451ba8e}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x4, 0x1, 0x7cc4]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10001}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0xffffff66, 0x2, 0xff, 0x1000, 0x2, 0xe8, 0x6da4642c, 0x101, 0x2, 0x9a1]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}, @NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x8b, 0x3, 0x1ff, 0xfb, 0x8001, 0x0]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffffff}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3a}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xafc}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x10}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x28e}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x48804}, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00', r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) [ 573.641283][T32404] loop1: detected capacity change from 0 to 128 01:55:33 executing program 2: r0 = socket(0x11, 0x2, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 01:55:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1}, 0x14}}, 0x0) 01:55:33 executing program 4: socketpair(0x15, 0x0, 0x0, &(0x7f0000000100)) 01:55:33 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591e6b3338ce381", 0x74, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 01:55:33 executing program 2: mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x800) 01:55:33 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000002440)='/dev/input/mouse#\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 01:55:33 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) 01:55:34 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000013c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) 01:55:34 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000200)={0x0, 0x0, 0x0, @stepwise}) 01:55:34 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591e6b3338ce381", 0x74, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 01:55:34 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x1, &(0x7f0000000180)=@raw=[@jmp], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x58], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:55:34 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x2, &(0x7f0000000000)=@raw=[@map_val], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:55:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000fd29d7021d9b445ee41db234663b", @ANYRES16=r1, @ANYBLOB="010000000000000000000800000004000280180001801400020073797a5f74756e000000000000000000"], 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x1, 0x0, 0x40, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x44}, 0x1, 0x10, 0x8, 0x6}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="e3030001", @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf250100000004000300040003000c00018008000100", @ANYRES32=r2, @ANYBLOB="0400030004000300040003000c00018008000100c42e5b2b8cd9702c785d", @ANYRES32=r3, @ANYBLOB="60000280140001800800010003000000080001000e0000002c000180080001000600000008000100000000000800010004000000080001000000000008000100010000001c000180080001000100000008000100030000000800010006000000a00002803c000180080001000400000008000100080000000800010007000000080001000400000008000100000000000800010000000000080001000900000024000180080001000600000008000100040000000800010001000000080001000200000014000180080001000800000008000100080000000c00018008000100040000001c0001800800010004000000080001000d64ed6f0800010008000000"], 0x140}, 0x1, 0x0, 0x0, 0x20048841}, 0x4000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r4, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0x1403, 0x8, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) clone(0x20000, &(0x7f0000000000)="26027ffdcba7beb27ef2e10d83060478d5f7db511360676c47a05289d71c089f7c82ad15142228f96726d7b4afd0d2eb1d8aaf534e55bd5e06147c8f0a2d595e2725c37ff9b1fbc147f06b406628956b4174f037848d7bc9069b13efb7e7a171c23d171de3fbb230fca415c96ce6ff81ee4b4e471ad62bd328a269df7858e5a15ef7f587af29190c8498", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)="a1cb50fdd6a2b09aac5a380b0c137f9650c5ba15f032f65210") 01:55:34 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 01:55:34 executing program 4: add_key(&(0x7f0000000540)='ceph\x00', 0x0, &(0x7f00000005c0)="fd6b8e09fbc52c7e47677d3d", 0xc, 0xfffffffffffffffd) 01:55:34 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591e6b3338ce3816e", 0x75}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 01:55:34 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000013c0)={0x28, 0x0, 0x0, @host}, 0x10) 01:55:34 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@func]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x84, &(0x7f0000000100)=""/132, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:55:34 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591e6b3338ce3816e", 0x75}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 01:55:34 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:55:34 executing program 0: clock_nanosleep(0x0, 0x0, &(0x7f0000000400), 0x0) 01:55:34 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@call]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0), 0x10}, 0x78) 01:55:34 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2001) 01:55:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x40, 0x200000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00', r2) 01:55:34 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591e6b3338ce3816e", 0x75}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 01:55:34 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x3]}, 0x8}) 01:55:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x19, 0x0, 0x0, 0x2}, 0x40) 01:55:34 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 01:55:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd0a, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0xa820}, 0x4000) 01:55:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, &(0x7f0000000100)) 01:55:34 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591e6b3338ce3816e", 0x75, 0x20000004}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 01:55:34 executing program 2: syz_mount_image$omfs(0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[{0x0, 0x0, 0x400000}, {0x0}], 0x0, 0x0) 01:55:34 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:55:34 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2000}}, 0x0) 01:55:34 executing program 4: add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 01:55:34 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x12, 0x1ff, 0x0, 0x2}, 0x40) [ 574.914957][T32515] loop2: detected capacity change from 0 to 16384 01:55:35 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 01:55:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x8, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000005c0)={0x504, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6250}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x646}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xffffff7f}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1e263bd}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1098}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x504}, 0x1, 0x0, 0x0, 0x400e4}, 0x4000010) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002f00)={'vcan0\x00', 0x0}) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x40, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000280)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x7b, &(0x7f00000000c0)={r9, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000480)={r9, @in6={{0xa, 0x4e20, 0x9, @local, 0x401}}, 0x0, 0x7fff, 0x0, 0x2, 0x0, 0x7}, &(0x7f00000002c0)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7b, &(0x7f0000000080)={r7, 0x200, 0x3f}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000380)=ANY=[@ANYRES32=r10, @ANYBLOB="0000225c70fa2e6ee4504b7f6ba9fa09c60900000000000000634164754cd78d8061881e51dd5f2aff6cba7d3bdcf178d8d23bb36fd582484e669a1c42999f5d139a5ddda105ccb1add05ee4a2feb1198019fbedc787"], &(0x7f0000000100)=0x8) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000003000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x50, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44840}, 0x20000000) 01:55:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8902, &(0x7f0000000b00)={'wpan3\x00'}) 01:55:35 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591e6b3338ce3816e", 0x75, 0x20000004}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) [ 575.037916][T32515] loop2: detected capacity change from 0 to 16384 01:55:35 executing program 0: r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000), 0x4) [ 575.104545][T32529] __nla_validate_parse: 4 callbacks suppressed [ 575.104563][T32529] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:55:35 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0) 01:55:35 executing program 1: socket(0x0, 0xc883c028ffbbe5d9, 0x0) 01:55:35 executing program 1: syz_open_procfs$userns(0x0, &(0x7f0000000240)='ns/user\x00') 01:55:35 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591e6b3338ce3816e", 0x75, 0x20000004}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 01:55:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x223, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) 01:55:35 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/hwrng\x00', 0x0, 0x0) connect$rds(r0, 0x0, 0x0) 01:55:35 executing program 0: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0}) 01:55:35 executing program 1: syz_mount_image$nfs(&(0x7f00000000c0)='nfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x840, &(0x7f0000002340)=ANY=[]) [ 575.904023][T32543] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:55:36 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000002800)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000002c80)={0x0, 0x3, [{}, {}, {}]}) 01:55:36 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591e6b3338ce3816e", 0x75, 0x20000004}, 0x0) connect$inet(r1, 0x0, 0x0) 01:55:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8903, &(0x7f0000000b00)={'wpan3\x00'}) 01:55:36 executing program 3: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x3, 0xffffffffffffffff, 0x1}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000200)={0xa00000, 0x0, 0x200, r0, 0x0, &(0x7f00000001c0)={0xa00965, 0x3404, [], @p_u8=&(0x7f0000000180)=0x5}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x90100, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', r2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfbe}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x34}}, 0x0) 01:55:36 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x6, &(0x7f0000000040)=@framed={{}, [@ldst, @ldst, @call]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:55:36 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0x0, {}, {0x0, 0x0, 0x0, {}, {}, @ramp}}) 01:55:36 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm_plock\x00', 0x0, 0x0) read$char_raw(r0, 0x0, 0x0) 01:55:36 executing program 1: r0 = io_uring_setup(0x3bb, &(0x7f0000000040)={0x0, 0x69e1}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 01:55:36 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591e6b3338ce3816e", 0x75, 0x20000004}, 0x0) connect$inet(r1, 0x0, 0x0) 01:55:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x1f, 0x9, 0x30, @mcast1, @mcast1, 0x8, 0x1, 0xda1, 0x7fffffff}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x7, 0x8, 0x6, 0x8001, {{0xf, 0x4, 0x1, 0x0, 0x3c, 0x64, 0x0, 0x7f, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x19}, {[@timestamp={0x44, 0x1c, 0x74, 0x0, 0x6, [0x1, 0x8, 0x7, 0xc000, 0x9, 0x4]}, @timestamp={0x44, 0x8, 0x71, 0x0, 0x9, [0x80]}, @ra={0x94, 0x4}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendto$packet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_SLAVE2={0x8, 0x2, r11}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x58, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x58}}, 0x0) [ 576.302797][T32603] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:55:36 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3ea}, 0x10}}, 0x0) 01:55:36 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) 01:55:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x541b, 0x0) 01:55:36 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591e6b3338ce3816e", 0x75, 0x20000004}, 0x0) connect$inet(r1, 0x0, 0x0) 01:55:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003000000005f93600000000000500360000000000"], 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 576.382514][T32607] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 576.454559][T32607] device veth57 entered promiscuous mode [ 576.493772][T32603] device veth55 entered promiscuous mode 01:55:36 executing program 0: socket(0x18, 0x0, 0x60000000) [ 576.514949][T32624] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 576.527865][T32603] device veth55 left promiscuous mode 01:55:36 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0x40000000, 0x0) 01:55:36 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6}, 0x10}}, 0x0) [ 576.600631][T32632] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 01:55:36 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591e6b3338ce3816e", 0x75, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) [ 576.664516][T32607] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:55:36 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x1, &(0x7f0000000180)=@raw=[@jmp], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:55:36 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/hwrng\x00', 0x0, 0x0) write$cgroup_type(r0, 0x0, 0x0) 01:55:36 executing program 2: prlimit64(0x0, 0x0, 0x0, &(0x7f0000000040)) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400}}}}}]}}]}}, 0x0) 01:55:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x40) 01:55:36 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591e6b3338ce3816e", 0x75, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 01:55:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002680)={'caif0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002840)={&(0x7f00000026c0)={0x160, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 01:55:36 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/hwrng\x00', 0x0, 0x0) getpeername$llc(r0, 0x0, 0x0) 01:55:36 executing program 1: r0 = socket(0x25, 0x5, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) 01:55:37 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591e6b3338ce3816e", 0x75, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 01:55:37 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000002440)='/dev/input/mouse#\x00', 0x8, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, 0x0) [ 577.016155][T32665] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:55:37 executing program 1: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm_plock\x00', 0x0, 0x0) 01:55:37 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xffffff85, 0x0, 0x0) [ 577.103213][T32671] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:55:37 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x9, 0x0, 0x300) [ 577.147434][T32671] device veth61 entered promiscuous mode [ 577.176842][T32665] device veth59 entered promiscuous mode 01:55:37 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000700)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) [ 577.218528][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 577.232018][T32665] device veth59 left promiscuous mode [ 577.324980][T32671] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 577.458666][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 577.578831][ T7] usb 3-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 577.599256][ T7] usb 3-1: config 1 interface 0 has no altsetting 0 [ 577.759220][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 577.773198][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.783526][ T7] usb 3-1: Product: syz [ 577.787741][ T7] usb 3-1: Manufacturer: syz [ 577.794122][ T7] usb 3-1: SerialNumber: syz [ 577.819101][T32659] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 577.839758][ T7] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 578.053002][ T7] usb 3-1: USB disconnect, device number 8 01:55:38 executing program 2: syz_open_dev$mouse(&(0x7f0000000540)='/dev/input/mouse#\x00', 0x8, 0x2c002) 01:55:38 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591e6b3338ce3816e", 0x75, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) 01:55:38 executing program 1: keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000080), 0x0, 0x0, 0x0) 01:55:38 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4dfa4a4e"}, 0x0, 0x1}) 01:55:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x997159a9fba8523e, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x40) 01:55:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 01:55:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) 01:55:38 executing program 4: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 01:55:38 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591e6b3338ce3816e", 0x75, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) 01:55:38 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x8000000) 01:55:38 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000001440), 0x4) 01:55:38 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x2]}, 0x8}) 01:55:38 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="eb22685a3bdfad55e86b4da4b422d9b40e91e07e6d54631f6223a9e9a8a9e569e1f18701578249c459b30fd05b8bdb8139456a634636f12383cc9bc2889aafc8dd393534982aa1b6d3e62dda261800a42ce7a26b532958d3a163f1f983387a6e0bff753eb80235a87b69396ead6f22038f8f89b47d05d9595cab92c1d0b95c85d6c120601817a7302e5b35f35e5aa617519b27ec", 0x94}], 0x1, &(0x7f0000000340)="4209bea3891ef9bb9c051a76a45b3e8c2769e7b79476189e6f1f8ac85a282219acf1388a3ecedb1d0e7d6191409bbc3498717c371fdb3bbc9a9bf948afc122a15afc50a6eb9cc16e3c0f17ca7ca3437e2487fb293b1cfedd2aa15ff0324c984e592902f428fb4fb956c9bc3da591e6b3338ce3816e", 0x75, 0x20000004}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) 01:55:38 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000280)={r0}) 01:55:39 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0xc7c4dc965960eaba, 0x0) recvfrom$phonet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:55:39 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) 01:55:39 executing program 4: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000d40)=[{&(0x7f0000000a40)="e1", 0x1, 0xffffffff}], 0x0, 0x0) 01:55:39 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:55:39 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x4, 0x0, 0x0) 01:55:39 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0xc7c4dc965960eaba, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 01:55:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x10, 0x0, 0x0) 01:55:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) [ 579.219402][T32765] loop4: detected capacity change from 0 to 264192 01:55:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1e, 0x0, 0x0) 01:55:39 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x2802, 0x0) 01:55:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00', 0xffffffffffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00', r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0xac, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xe500}, {0x8, 0xb, 0x2f}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7742}, {0x6, 0x16, 0xffff}, {0x5}, {0x6, 0x11, 0xffb}, {0x8, 0xb, 0x3ff}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40820}, 0x4) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x4, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x400c045) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044000}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(r3, &(0x7f0000000a40)={&(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000640)=""/18, 0x12}, {&(0x7f0000000680)=""/95, 0x5f}, {&(0x7f0000000700)=""/94, 0x5e}, {&(0x7f0000000780)=""/82, 0x52}, {&(0x7f0000000800)=""/249, 0xf9}, {&(0x7f0000000900)=""/16, 0x10}], 0x6, &(0x7f00000009c0)=""/71, 0x47}, 0x40010003) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00', r6) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0)='SMC_PNETID\x00', 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="00000000534593fa9f0300000000007f2562589b34dcd255d3186abf0400000000000000240a158918648a9491badfaf9a6971adb5cb0711eb591a901a28110b79f13b2d08a63913cd9fe879042ef8fc22627bf0bc0720aff0c66de578f3f685f5cd2d3df1fa6a9a961913eb7e66be949c4cbff2985620cc06657e1075dd715bf48b63ede01c4c93d47b1af7abbdfae1577941e1c9fac2ac12e9200d44749bf072af019fb27d20ea32d30bad4c828becfafb2fcb40284a6a1d1c63a50d96290599870e41769a64d291aed04d4a0e8da939f53b41086c31d6cf7de5b8addc0d3e84f624e9b417b55ffb0bb45265782b0bcdef2fc7794a7bd280", @ANYRES32=0x0, @ANYBLOB="01000000000000000000021e00000900010073797a20"], 0x20}}, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(0xffffffffffffffff, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c00)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x5, 0x1, {}, 0x80000001}, 0x3) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x800) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="00012abd7000fddbdf25020000000500000001000000146aaf03c508e9e69ac9e8a6c9d5e59548fab1576009b4dc39cc141784849344472c81fe3ab4aec241d6cac3c8a06108ddebb71d91cb3805eff852f12395beedb37b2dd3cdd587521e7b"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x81) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) [ 579.354907][T32765] loop4: detected capacity change from 0 to 264192 01:55:39 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0x5451, 0x0) 01:55:39 executing program 1: syz_mount_image$omfs(0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000140)="e5", 0x1}, {&(0x7f0000000200)="10", 0x1}, {&(0x7f0000000380)="9f", 0x1, 0x400000}, {&(0x7f0000000480)='6', 0x1}, {&(0x7f0000000700)="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", 0x901, 0x8001}], 0x0, 0x0) 01:55:39 executing program 4: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000007c0)='keyring\x00', &(0x7f0000000800)={'syz', 0x3}, 0x0, 0x0, r1) 01:55:39 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0xa800, 0x0, 0x0) 01:55:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x8, &(0x7f0000001780)=ANY=[@ANYBLOB="18000000000f0000000000000410000018110000abaaf6d4f38fec9bcd8bf4c97e"], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000380)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:55:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r1, &(0x7f0000000380)="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", 0x16d, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x1c}}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000040)={@desc={0x1, 0x0, @desc2='\xe3U\xa7j\x11\xa1\xbe\x18'}}) [ 579.535831][ T328] loop1: detected capacity change from 0 to 16384 01:55:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000030"], 0x24}}, 0x0) 01:55:39 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x7, @pix_mp}) [ 579.741485][ T328] loop1: detected capacity change from 0 to 16384 01:55:39 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', r0) 01:55:39 executing program 0: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000), 0x0) 01:55:39 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @private2}, r1}}, 0x38) 01:55:39 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0xc7c4dc96596a42ba, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 01:55:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x5421, 0x0) 01:55:40 executing program 1: syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x341) 01:55:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x5421, &(0x7f0000000b00)={'wpan3\x00'}) 01:55:40 executing program 4: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, 0x0, 0x0) 01:55:40 executing program 5: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000004c0)={0xf7}, 0x20) 01:55:40 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 01:55:40 executing program 1: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') syz_mount_image$zonefs(&(0x7f0000000040)='zonefs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)) 01:55:40 executing program 0: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) 01:55:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 01:55:40 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x2, 0x0, 0x0) 01:55:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0xffffffffffffff2e}]}, 0x24}}, 0x0) 01:55:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="f1ed297fdb29f67350bee926024139f093b3da3b9d6b4931bf07853b79b500000000000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000800000004000280180001801400020073797a5f74756e000000000000000000"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffef3, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x909, 0x14000000, 0x0, {{}, {0x0, 0x4102}}}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7001414a000018001700000013000100017264703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40010) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x400, 0x70bd25, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x40500c0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={r2}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480)='nl80211\x00', r0) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x80, r5, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x40040c1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f00000013c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001380)={&(0x7f0000001040)={0x324, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x8000}, {0x8, 0xb, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xb120}, {0x5}, {0x6, 0x11, 0x101}, {0x8, 0xb, 0x25cd}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x80000000}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x16, 0xf44b}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7e5}, {0x8, 0xb, 0xffff}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0xfffc}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x7}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0xc000}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x400}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x800}, {0x6, 0x16, 0xe000}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x401}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x1f}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xcce6}, {0x5}, {0x6}, {0x8, 0xb, 0x10000}}]}, 0x324}, 0x1, 0x0, 0x0, 0x50}, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x41) preadv(r6, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x200832}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4038014}, 0xc4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000ec0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e80)={&(0x7f0000000440)={0xa34, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa95, 0x80}}}}, [@NL80211_ATTR_TID_CONFIG={0xb4, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa9}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8b}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xde}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xea}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x6cc, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x20}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x25cd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xa1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x16}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10000}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x614, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xda}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ac, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x6}, {0x0, 0xa}, {0x5, 0x4}, {0x4, 0x4}, {0x1, 0x2}, {0x7, 0x6}, {0x2, 0x8}, {0x0, 0x4}, {0x1, 0x3}, {0x4, 0x2}, {0x6, 0x1}, {0x0, 0xa}, {}, {0x3, 0x5}, {0x1, 0xa}, {0x0, 0x7}, {0x7}, {0x5, 0x4}, {0x2, 0x8}, {0x3, 0xa}, {0x1}, {0x3, 0x5}, {0x1, 0x6}, {0x1}, {0x1, 0xa}, {0x1, 0x9}, {0x3, 0x9}, {0x7, 0x5}, {0x5, 0x4}, {0x3, 0x3}, {0x0, 0x8}, {0x3, 0x7}, {0x7, 0xa}, {0x4, 0x2}, {0x5, 0x4}, {0x4, 0x9}, {0x0, 0x9}, {0x6, 0x9}, {0x0, 0x4}, {0x7, 0x8}, {0x3, 0x9}, {0x3, 0x1}, {0x4, 0x3}, {0x3, 0x7}, {}, {0x0, 0xa}]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x3, 0x9}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x6, 0x60, 0xc, 0x4, 0xb, 0xd996e1eed72f01c8, 0x5b, 0x4, 0x3, 0x66, 0xb, 0xc, 0x24, 0x36, 0x36, 0x60, 0xb94409c0eb514143]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xea, 0x4, 0x1, 0x61, 0x1ff, 0x1800, 0xaa0, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfffd, 0x4, 0x76, 0x3, 0xa000, 0x8001, 0xa4b]}}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x0, 0xc, 0x9, 0x18, 0x9, 0x60, 0xc, 0x6, 0x5, 0x12, 0x8c9912fa08cf7b01, 0x6, 0x6c, 0x30, 0x12, 0x9, 0x18, 0x6c, 0x1b, 0x6c, 0x3, 0x2, 0x16, 0x1b, 0x6c, 0x60]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x1, 0x16, 0x5, 0x6, 0x16, 0x4, 0x2, 0xb, 0x48, 0xc, 0xc, 0x0, 0x1b, 0x0, 0x16, 0x2, 0x2, 0x16, 0x18, 0x2, 0x30, 0x6c, 0x18]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x0, 0x6}, {0x0, 0x3}, {0x5, 0xa}, {0x0, 0x5}, {0x1, 0x8}, {0x5, 0x8}, {0x3, 0x4}, {0x7}, {0x0, 0x9}, {0x7, 0x4}, {0x0, 0x1}, {0x2, 0x9}, {0x4, 0x1}, {0x1, 0x7}, {0x1, 0xa}, {0x4, 0x6}, {0x6, 0x8}, {0x5, 0x5}, {0x3}, {0x4}, {0x3}, {0x1, 0x5}, {0x0, 0x3}, {0x5, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x7, 0x9}, {0x2, 0x8}, {0x5, 0x1}, {0x7, 0xa}, {0x6, 0x7}, {0x0, 0x7}, {0x2, 0x9}, {0x2, 0x9}, {0x3, 0x5}, {0x1, 0x6}, {0x0, 0x9}, {0x5, 0x4}, {0x1, 0x2}, {0x6, 0x1}, {0x0, 0x5}, {0x5, 0x7}, {0x1, 0x7}, {0x1, 0x9}, {0x5, 0x3}, {0x3, 0x5}, {}, {0x0, 0x3}, {0x5, 0x8}, {0x2}, {0x7, 0x3}, {0x7, 0x8}, {0x2, 0x1}, {0x6, 0xa}, {0x0, 0x9}, {0x7, 0x5}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x6}, {0x6, 0x4}, {0x3, 0x9}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x4, 0xff00, 0x4, 0x0, 0x8, 0xbd3]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x4, 0x9}, {0x7, 0x2}, {0x7, 0x5}, {0x5, 0x6}, {0x2, 0x5}, {0x6, 0x2}, {0x3, 0x1}, {0x4, 0x8}, {0x0, 0xa}, {0x1, 0x8}, {0x4, 0x6}, {0x1}, {0x7, 0x4}, {0x0, 0x9}, {0x4}, {0x4, 0x8}, {0x0, 0x9}, {0x7, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x12, 0x4, 0x60, 0x3, 0x1, 0x3, 0x6, 0x20, 0x48, 0x9, 0xc, 0xb, 0x1, 0x30, 0x36, 0x6c, 0x16, 0x4, 0x7, 0x5, 0xc, 0x72, 0x1b, 0x4, 0x2, 0x1b, 0x36, 0xc, 0x5]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x3, 0x18, 0x6c, 0x5, 0x12, 0x36, 0x2]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x4}, {0x6, 0x8}, {0x6, 0x4}, {0x5, 0x5}, {0x6}, {0x6}, {0x7, 0x8}, {0x5, 0x8}, {0x0, 0x1}, {0x7}, {0x6, 0x9}, {}, {0x0, 0x6}, {0x4, 0x4}, {0x4, 0x5}, {0x7, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x6, 0x9}, {0x3, 0x7}, {0x6, 0x1}, {0x5, 0x4}, {0x1, 0x7}, {0x7, 0x8}, {0x7, 0x6}, {0x3, 0xa}, {0x0, 0x9}, {0x0, 0x8}, {0x1, 0x5}, {0x6}, {0x0, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x444, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x7, 0x237, 0xfff8, 0x4, 0x3ff, 0xef]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x4, 0x2, 0xfff9, 0x5, 0x35, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0xb, 0x60, 0x6, 0x60, 0x0, 0x12, 0x1, 0xb, 0x24, 0x2, 0xc, 0x2, 0x2, 0x24, 0x12, 0x36, 0x30, 0x24, 0x1b, 0x65, 0x16, 0x2, 0xb, 0x60, 0x60, 0x1, 0x24, 0x6, 0x6c]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x5, 0x1}, {0x2, 0x8}, {0x2, 0x6}, {0x2, 0x3}, {0x5, 0x9}, {0x0, 0x8}, {0x1, 0x1}, {0x6, 0x3}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0xb, 0x1c, 0x2, 0x5, 0x1, 0x24, 0x5, 0x1b, 0x6, 0x19, 0x30, 0x9, 0x60, 0x5, 0xc, 0x2, 0x30, 0x6, 0x6, 0xc, 0x60, 0x30, 0x9, 0xb, 0x1b, 0x3, 0x2, 0x1b, 0x18]}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x1, 0xd1d3, 0x764, 0x8, 0x0, 0x87]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x5}, {0x2, 0xa}, {0x1, 0x1}, {0x3, 0x7}, {0x7, 0x4}, {0x1, 0x8}, {0x1, 0x9}, {0x6, 0x6}, {0x5, 0xa}, {0x4, 0x8}, {0x1}, {0x0, 0x9}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x1, 0x2}, {0x7, 0x8}, {0x1, 0x8}, {0x3, 0xa}, {0x7}, {0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x4, 0x6}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0xa}, {0x2}, {0x0, 0x1}, {0x7, 0x2}, {0x1, 0x8}, {0x7}, {0x6, 0x7}, {0x4, 0x5}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0xa}, {0x4, 0x7}, {0x2, 0x7}, {0x3, 0x3}, {0x1, 0x5}, {0x6, 0x8}, {0x2, 0xa}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x1}, {0x7, 0x9}, {0x2, 0x4}, {0x2, 0x5}, {0x7, 0x2}, {0x5, 0x1}, {0x6, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x1, 0x3}, {0x2, 0x2}, {0x0, 0x5}, {0x6, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x9}, {0x4, 0x1}, {0x4, 0x5}, {0x0, 0x4}, {0x6, 0xa}, {0x1, 0x9}, {0x4, 0x8}, {0x7, 0x4}, {0x2, 0x5}, {0x6, 0x9}, {0x0, 0x7}, {0x6, 0x5}, {0x4}, {0x0, 0x9}, {0x1, 0x8}, {0x7, 0x4}, {0x1, 0x4}]}]}, @NL80211_BAND_6GHZ={0xf4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x48, 0x60, 0x5, 0x2, 0x1, 0x24, 0x6c, 0x1, 0x2, 0x4, 0x1, 0x2, 0x5, 0x6c, 0x6c, 0x3, 0x1b, 0x12, 0x4, 0xb, 0x9, 0x6d, 0x36, 0x60, 0x4, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0x3}, {0x0, 0x9}, {0x5, 0x2}, {0x1}, {0x3, 0x4}, {0x4, 0x3}, {0x1, 0x1}, {0x0, 0x7}, {0x4, 0x5}, {0x0, 0x4}, {0x1, 0x3}, {0x7}, {0x1, 0x2}, {0x1, 0x6}, {0x3, 0x3}, {0x3, 0xa}, {0x1, 0x4}, {0x6, 0x5}, {0x7}, {0x5, 0x5}, {0x1, 0x6}, {0x3}, {0x3, 0x9}, {0x3, 0x8}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x5}, {0x2, 0x8}, {0x1, 0x7}, {0x2, 0x2}, {0x0, 0x1}, {0x6, 0x1}, {0x0, 0x8}, {0x5, 0x5}, {0x3, 0x3}, {0x3, 0x8}, {0x2, 0x4}, {0x6, 0x6}, {0x2, 0x9}, {0x0, 0x6}, {0x7, 0x9}, {0x0, 0x8}, {0x4, 0x4}, {0x6, 0xa}, {0x2, 0x1}, {0x7, 0x4}, {0x6, 0x2}, {0x3, 0x3}, {0x7, 0x1}, {0x3, 0x8}, {0x1, 0x5}, {0x3, 0x5}, {0x1, 0x3}, {0x7, 0x8}, {0x0, 0x4}, {0x3, 0x4}, {0x5, 0x3}, {0x2, 0x4}, {0x5}, {0x3}, {0x0, 0x1}, {0x6, 0x4}, {0x7, 0x6}, {0x7, 0x9}, {0x1, 0x8}, {0x7, 0x4}, {0x2, 0x7}, {0x0, 0x5}, {0x5, 0x8}, {0x5, 0xa}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x6, 0x5}, {0x1, 0x5}, {0x3, 0x4}, {0x0, 0x6}, {0x0, 0x2}, {0x2, 0x2}, {0x0, 0x4}, {0x5, 0x8}, {0x0, 0x1}, {0x3, 0x9}, {0x1, 0x6}, {0x2}, {0x7, 0x3}, {0x7, 0x6}, {0x1, 0x7}, {0x5, 0xa}, {0x3, 0x1}, {0x6, 0x7}, {0x2, 0x7}, {0x4, 0xa}, {0x4, 0x4}, {0x1, 0x1}, {0x4, 0x7}, {0x1}, {0x5, 0x4}, {0x0, 0xa}, {0x5, 0x2}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x6, 0x6}, {0x2, 0x1}, {0x4, 0x5}, {0x2, 0x2}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x8}, {0x6}, {0x7, 0x3}, {0x6, 0x1}, {0x4}, {0x7, 0x2}, {0x6, 0x6}, {0x2}, {0x5, 0x8}, {0x7, 0x2}, {0x2, 0x7}, {0x7, 0x7}, {0x7, 0x3}, {0x1, 0xa}, {0x7, 0x2}, {0x4, 0xa}, {0x2, 0x8}, {0x4, 0x7}, {0x7, 0x9}, {0x4, 0x8}, {0x7, 0x7}, {0x1, 0x6}, {0x2, 0x8}, {0x6, 0x19}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x6c, 0x24, 0x4, 0x16, 0x6, 0x9, 0x6c, 0x1, 0x0, 0x16, 0x60, 0xb, 0x48, 0x30, 0x18, 0x36, 0xb, 0xb, 0x36, 0x18]}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x1}, {0x1, 0x3}, {0x2}, {0x0, 0x1}, {0x7, 0x9}, {0x4, 0x5}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x4}, {0x7, 0xa}, {0x6}, {0x2, 0x4}, {0x4}, {0x7, 0x2}, {0x1, 0x6}, {0x5, 0x8}, {0x1, 0x9}, {0x5, 0x6}, {0x0, 0x1}, {0x2, 0x8}, {0x2, 0x8}, {0x2, 0x9}, {0x6, 0x6}, {0x0, 0xa}, {0x5, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff80, 0x7ff, 0x7fff, 0x401, 0x2, 0x7, 0x1000, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xe0, 0x400, 0x3, 0x4, 0x7, 0xf65d, 0x9]}}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x60, 0x60, 0x5, 0x1b, 0x60, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x60, 0x36, 0xc, 0x9c9bad8bfd2bb668, 0x60, 0x2, 0x2, 0x60, 0x24, 0x24, 0x48, 0x16, 0x60, 0x1, 0x12, 0x12, 0x5, 0x6c, 0xc, 0xc, 0x16, 0x18, 0x48, 0x18, 0x3, 0x60, 0x24, 0x2, 0x69, 0x9, 0x0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x5, 0x3}, {0x5}, {0x7, 0x2}, {0x6, 0x5}, {0x6, 0xa}, {0x0, 0x6}, {0x7, 0x5}, {0x5, 0x3}, {0x0, 0x7}, {0x1, 0xa}, {}, {0x3, 0x7}, {0x0, 0x6}, {0x2, 0x9}, {0x6, 0x7}, {0x7, 0x6}, {0x1, 0x7}, {0x4}, {0x1, 0x4}, {0x4, 0x2}, {0x1, 0x2}, {0x0, 0x6}, {0x0, 0x2}, {0x3, 0x6}, {0x6, 0x6}, {0x1, 0x1}, {0x3, 0x8}, {0x0, 0x9}, {0x7, 0x4}, {0x2, 0x6}, {0x5, 0x2}, {0x2, 0x1}, {0x5, 0x4}, {0x1, 0x5}, {0x7, 0x2}, {0x5, 0x2}, {0x0, 0x6}, {0x0, 0x7}, {0x1, 0x5}, {0x3, 0x4}, {0x2, 0xa}, {0x5, 0x9}, {0x0, 0xa}, {0x2, 0x7}, {0x1, 0x7}, {0x1, 0x6}, {}, {0x7, 0x2}, {0x3, 0x6}, {0x7, 0x3}, {0x6, 0x3}, {0x0, 0x4}, {0x4, 0x8}, {0x3}, {0x4, 0x4}, {0x4, 0x2}, {0x1, 0x7}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x10}, {0x7, 0x3}, {0x5, 0xa}, {0x2, 0xa}, {0x0, 0xa}, {0x1, 0x9}, {0x5, 0x8}, {0x6, 0xa}, {0x3, 0x9}, {0x6, 0xa}, {0x2, 0xa}, {0x4, 0x1}, {0x5, 0x4}, {0x0, 0x8}, {0x4, 0x1}, {0x2, 0x7}]}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x4, 0x8}, {0x3, 0x3}, {0x1, 0x8}, {0x0, 0x5}, {0x2, 0x3}, {0x7, 0x7}, {0x6, 0x1}, {0x6, 0x8}, {0x1, 0x3}, {0x4}, {0x2, 0xa}, {0x0, 0x1}, {0x7, 0x2}, {0x5, 0x5}, {0x2, 0x1}, {0x2, 0x5}, {0x7, 0x4}, {0x0, 0xa}, {0x3, 0x2}, {0x4, 0x9}, {0x5, 0x5}, {0x4, 0x2}, {0x1, 0xa}, {0x1, 0x9}, {0x5, 0x5}, {0x5, 0x4}, {0x1, 0x7}, {0x2, 0x9}, {0x0, 0x8}, {0x1, 0x3}, {0x1, 0x6}, {0x3, 0x2}, {0x0, 0x1}, {0x3, 0x4}, {0x3, 0x3}, {0x3, 0x4}, {0x4, 0x2}, {}, {0x4, 0x1}, {0x4, 0x4}, {0x6, 0x7}, {0x1, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x6, 0x1}, {0x2, 0x9}, {0x4, 0x6}, {0x0, 0xa}, {0x2, 0x7}, {0x2, 0x8}, {0x0, 0x3}, {0x6}, {0x0, 0x9}, {0x6, 0x3}, {0x3, 0x7}, {0x4}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0x9}, {0x6, 0x5}, {0x0, 0x3}, {0x0, 0x7}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x7}, {0x0, 0xa}, {0x4, 0x4}, {0x7, 0x6}, {0x7}, {0x2, 0x5}, {0x5, 0x5}, {0x4, 0x4}, {0x5, 0x9}, {0x4, 0x3}, {0x5, 0xa}, {0x5, 0x4}, {0x1}, {0x0, 0xa}, {0x5, 0x2}, {0x6, 0x7}, {0x3, 0x8}, {0x1, 0x9}, {0x2, 0x4}, {0x4, 0x6}, {0x6}, {0x2, 0x6}, {0x1, 0x4}, {0x0, 0x8}, {0x0, 0x6}, {0x1, 0xa}, {0x4}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x5, 0x1}, {0x3, 0x9}, {0x5, 0x6}, {0x6, 0x3}, {0x3, 0x7}, {}, {0x5, 0x8}, {0x1, 0x3}, {0x7, 0x2}, {0x3, 0x3}, {0x7, 0x1}, {0x3, 0x3}, {0x1, 0x5}, {0x1, 0x8}, {0x3}, {0x2}, {0x2, 0x8}, {0x5, 0xa}, {}, {0x0, 0x1}, {0x4, 0x8}, {0x2, 0x5}, {0x0, 0x4}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x3, 0x16, 0x24, 0x30, 0x22, 0x9, 0x5, 0x1, 0x36, 0x36, 0x36, 0xc, 0x18, 0x3, 0xc, 0x12, 0x36, 0x20, 0x16, 0x2, 0x1, 0x48, 0x0, 0x9, 0x12, 0x5, 0x30, 0x16, 0x48, 0x3, 0x36, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0x1, 0x3, 0x3, 0x24, 0xc, 0x6, 0x48, 0x6, 0x36, 0x3, 0x3d, 0x48, 0x24, 0x9, 0x11, 0x30, 0x2]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4383, 0x7b5, 0x1, 0x800, 0x3ff, 0x0, 0xffff]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0xff3c, 0x865, 0x3, 0x7, 0x4e, 0x100]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x6c, 0x1b, 0x17, 0x36, 0x1, 0x7a, 0x30, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x48, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x168, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x158, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xf0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x8}, {0x3, 0x3}, {0x2, 0x5}, {0x1, 0x8}, {0x6, 0x8}, {0x5, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x3, 0x9}, {0x2, 0x3}, {0x2, 0xa}, {0x1, 0x3}, {0x6, 0x7}, {0x1, 0x5}, {0x0, 0x7}, {0x5, 0x3}, {0x0, 0xa}, {0x7, 0x6}, {0x5, 0x7}, {0x3, 0x9}, {0x7, 0x6}, {0x2, 0x5}, {0x6, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x401, 0x328, 0x6, 0x7c, 0x8, 0xfffa, 0x7]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x1}, {0x4, 0x5}, {0x7, 0x6}, {0x7}, {0x2, 0x1}, {0x5}, {0x6, 0x3}, {0x7, 0x3}, {0x2, 0x7}, {0x0, 0x6}, {0x7, 0x3}, {0x1, 0x1}, {0x6, 0x6}, {0x6, 0x5}, {0x5, 0x1}, {0x4, 0x8}, {0x6, 0x2}, {0x4, 0x7}, {0x0, 0x2}, {0x5, 0xa}, {0x1, 0x8}, {0x4, 0xa}, {0x1, 0x6}, {0x3, 0x7}, {0x6, 0x3}, {0x1, 0x9}, {0x3, 0x1}, {0x7, 0x2}, {0x3, 0x7}, {0x7, 0x2}, {0x2, 0x7}, {0x3}, {0x6, 0xa}, {0x2, 0x6}, {0x7}, {0x6, 0x3}, {0x3, 0xa}, {0x4, 0x5}, {0x7, 0x4}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x34b, 0xef8, 0x100, 0x627, 0x8, 0xf000]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x60, 0xc, 0x30, 0x6, 0x4, 0x2, 0x4, 0x6c, 0x0, 0x6c, 0x9, 0x3, 0x0, 0x24, 0x1b, 0x2a, 0x9, 0x36, 0x9, 0x18, 0x12, 0x43, 0xb, 0x4, 0x1b, 0xc, 0x4, 0xa71e6a31789b2bcc]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x1, 0x3}, {0x2, 0x7}, {0x6, 0xa}, {0x5, 0x9}, {0x3, 0x9}, {0x0, 0x2}, {0x0, 0x1}, {0x5, 0x3}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x0, 0x4}, {0x7, 0x6}, {0x6, 0xa}, {0x2, 0x5}, {0x6, 0x9}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x6, 0x3}, {}, {0x1, 0x2}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x3}, {0x7}, {0x5, 0x1f}, {0x2, 0x5}, {0x7}, {0x7, 0xa}, {0x6, 0x2}, {0x3, 0x2}, {}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x7fff, 0x5e55, 0x1ff, 0x3ff, 0xfffe, 0x401]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0x60, 0x12, 0x4, 0x30, 0x48, 0x18, 0x3, 0x6, 0xb, 0x60, 0x18, 0xb, 0x30, 0x18, 0xc, 0x24, 0x5, 0xb, 0x24, 0x19e2873b47d76128, 0x2, 0x12, 0x1, 0x3]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x2, 0x9}, {0x2, 0x2}, {0x2, 0x7}, {0x0, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x36, 0x36, 0x4, 0x70, 0x4, 0x5, 0x3, 0x48, 0x3, 0x5, 0x9, 0xc, 0x1b, 0x5, 0x60, 0x12, 0x6c, 0x30, 0x36, 0x47, 0x4, 0x30, 0x60, 0xf, 0x1b, 0x0, 0x36, 0x60, 0x73, 0x24, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x4, 0x20, 0x7f, 0x3f, 0x8000, 0x9186]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7c}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x101}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xae}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x59}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffff}]}]}]}, 0xa34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendto$inet(r6, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', r6) 01:55:40 executing program 5: setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) 01:55:40 executing program 0: fchownat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xee00, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc) keyctl$chown(0x4, 0x0, 0x0, 0x0) 01:55:40 executing program 1: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x3, 0x0) 01:55:40 executing program 4: r0 = io_uring_setup(0x5828, &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 580.501275][ T394] __nla_validate_parse: 1 callbacks suppressed [ 580.501296][ T394] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 01:55:40 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8}, 0x0) 01:55:40 executing program 2: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x46b80, 0x0) 01:55:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@ldst, @ldst]}, &(0x7f0000000080)='syzkaller\x00', 0xb181, 0xf0, &(0x7f00000000c0)=""/240, 0x41000, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x5, 0x2, 0x6}, 0x10}, 0x78) 01:55:40 executing program 1: syz_mount_image$omfs(0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000700)="22f0f0a82833ffaaf84746fc0d3208c848fa94138b42d2c5b87ff50661386ecd9b21090def8bfd5b52e5704eaf4bb2b70c2aa106b48a782b74844f6e701c9ff2c0584de90529760c7d378e2e8fe5f489a18a515c5f5178187bdf554aec007717c5204aaa7969771defef78055bb10c66dc5f7bf52d010bb4f2f396674deddd2a780e0f794943a1d697e1e89c8d25668f1e005eb50377da16e4016a530961a43704050a86b4bcb05e7395c5f2fcf004c8204bbb1afe1f44c818d311c4616f1abfd214bd8f2bd411a2fc72015a5da484017edeb20d0884e19d695fc19a430a46a1d445c9556e15ca0bafd52d654d554d1eefebd2ce02c1ff9b7c3821c772dd29da630e4a5233e6055e56dc8b2bfd8372fb087262cc25b710c4fe002309e09b9205faa8707c4a8f83625d86d64899cbb012312a9c794ec4147d1798d3bd3280eb7e8b741e7c2f2e0d4e6eea55eb56324f7ffe872c4d26d2d0766524f749b1b047f04e3cdc18efea9f32673401552d542bca3e3798a59e9348e4c07c1dbc382aded531cac60997bae865e44519c4e2ba4b2766030e8cc428a40c5d799c75a006eaa17fdf65215bad6457904dbff29d595c0396b4b3e55378e785eafae9f312b251291825f9be28c5b148b0611f4bedf99fa0870bc76c42528f31bb2daa7f60a02f20f7e3222df70b730f8b587c1b8607b2a7d98c0e4b1368d9cecb4e34402a87f89bab29a3cde6d2737c1fd71d644fe6d3fae12de64a66c230439596a66fc850df5943ba74bd39ad8625a884d4378ff644c35ef7333ffb67533ab4c289afe850c9785e91a7fb4301ea4ff7e34bda361f98de581c1e3f0008883803972f5b5a00b1716fee2f5581257cc9bdab20057bb9798febe350675bc1b058b15c3a638e9b21c6eb484487319cee9bca30cacc08eae1eaffd3d17b9410e55de933b38ae082ad0b80b4ed13b53b352244eba82b5a948f8b2bd13bc472d4c6e036e598abf215702223e15e2d4ecb95d774620044a41f182d88931b27c03379a33c47c96c39ca2417ae968411b0e4282612a4c937a4c7304e20559926a5d2215811f5ab867c2b3fb7ade313c207c4c74d64904030312f4f18e76644a1ed2b9a8c4f319c7ed369a6a60f9fbc121e78652cb696f003144c515e38f6c77c421b4af085691e1741d6981809284ca155c5730310e228d704366fb8643160a9bc439c678719abbeb75ff9fbeca26f51250567df148ec22cdfcdfbb9e4d1bb550d92e97ac9e0b401a10dbf73385b5f9af7de240ddf88a5d42f3eae53f187c1924c451a06339deefd4df3686d5f1d4f01a9a15e53483f1f09bd3001ab92ac0213e686b19a463b345adca185dec707e92bae11062d15383bc5001edfaf59bc86fdc197af5653921f386f83f449f84f9db3e2a9995ee8560cac2684f18b1bbd23493a55f086a0ae196a3e8e68af2d8676f4d40a29b1a6d0e849dfd92fd56b61c8663aef49b2484d8453e28259683ee1256c679e734bed6e7c897873092db1d70cff64ada92059601651a3436c49425b23bf88b62bd5480185a51ff47d71a517745f0a2f943e514423525efdd11be107ff467c30bfbc3fa57dfaa48b5adb29d3ecd6135549fc75bafe8a7cbf273e73588ff40294b792ff9e1844f8e5d01d6b6b9b5b024b19d8d068378d25f8b70de598830594379512e97f77241ce6d1c08a7d5c4f0a32d961ea779a790a6ea1719ac2028438624f6e466741b014553170c2176f44ec5e6ab88a509bca6122e5caf79e44b899af327a871e5f2822506df31cc9ca31c3c70782929ce0ed2ed48f713f08d1d8846f77357149da74fecd1a9381694be9c99aea60973f7cdb5f4ffc53b7c98e1731d0c7be1448922972faafe1fc5909e6a0e142b092b7dab6549d8ab8c336e9bce38dd4bcc52398ba18d3928d9edb81c891aa0f3ccbf48801d15eab2b55b8da7b24d17df8ce91745482ae16b98225a9ed7117bc0feddb2451634a326a7ae5e50a4e7882009366be12d6ce1d5f343bd5d2104d843dfc1eb6591a90fdd946b70df121754e29baf83f3cc395b01b3e45424048309f1d2b953d2f8316e2be62f9ce82557111edf0ada379470627864255180f1622dd194ffb68e2bdd3c96acc22b26623116c49402f24ca090f76d652b93190feb4b66617751cac1c8abecd116cca74d2211a4fc1b1a69d1d307f221e421bb85f350abe70a6a3b61584ace19b6a94fafbcfc80098d3057cf93ffe560f3dc64faee1261a50348001ac6644a731990deb903a3f2b069e63013a4528a675e77f2312d413756bde8ed7498183bf1315d055d2bb5cb50db43e67db0034168c1e1e156b6d83c54553e456d6dc16549ba892108ce562aa7d6a659cc56d77e34186e54ab8f899dc61a9b7615643175fba58fa5e883b23cd3e81c4d54e9802a3f1ba171721b5b39f6ddd4b9e3995b091233d8cbe7008eddec2a990e1badef10b914fcfe2d89f6d87a8ee381f386e459bded24a1aa3ceb4dcb8674060c78df134d5687db5b13ce93db277bd49c2c01c5c6fd6bfc5c793c69fe58f993892ee4a484a6ebcd5a7ac8305c65b2bb00cbfa11ae520c6541bafa45025b256b70c47f46ef90aaf815865875250349e669ede09f6f453f660ffe15bae39af5ca2521a5a6171fccad0b297bcd1c8e78b92d5cab768ae47bf03928a0985be45528ca5631504295efe99f0bd1bf4f5898f9db7d753ebe01b3550e6322b980dd77c575186be12aea58e33f2ce96f5625820b93a4f253b192a43c8d78db45e00fa64d035e8d0b53b3b208c089778eec2c7839534f9c3585bcc363be89eae8230e231ce4d4f4f33b7cd2afed62d17dabae7fbf32ced486bf177591e5a5ba001ed66010eed56cd7ad6b4a45a68280bb0fa6ec15af1c56737ece3599f2aff65a435f2b381df73dc5ba2b11608f667b0f23523be1d4e75acad4218f11246b99a73b369d572b73345e470fd30dc76f8c9f44c8d94148ad6b1c190ac70d292c5afc88174ffa77615b55cb026e3f415b5487323555c782d10e76ccd3c719cf2cde67d836e85a9c255edd5aac9ff1f399d487a2c62fc68105145b06fbd58f968b8bdb4c7fa0688dcb62e6329a76ae4310d4c7ccd8ed928bd952eefabbb901e6d31fa9c94c55a5bff62f69b22994e559cea021f3d8ed1ad51b9a8e3ca0b91f348644d85a2002e5e966910507679e2a1a96c64f3d5153808aa63a3ebdb4adeb7e438d895451f84c061a4d08af2d6c11216f43701aaa4c8585104b688d2d1122c968bf64931bf440ff3f36859f103fa7b55de9ed2828191ec16900400992e708710e345739cc50579fb40803efc11fbc9b2b4404262eb890ee1fcce24b6ba17d4aa2bd5815b8cee5ca27b0a87290e61210e7c02613f3ebec167937124336febab87dc552e02bd8eef67775831db8a11184875d3acd9ae1f9168646fd2f6701e1acedded6d2c821909b005c03fba1e3fb15ff00a0de96560a467e6ad23b620086ac68dbb862b29312b4218f69feb768c43b52903c2841f572f26b6cba4e2e29ce0e0a66fc165901b761067bdd142c8a482b16459420f329ee636ea55f16baccac8d3d40571cb526c8a8e68765290697dd0857a2e3aee66d8be1086e0eab4359e999fcb5338fb0e75fd4021baf1c4f35e1ac40e7ab810b5547809b74cc426273fe3190360cfb4b44fde3c66c3bccdc42d46b428beff5a98b9316644ac71b65630562452b52da864fa7764af76a5d85a1580fcb5dbd0f01de7df2209b2f76a83ad8b2173213854f3bf9e3444ee13d54a77e21237cf8b51c0dadd6413259a4acc9c58d2e2e98616ae21d6c4ad48e0cf264c941398d13afbc197a4df62c651eb2af1d1770eb88c82e80dd7b91c435d499a141d200e00dfdb88a25e3b2a85c4dc5d127e119ca7863109c91985148c756ee202d67d28209c2362f92cc856172d8f9ac20d3a6e18213d15bb7a9c654d7e98d690fbd62051d200a57a2a20bd58220d2188eb028017c20048c1d72006210284028b3b83a2eb90c7cdbcc7b6e90585fd55e7a77f12931db93f14ebe21a07c23e08c8e94f7df736e4edbcfa42e0519e06ab7b127f8dbe031ede581ad637ce9e477769464a5c5360d270bc4c7c1b374877ea87ab0bf3ff0d8f342ddad38b63a4fb65fe026ac046a3b9e5e0d62e3944874246d188c558aa6b515639d61de55221ac45954e0c12254c72a0bc03d293d1ff9ae7faf7c0e8192dc6ea1d3920eaeaef5f4d4cff4e7a70f8cb41a9746b2b4077cd35459bfa763d029c6a7809d6945b604fee765bf4e5498035509a317ef4e682e68cfdd1b36b964d1f3d6caa318895d14ccf4c21fd457c01869dba22614a88049ea040578891a67dfb31d0bd43175d44989a653e1505429be25778e88eecaa04e520e36ce1f3645021e243cd2e74bb474ea2d8980bd855a24f57264ad6370b736e08d19cbe54efc38851784b62b832e207847b008cadc7ad69f79c69a1b62183d4e61008129d944f6f486efd6e360dfc3cd5054cb985ab10c3e4ad37921f4f89cb3a481805ca8ffb5709c31c3df1f6114b6f8d85b1845705030a88a01bc9560878dd9cb9a1c240cdb06c1721b24938aa5ab067f7ac9cb90a4aadc94043d3e155720dd96d736fb2c4ec8bdfdeb8593e16c1441758d3c9018ec27647dd1dfb2fa62ceb46483edd6c5f2f57275fdfc6d5b6a83321106985a5920eb6e24b0cf8d980fc3da0c330b6d2feea9475743fa5a7d19eb3be6065887182059e8f0ce7c8db39a1ab1876dabc8c74a5ab71fdfc1a6218e6e7f66194028f88b31a0e0c2345a24be210af120623f992b80ad2c2af23b6a349ff03a7bc0f26ef68037c9809bbdb4003906f7d81a46fc7f52bcfbd70c2b8a586602194abfd2e5b1d2b0f25e673bc0a52237c855f4da26450d7cf8f519ae18e9294239896fd0174e9140305fc8f8ffdbcc7810c12708876e35c255ed7e9679e80e124e616f522133e6cb8943cea92b095e15b73eaabaa483e78889dcba677dcba710f432dba126ca9cc620d18fce1805d92cdddb07e3452e5fc4d64c26f1ddbecc23a525b6329de00ec5bfaf2b1c56f9ea22ae1f983b26c7c2cef0235f6e839cd483dee3ea0ae9e409308e09f801c7407e34fb8d7a28b0dec7ea866a043282a2717060d5c233dc2c440ddeff2e39c48a5e4b8aacd2b4faec51fc44094b817ee1a2f32ad5882258030722d330d3727544489568c39638c222138c0bfaf66ff73da69ce8583c440511f6e135ea91bc69ec66acc02880f4e4f3e60f93e99a2bb0aad2abb885eb5f0f1bc7621a6c65c0d50966330e2ed85c08ac5616066be2f71978138c70ebada1df16e7fc5c614f96d3c8490ea3684aa44925bad6a26ca4ae6ce869a2e15f895bc6d2decaf1bbc1b3043170289150ebdb56a756ce99ffe0e0e2defea187f620883385d6d9c682d187796b9887cdb159c31da4a170e0e432b5b1f20059ad77db38dfd1a466c32d6174b5b46a7b6b05ef0649b291f72c13add96ddb91e3c2281d8314d84335bc561cfe955166e6045ebc8836d19ec9fbcb6c799457cc6f5212f73be5d64a86bd1396e39132cbbf362632b810f14a6e66cd8b409c60803eabc15aae592c1b044a8878ba0a01ef3e0a8410f38e6fd906b10780b34ad85bdcb61051797016a4c6d1c843ced9d1a5c3dc2ab5848a8fc8e39d1c97c00564f9a0bedf11475288d42f96a21996f7527f1b549b32aa2131d3e3c3689cd9ef39ca6259533b20661bd6bd2519a875438f203208e639bfa0c44fd7b00b59ea9c3d83b9b1f120f319f7f7872e62f8e0cca", 0x1000, 0x8001}], 0x0, 0x0) 01:55:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=@deltclass={0x878, 0x29, 0x800, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff2}, {0x13, 0xfff1}, {0xa, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x3a}}, @tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0x83c, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x40}, @TCA_HTB_RTAB={0x404, 0x4, [0x100, 0x8, 0x703ebf73, 0x8, 0x4, 0x66, 0x1, 0x10000, 0x7, 0x2, 0x20, 0x8, 0x6, 0xa493, 0x6, 0x3ff, 0xa93, 0x5, 0xffffff19, 0x81, 0x3ff, 0x3, 0x80000000, 0x2, 0x2, 0x6, 0x101, 0x2, 0x401, 0x2, 0xed0, 0x1000, 0x6, 0x8, 0x6, 0x2, 0x10f5, 0x0, 0x20, 0x1f, 0x2, 0x8, 0x0, 0x8, 0xffff, 0x2, 0x9, 0x0, 0x965, 0x7f, 0x7, 0xfffff000, 0xfffffffb, 0x6, 0x85, 0x8, 0x4, 0x2, 0xfffffffc, 0x2, 0x3, 0x5, 0x1, 0x3, 0xea, 0x3f, 0x0, 0x22811591, 0x9, 0x40, 0x5, 0x62a, 0x8, 0xd04, 0x0, 0x5, 0x4, 0x9b89, 0x8, 0x5, 0x1ff, 0x100, 0x3f, 0x5, 0x3, 0x7ff, 0xd31, 0xfffffc00, 0x6c, 0x80000001, 0x6, 0x909, 0x9d, 0x22, 0x8, 0x4, 0x58, 0x6, 0x2, 0x40, 0xd4, 0x6, 0x29, 0x5cfd, 0x7, 0x7ff, 0xfff, 0x5b, 0x800, 0x7ff, 0xfffffffd, 0x4, 0x7fffffff, 0x1, 0x0, 0x401, 0xffff, 0xcd6a, 0x9632, 0x4, 0x7, 0x6, 0x9a47, 0xb25, 0x8, 0xffffffff, 0x1, 0xc4, 0xf5, 0x80, 0x1, 0x1, 0x100, 0x1, 0x40, 0xfef, 0x92, 0x1f, 0x7f, 0x6d16285d, 0x101, 0xd80, 0xffffffff, 0x80000000, 0x6, 0x1, 0x81, 0x80000000, 0x9b, 0x2800, 0x1, 0x3, 0x5, 0xfffff801, 0x4, 0x47, 0x7, 0xff, 0x8, 0x2, 0xa, 0x101, 0x22, 0x85e7, 0x4, 0x15e, 0x3, 0x800, 0x101, 0x1, 0x3, 0x0, 0x0, 0x101, 0x0, 0x9, 0xff, 0x3, 0x80, 0x401, 0x3, 0x1, 0x4, 0xf156, 0x1, 0x0, 0x401, 0x3, 0x7fffffff, 0xb5c, 0xfffffff7, 0x55, 0xfffffe74, 0xfffffff8, 0x7ff, 0xfff, 0xeec3, 0x8001, 0x3, 0x4, 0x100, 0xffffff80, 0x6, 0x8, 0x8, 0x0, 0x10001, 0x400, 0x3, 0x3, 0x26b58, 0x3, 0x9, 0x2, 0x4, 0x7ff, 0x7, 0x6, 0x8, 0x101, 0x1, 0x6, 0x3, 0x8, 0xc1, 0x8, 0x5b54, 0x0, 0x0, 0x0, 0x3be, 0x8, 0xfffff6f4, 0xfffffff8, 0x7fff, 0x20, 0x7, 0x6, 0x919, 0x200, 0x48, 0x9, 0x1, 0x1, 0x5, 0xc2, 0x14000, 0x7, 0x9, 0x1000, 0xfffffff8, 0x6, 0x6, 0x5, 0x3]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x8}, @TCA_HTB_RATE64={0xc, 0x6, 0xfad}, @TCA_HTB_CTAB={0x404, 0x3, [0xa1, 0x2, 0x2, 0x0, 0xcbd7, 0x1, 0x20, 0x1, 0x80000000, 0x1, 0xfa3, 0x5, 0x0, 0xfffffffc, 0x9, 0x8, 0x6, 0xffff, 0x6, 0xfffffffc, 0x4, 0x3, 0x3, 0x1000, 0x40, 0x7fffffff, 0x3f, 0x4, 0x7fff, 0x0, 0x8000, 0x401, 0x4aca, 0x3, 0x8, 0x3, 0x0, 0x4, 0x7, 0x4, 0x8, 0x8, 0xffffffff, 0x400, 0x6, 0x1, 0x6, 0x5, 0xfffffff9, 0x2, 0x0, 0x3ff, 0xfffffffe, 0x1, 0x401, 0xfffff475, 0x8, 0x3f, 0x6, 0x0, 0x5bbd6573, 0xfffffe01, 0x5, 0x8000, 0x7, 0x0, 0x2, 0xffffffff, 0x9f, 0x8, 0x0, 0x4, 0x4, 0x9, 0x81, 0x8, 0x7, 0x0, 0x7fffffff, 0x7, 0x3, 0xf21, 0x0, 0x2, 0x8001, 0x3f, 0x2, 0x71d7800, 0x8, 0x2400, 0x8, 0x7fff, 0x1, 0x3, 0x81, 0x9, 0x7, 0x5, 0x4, 0x3b0, 0x0, 0x4f, 0x9, 0x75, 0x6, 0x2e6e9326, 0xfffffffb, 0x7, 0x9, 0xdb26, 0x4, 0x8001, 0x7, 0x0, 0x7, 0x5, 0x5, 0x1, 0x9, 0x0, 0x3f, 0x2, 0x8, 0x2, 0x3ff, 0x7, 0x0, 0x6, 0xfff, 0x8001, 0x7, 0x2, 0x5, 0xf4c, 0xfffffffb, 0x4, 0x1, 0x100, 0x8, 0x80, 0x2, 0x3, 0x20, 0x2de93d0d, 0x2, 0x9, 0xff, 0x9fc6, 0x2, 0x15, 0x1000, 0x7, 0x23e, 0x3, 0x7, 0x400000, 0x5, 0x5, 0x80, 0xffffffff, 0x1, 0x1, 0x5, 0x40, 0x7fffffff, 0x7, 0x8001, 0xfffff3df, 0x79bc, 0x9, 0x1000, 0x1, 0x100, 0x6, 0xffff, 0x401, 0x6d3, 0x0, 0x1, 0xb5, 0xc5, 0x3f, 0x7, 0x9, 0xfffffff7, 0x38000000, 0x4, 0x101, 0xfffffffe, 0x0, 0x5, 0x3, 0xfe12, 0x7, 0x1ff, 0x1000, 0x7, 0x40, 0x8, 0x7f, 0x6, 0x101, 0x9, 0x4de8, 0x800, 0x0, 0x2, 0x400, 0x9, 0x95, 0x4e2, 0x627, 0x8, 0x80, 0x401, 0x1f, 0xef, 0x81, 0x347, 0x800, 0x1, 0xffffff7e, 0x1eb7800, 0x2, 0xd412, 0x7, 0xedd5, 0x9, 0x0, 0xffffffff, 0x10000, 0x4, 0x0, 0xe50, 0x6, 0x5, 0x6, 0x6, 0x0, 0x7fff, 0x6, 0xdde, 0x8, 0x1ff, 0x0, 0x8, 0x9, 0x8, 0x4, 0x80000000, 0xfffff32c, 0x2, 0xfffffffc, 0x2, 0xfffff001, 0xe9a]}, @TCA_HTB_RATE64={0xc, 0x6, 0xac}]}}, @tclass_kind_options=@c_sfb={0x8, 0x1, 'sfb\x00'}]}, 0x878}, 0x1, 0x0, 0x0, 0x4000081}, 0x40000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r3, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x818, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x48}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc354}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7ff}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x277}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x4001) 01:55:40 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001540)=0x3) 01:55:40 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003000"], 0x24}}, 0x0) 01:55:40 executing program 0: memfd_create(&(0x7f0000000000)='/dev/usb/hiddev#\x00', 0x4) 01:55:40 executing program 2: r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) connect$caif(r0, &(0x7f0000000080)=@util={0x25, "9bd7faf77a4b2da4e02f9f75bb2c2207"}, 0x18) [ 580.833125][ T419] loop1: detected capacity change from 0 to 128 01:55:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) [ 580.904693][ T425] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x19, 0x0, 0x0) 01:55:41 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000700)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000008c0)={0x3, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x0, 0x1], 0x1}}) 01:55:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00)='802.15.4 MAC\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, 0x0, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x1f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x0, 0x8, 0xaaa0}, @IEEE802154_ATTR_BCN_ORD={0xfffffffffffffec6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040891}, 0x4040811) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x1, 0x0, 0xfffffffc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0xfd}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0xffffffffffffff2e}]}, 0x24}}, 0x0) 01:55:41 executing program 1: r0 = io_uring_setup(0x73ac, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000000c0), 0x1) 01:55:41 executing program 5: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x1465cbb}, &(0x7f0000000100)={0x0, r0+60000000}, &(0x7f0000000200)={&(0x7f0000000140)={[0x63b]}, 0x8}) 01:55:41 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9c150000150001"], 0x159c}}, 0x0) 01:55:41 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:55:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x84}, 0x40) [ 581.231386][ T452] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:55:41 executing program 2: socketpair(0x0, 0x80000, 0x0, &(0x7f0000000b00)) 01:55:41 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) [ 581.300484][ T460] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:55:41 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x22, 0x0, 0x0) 01:55:41 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x50b40, 0x0) 01:55:41 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x5, @pix_mp}) 01:55:41 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@call]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, 0x0}, 0x78) 01:55:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) 01:55:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00', r0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x1a4, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0x18c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x4}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '$(+[&!\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, ':!]*&/#}.\'\xd8\'[+::-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xb6, 0x5, "cacb9ab6a906561677357134f0bb79986201e40a80fb90c5a050b7d757d4c0a690bd9777655c15c4c5008fa5e904bdfb33068477178064ad07e5a68a234241be529518dc0fe702d1fb218b3f38bdfb9d82abd0098da909b3f28423290ee4bd934f90b4636421452374499b0b4d5f5a87aa71932287dbaaefe5cd030631b088fae9763dd7bfce908ff2ef8f8fc0517cceae6ea808f0e62d7464fb83d20ffa9409c2cdb37c3c453550df1d43858c1294650876"}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9c}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '\x82\xaa\"jg\xdd9\xcc\xc6\x92Mn*F/ol\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}]}]}]}, 0x1a4}}, 0x0) 01:55:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r2, 0x223, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 01:55:42 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}], 0x30}, 0x44001) 01:55:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x12}, 0x40) 01:55:42 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000001c0)='/dev/video#\x00', 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x59565955, 0x0, @stepwise}) 01:55:42 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/hwrng\x00', 0x0, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, r0, 0x0, 0x0, 0x0}, 0x30) 01:55:42 executing program 2: socketpair(0x27, 0x0, 0x0, &(0x7f00000002c0)) 01:55:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000200)=0x9d2a, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = dup(r3) sendmmsg$inet6(r4, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x909, 0x0, 0x0, {{}, {0x0, 0x4102}}}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r6, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xaa0, 0x8, 0x4, 0xffffffff}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) 01:55:42 executing program 1: syz_open_dev$evdev(&(0x7f0000000700)='/dev/input/event#\x00', 0x0, 0x80000) 01:55:42 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0045878, 0x0) 01:55:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x12, 0x1ff, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x40) 01:55:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:55:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x5452, 0x0) 01:55:42 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000000)={0xfffffffffffffffe}, 0x0) 01:55:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="c4f779be", @ANYRES16=r1, @ANYBLOB="040028bd7000fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) 01:55:42 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x7, @raw_data="f7dcbe9cda9f186eea9523985b434474bbc86905711a5c7b6bab799f0464888543824ca060fd60340ca1f28abeb12fc882a7af04d64e4ab8702d84bfdd4c3df18793f74ddb498c10f660f34de5390be6362841fd632f7484c09e6f00cfa9bba4348038ef3cbafddf255cafd0872792753bc117afb3b3b4a6f398e7039b65f6a38be1a501331508013cbe2c5cde4e778f4937433e5cb41c04eb054d9488777f24c60167debf1273b23994a9af3992e8c541ca2115289807e25919be677d8f15fa01d2e8e8863821b8"}) 01:55:42 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:55:42 executing program 2: syz_open_dev$hiddev(&(0x7f0000000040)='/dev/usb/hiddev#\x00', 0x0, 0x0) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) 01:55:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x3d65ea18f2ede093, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x1c}}, 0x0) 01:55:42 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x0, 0x0, 0x0, 0x8}}) 01:55:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000040), 0x0, &(0x7f0000000380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private=0xa010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @multicast1}}}, @ip_retopts={{0x54, 0x0, 0x7, {[@rr={0x7, 0x17, 0x21, [@multicast1, @multicast2, @broadcast, @loopback, @rand_addr=0x64010102]}, @ssrr={0x89, 0x1b, 0xe4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x23}, @empty, @multicast1, @multicast2, @remote]}, @timestamp={0x44, 0x10, 0x25, 0x0, 0x5, [0x1, 0x7fffffff, 0x1fb]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0xf0, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x6b, 0x0, 0x7, [0x3db3eb4, 0x3, 0x6, 0x7fff, 0x800]}, @timestamp_addr={0x44, 0x3c, 0x23, 0x1, 0x3, [{@remote, 0x101}, {@rand_addr=0x64010101, 0x1}, {@local}, {@broadcast, 0x400}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x3c}, {@multicast2, 0x6}, {@rand_addr=0x64010102, 0x400}]}, @timestamp_prespec={0x44, 0x44, 0x75, 0x3, 0x8, [{@empty, 0x3}, {@remote, 0xdf4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback, 0x100}, {@loopback, 0x5e}, {@multicast2}, {@multicast2, 0x3}]}, @end, @cipso={0x86, 0x33, 0x2, [{0x1, 0x6, "4c9d76d1"}, {0x0, 0xc, "4a603569c082fdacdbb0"}, {0x1, 0x2}, {0x2, 0x2}, {0x1, 0x3, "e9"}, {0x7, 0x4, "5902"}, {0x6, 0x10, "ab9189cb82fc5566db3794482a77"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @generic={0x44, 0xa, "9132ac5857dfbad2"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xad}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x210}, 0x40000d0) 01:55:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r2, 0x223, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) 01:55:42 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) 01:55:42 executing program 2: socketpair(0x1e, 0x0, 0x101, &(0x7f0000000000)) 01:55:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8902, 0x0) 01:55:42 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x2}, 0x0) [ 582.873907][ T547] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:55:43 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000080)={'syztnl2\x00', 0x0}) 01:55:43 executing program 0: request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='!\x00', 0xfffffffffffffffd) 01:55:43 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x2}]}}) [ 582.976232][ T553] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:55:43 executing program 1: request_key(&(0x7f0000000400)='cifs.idmap\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)='wpan4\x00', 0x0) 01:55:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x21, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 583.084102][ T553] device veth65 entered promiscuous mode [ 583.127031][ T547] device veth63 entered promiscuous mode 01:55:43 executing program 0: syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x450101) [ 583.170146][ T547] device veth63 left promiscuous mode [ 583.283170][ T553] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:55:43 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000100)=[@acquire_done, @clear_death], 0x0, 0x0, 0x0}) 01:55:43 executing program 1: syz_io_uring_setup(0x574e, &(0x7f00000003c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3e85, &(0x7f0000000500), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) 01:55:43 executing program 4: syz_open_dev$char_raw(&(0x7f0000000040)='/dev/raw/raw#\x00', 0x1, 0x20041) 01:55:43 executing program 0: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x2aab}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 01:55:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x62c, r4, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x114, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x110, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x7}, {0x2}, {0x6, 0x7}, {0x1, 0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x4, 0x1f}, {0x6, 0x9}, {0x6, 0x8}, {0x0, 0x1}, {0x6, 0x8}, {0x6, 0x8}, {0x0, 0x6}, {0x1, 0x3}, {0x5, 0x1}, {0x5, 0xa}, {0x4, 0xa}, {0x3, 0x3}, {0x6, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0x9}, {0x4, 0x3}, {0x0, 0xa}, {0x0, 0x5}, {0x6, 0x8}, {0x1, 0x5}, {0x4, 0xa}, {0x4, 0x9}, {0x0, 0x4}, {0x7, 0x5}, {0x6, 0x9}, {0x1, 0x8}, {0x1, 0x8}, {0x1}, {0x5, 0x5}, {0x0, 0x3}, {0x0, 0x3}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x4}, {0x1, 0xa}, {0x7, 0xa}, {0x6, 0x9}, {0x1, 0x8}, {0x5, 0x2}, {0x1, 0xa}, {0x6, 0x7}, {0x2}, {0x4, 0x3}, {0x2, 0x9}, {0x7}, {0x5, 0x9}, {0x0, 0x5}, {0x3, 0x5}, {0x1, 0x9}, {0x7, 0x3}, {0x4, 0x4}, {0x0, 0x5}, {0x0, 0x8}, {0x1, 0x7}, {0x5, 0xa}, {0x3, 0xa}, {0x1, 0x2}, {0x4}, {0x0, 0x5}, {0x0, 0x6}, {0x2}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x5}, {0x1, 0x4}, {0x5}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x7}, {0x5, 0x3}, {0x1, 0x1}, {0x0, 0x5}, {0x7, 0x4}, {0x6, 0x8}, {0x3}, {0x7, 0x3}, {0x4, 0xa}, {0x2, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x328, 0x1f, 0x55, 0x80, 0x8, 0x4, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x3, 0x4, 0x24, 0x9]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x5}, {0x6, 0x4}, {0x0, 0x9}, {0x2, 0xa}, {0x2, 0x2}, {0x5, 0x2}, {0x6, 0x5}, {0x6, 0x3}, {0x6, 0x2}, {0x2, 0x5}, {0x2, 0x8}, {0x0, 0x7}, {0x7}, {0x4, 0x6}, {0x6, 0x8}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x1}, {0x5, 0xa}, {0x5, 0x5}, {0x2, 0x2}, {0x3, 0x8}, {0x6, 0x3}, {0x3, 0x4}, {0x4, 0x3}, {}, {0x1, 0xa}, {0x6, 0x2}, {0x3, 0x8}, {0x7}, {0x2, 0x8}, {0x5, 0x5}, {0x4, 0x2}, {0x7, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x3}, {0x7, 0x4}, {0x6, 0x8}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x2, 0x2}, {0x2, 0x7}, {0x7, 0x9}, {0x0, 0xa}, {0x0, 0x9}, {0x7, 0xa}, {0x5, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x1ff, 0x9, 0x14, 0x3, 0x0, 0x4, 0x80]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0xc, 0x30, 0x24, 0x6, 0x3, 0x1, 0x12, 0x18, 0x60, 0x6c, 0x18, 0x48, 0x18, 0x16, 0x4, 0x18, 0x16, 0xb, 0x6a, 0x36, 0x4, 0x1, 0x5]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0xc, 0xb, 0x16, 0xc, 0x30, 0xc, 0x18, 0xb, 0x48, 0x9, 0x1, 0x36, 0xb, 0x1b, 0x18, 0x4, 0x9, 0x4, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x130, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x5, 0x2}, {0x4, 0x3}, {0x6, 0x3}, {0x6, 0x2}, {0x0, 0x3}, {0x5, 0xa}, {0x7}, {0x1, 0x6}, {0x4, 0x2}, {}, {0x0, 0x5}, {0x5, 0x5}, {0x5, 0x7}, {0x1, 0xa}, {0x4, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x1, 0x5}, {0x1, 0x4}, {0x3, 0x6}, {0x7, 0x8}, {0x7}, {0x2, 0x2}, {}, {0x2, 0x4}, {0x6, 0x6}, {0x0, 0x3}, {0x1, 0x6}, {0x2, 0x6}, {0x0, 0x5}, {0x0, 0x7}, {0x1, 0x7}, {0x2}, {}, {0x0, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x4}, {0x5, 0xa}, {0x1, 0x4}, {0x5, 0x4}, {0x5, 0x2}, {0x3, 0x4}, {0x3, 0x2}, {0x1, 0xa}, {0x7, 0x4}, {}, {0x4, 0x4}, {0x6, 0xa}, {0x1, 0x7}, {0x6, 0x8}, {0x3, 0x1}, {0x5, 0xa}, {0x7}, {0x1}, {0x4, 0x1}, {0x2, 0xa}, {0x5, 0x9}, {0x0, 0x8}, {0x3, 0x9}, {0x0, 0x5}, {0x7, 0x9}, {0x7, 0xa}, {0x4, 0x9}, {0x6, 0x9}, {0x7, 0xa}, {0x2, 0x5}, {0x3, 0x5}, {0x6, 0x5}, {0x6, 0x2}, {0x2, 0x5}]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0x1}, {0x7}, {0x1, 0x6}, {0x3}, {0x1, 0x5}, {0x2}, {0x6}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x2}, {0x7, 0x8}, {0x1, 0x1}, {0x6}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0x1}, {0x6, 0xa}, {0x2, 0x1}, {0x1, 0xa}, {0x3, 0x7}, {0x0, 0x6}, {0x5, 0x9}, {0x1, 0x5}, {0x4, 0x3}, {0x5, 0x2}, {0x6, 0xa}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0x1}, {0x7, 0x3}, {0x1, 0x6}, {0x6, 0x5}, {0x1, 0xa}, {0x7, 0x4}, {0x4, 0x9}, {0x5, 0x3}, {0x1, 0xa}, {0x1, 0x3}, {0x6, 0x3}, {0x6}, {0x2, 0x2}, {0x1, 0x4}, {0x5, 0x3}, {0x5, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x7}, {0x1, 0xa}, {0x2, 0xa}, {0x1, 0x2}, {0x5, 0x5}, {0x0, 0xa}, {0x6, 0x6}, {0x6, 0x5}, {0x4, 0x1}, {0x6, 0x2}, {0x1, 0xa}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x4, 0x1}, {0x4, 0x1}, {0x3, 0x5}, {0x2, 0x5}, {0x3, 0x4}, {0x5, 0x8}, {0x7, 0x2}, {0x3, 0xa}, {0x6, 0x7}, {0x6, 0x1}, {0x0, 0x7}, {0x3, 0x2}, {0x5, 0x8}, {0x3, 0x7}, {0x0, 0x4}, {0x1}, {0x0, 0x8}, {0x7}, {0x7, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x4}, {0x4, 0x6}, {0x7, 0x8}, {0x3, 0x6}, {0x7}, {0x1, 0x4}, {0x2, 0x2}, {0x7, 0x9}, {0x3, 0x8}, {0x7, 0x9}, {0x5, 0x7}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x7}, {0x6}, {0x4, 0x9}, {0x5, 0x9}, {0x2}, {0x2, 0x1}, {0x7, 0x4}, {0x6, 0x8}, {0x0, 0x2}, {0x2, 0x1}, {0x0, 0x5}, {0x2, 0x6}, {0x3, 0x7}, {0x1, 0x1}, {0x2, 0x8}, {0x1, 0x4}, {0x4, 0x6}, {0x6}, {0x5, 0x3}, {0x1, 0x7}, {0x3, 0x1}, {0x1, 0x2}, {0x5, 0xa}, {0x1, 0x1}, {0x6, 0x5}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x3, 0x2}, {0x7, 0x7}, {0x0, 0x1}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x7}, {0x3, 0x3}, {0x0, 0x8}, {0x0, 0x8}, {0x2, 0x8}, {0x0, 0x7}, {0x7, 0x7}, {0x3, 0x5}, {0x6, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2, 0x2}, {0x6}, {0x6, 0xa}, {0x3, 0x9}, {0x0, 0x5}, {0x1, 0x7}, {0x5, 0x5}, {0x0, 0x2}, {0x1, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x5, 0x4}, {0x1, 0x3}, {0x1, 0x5}, {0x1, 0x6}, {0x0, 0x6}, {0x4, 0xa}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x4}, {0x3, 0x2}, {0x2, 0x7}, {0x2, 0x3}, {0x0, 0x5}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x128, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0xb26348a925603497}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x0, 0x9}, {0x2, 0x9}, {0x1, 0x3}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0xa}, {0x4, 0x4}, {0x4, 0x7}, {0x3, 0xa}, {0x4, 0x9}, {0x4, 0x5}, {0x7, 0x2}, {0x2}, {0x4, 0x5}, {0x5, 0x6}, {0x1, 0x9}, {0x5, 0x5}, {0x5, 0x1}, {0x0, 0x8}, {0x0, 0x9}, {0x1, 0x8}, {0x4, 0x1}, {0x4, 0x5}, {0x4, 0x5}, {0x7, 0x5}, {}, {0x0, 0x4}, {0x0, 0xa}, {0x0, 0x7}, {0x4, 0x2}, {0x4, 0x7}, {0x6}, {0x7}, {0x1, 0x1}, {0x6, 0x5}, {0x4, 0x7}, {0x3, 0x6}, {0x0, 0x9}, {0x3, 0x6}, {0x0, 0x6}, {0x3, 0x1}, {0x4, 0x5}, {0x3, 0x2}, {0x1, 0x7}, {0x3, 0x7}, {0x0, 0x2}, {0x1, 0x1}]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x30, 0x4, 0x2, 0x16, 0x3, 0x6c, 0x30, 0x48, 0xc, 0xb, 0x48, 0x2, 0x0, 0x1, 0xb, 0x9, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x33, 0x2, 0x3ff, 0xffae, 0xe16, 0x3]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4, 0x24, 0x1b]}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x18, 0x4, 0x2, 0x6c, 0x9, 0x36, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x3f, 0x1, 0x7, 0x6, 0x1, 0x7, 0xfff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x8}, {0x7, 0x1}, {0x2, 0x6}, {}, {0x1}, {0x1, 0x6}, {0x0, 0x5}, {0x0, 0x7}, {0x0, 0x2}, {0x2}, {0x3, 0x7}, {0x7, 0x3}, {0x3, 0x1}, {0x5}, {0x0, 0x6}, {0x7, 0x9}, {0x1, 0x2}, {0x4, 0x7}, {0x1, 0x7}, {0x1, 0xa}, {0x7, 0x7}, {0x6, 0x6}, {0x6, 0x4}, {0x3, 0x5}, {}, {0x5, 0x7}, {0x5}, {0x6, 0xa}, {0x0, 0x3}, {0x0, 0x7}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x3}, {0x1}, {0x5, 0x7}, {0x7, 0x9}, {0x0, 0x5}, {0x6, 0x3}, {0x0, 0x4}, {0x7, 0x2}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x0, 0x24, 0x30, 0x4]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x6, 0x3}, {0x0, 0x7}, {0x7, 0x7}, {0x6, 0x2}, {0x3, 0x9}, {0x5, 0x6}, {0x7, 0x3}, {0x2, 0x2}, {0x7, 0x5}, {0x7, 0x4}, {0x5}, {0x5, 0xa}, {0x7, 0x5}, {0x5, 0x2}, {0x4, 0x9}, {0x4, 0x6}, {0x1, 0x9}, {0x1, 0x7}, {0x1, 0x1}, {0x0, 0x8}, {}, {0x4, 0xa}, {0x0, 0xa}, {0x0, 0x6}, {0x7, 0x2}, {0x7, 0x3}, {0x2, 0x8}, {0x0, 0xa}, {0x7, 0x5}, {0x0, 0x6}, {0x2, 0x2}, {0x2, 0x8}, {0x6, 0x6}, {0x7, 0x9}, {0x2, 0x8}, {0x7, 0xa}, {0x1, 0x5}, {0x5, 0x6}, {0x3}, {0x2, 0x2}, {0x4, 0x3}, {0x7, 0x9}, {0x2, 0x4}, {0x4, 0x4}, {0x3, 0x3}, {0x3, 0x6}, {0x0, 0x7}, {0x2, 0x7}, {0x0, 0x3}, {0x3, 0x3}, {0x1, 0x8}, {0x5, 0x6}, {0x7}, {0x2, 0x4}, {0x0, 0x9}, {0x0, 0xa}, {0x2, 0x4}, {0x7, 0x1}, {0x7, 0x6}, {0x7, 0x1}, {0x1, 0x5}, {0x5, 0x9}, {0x1, 0x8}, {0x1, 0x1}]}]}]}, @NL80211_ATTR_TX_RATES={0x2ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x9, 0x3, 0xb, 0x6c, 0x60, 0x36, 0x18, 0x36, 0x9, 0x24, 0x7f3d891a3b9fab71, 0xc, 0x1, 0x48, 0x2a, 0x6c, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x4, 0x5, 0x6, 0x2, 0x7f, 0x6, 0x3]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0x4, 0x48, 0x2, 0x1, 0xc, 0xb, 0xc, 0x24]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x18, 0x16, 0xb, 0xb, 0x4, 0x3, 0x1, 0x7b, 0x4, 0x48, 0x4, 0x6c, 0x5, 0xc, 0x60, 0x67, 0x18, 0x3, 0x16, 0x4, 0x48, 0xb, 0x18, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x4, 0xb6, 0x9, 0x3, 0xfff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x5, 0x16, 0x3, 0x9, 0x18, 0x3, 0x18, 0x16, 0xc, 0x36]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0xb, 0x24, 0x9, 0x60, 0x5, 0x30, 0x36, 0x3, 0x6c, 0x9, 0x4]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x60, 0x36, 0x6c, 0xc]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xd, 0x18, 0x30, 0x0]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x1}, {0x5, 0x5}, {0x3, 0xa}, {0x3, 0x5}, {0x6, 0x5}, {0x0, 0x6}, {0x0, 0x3}, {0x2, 0x1}, {0x0, 0x3}, {0x0, 0x8}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x4, 0x6}, {0x6, 0x2}, {0x7, 0x8}, {0x7, 0x2}, {0x4, 0x7}, {0x4, 0x3}, {0x0, 0x9}, {0x1, 0x2}, {0x0, 0x2}, {0x4, 0x5}, {0x6, 0x6}, {0x0, 0x7}, {0x2, 0x5}, {0x5, 0x7}, {0x2}, {0x3, 0x2}, {0x1, 0x8}, {0x3, 0x1}, {0x4, 0x9}, {0x1, 0x1}, {0x3, 0x4}, {0x5, 0x9}, {0x0, 0x6}, {0x5, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x6, 0x1}, {0x7, 0x8}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x3}, {0x3}, {0x1, 0x6}, {0x5, 0x1}, {0x4, 0xa}, {0x7, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x4, 0x2}, {0x3, 0x7}, {0x4, 0x6}, {0x0, 0x8}, {0x7, 0x2}, {0x7, 0x5}, {0x1, 0x6}, {0x0, 0x8}, {}, {0x4, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x9, 0x8f, 0xffff, 0xa5e6, 0x7, 0x5]}}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x4, 0x5, 0x9, 0x1000, 0x2, 0x1000]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x6, 0xa}, {0x5, 0x8}, {0x2, 0x3}, {0x1, 0x1}, {0x1, 0xa}, {0x6, 0x5}, {0x1, 0xa}, {0x3, 0x5}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x8}, {0x5, 0x1}, {0x6}, {0x1, 0x6}, {0x1, 0x2}, {}, {0x5, 0x2}, {0x2, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x4, 0x3}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x3, 0x3, 0x5, 0x5, 0xb, 0x24, 0x5fed015b54c9b43b, 0x1b, 0x6c, 0x5, 0x6, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0xfdb8, 0x8, 0xfff, 0x3, 0x80, 0x5d]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa53, 0x8, 0x7, 0x29, 0x7, 0x7f, 0x1, 0x9]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0x20, 0x30, 0x5, 0xb, 0xc, 0x1b]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x5, 0x9}, {0x7, 0xa}, {0x3, 0xa}, {0x4, 0x4}, {0x5, 0xa}, {0x4, 0x2}, {0x4, 0x7}, {0x7, 0xa}, {0x4}, {0x3}, {0x3, 0x6}, {0x4, 0x8}, {0x6, 0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x6}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x0, 0x6}, {0x3}, {0x0, 0x4}, {0x0, 0x8}, {0x7, 0x8}, {0x6, 0x8}, {0x2, 0x1}, {0x6, 0x3}, {0x1, 0x5}, {0x2, 0x5}, {0x5, 0x2}, {0x5}, {0x5, 0x8}, {0x6}, {0x6, 0x5}, {0x2, 0x3}, {0x2, 0x9}, {0x5, 0x5}]}]}, @NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x1b, 0xc, 0x1, 0x16, 0x1b, 0x0]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8000, 0xf2, 0x6, 0x400, 0x2, 0x800, 0x1]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x3, 0xb, 0x0, 0x6c, 0x60, 0x36, 0x60, 0x5]}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x2, 0x4}, {0x4, 0x2}, {0x6, 0x4}, {0x7, 0xa}, {0x2}, {0x4, 0x4}, {0x3, 0x1}, {0x1, 0x8}, {0x0, 0xa}, {0x6, 0x6}, {0x0, 0x4}, {0x3, 0x5}, {0x5, 0x5}, {0x5, 0x9}, {0x6, 0x8}, {0x1, 0xa}, {0x5, 0x4}, {0x2, 0x2}, {}, {0x6, 0x7}, {0x3, 0x6}, {0x7}, {0x3, 0x3}, {0x7, 0x7}, {0x2, 0x1}, {0x7, 0x9}, {0x4}, {0x5, 0x6}, {0x6, 0x3}, {0x4, 0x8}, {0x7, 0x5}, {0x4}, {0x7}, {0x0, 0x4}, {0x2, 0x3}, {0x4, 0x9}, {0x7, 0x1}, {0x5, 0x9}, {0x6, 0x9}, {0x5, 0x6}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0x5}, {0x5, 0x5}, {0x4, 0x9}, {0x6, 0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x6, 0x8}, {0x7, 0xa}, {0x6, 0x7}, {0x3, 0x2}, {0x6}, {0x5, 0x7}, {0x5, 0xa}, {0x1}, {0x4, 0x8}, {0x1, 0x9}, {0x5, 0x3}, {0x6, 0xa}, {0x7, 0x3}, {0x5, 0x1}, {0x6, 0x4}, {0x0, 0xa}, {0x2, 0x2}, {0x5, 0x3}, {0x1, 0x8}, {0x0, 0x6}, {0x6, 0x8}, {0x2, 0x7}, {0x1, 0x2}, {0x7, 0x5}, {0x3, 0x2}, {0x0, 0x7}, {0x0, 0x8}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0x2}, {0x0, 0x6}, {0x0, 0x3}, {0x1, 0x8}, {0x4, 0x7}, {0x2, 0x6}, {0x5, 0x2}, {0x2, 0x1}, {0x0, 0x8}, {0x0, 0x8}, {}, {0x7, 0x2}, {0x2, 0x7}, {0x5, 0x9}, {0x5, 0x4}, {0x3, 0x9}, {0x0, 0x8}, {0x5, 0x2}, {0x4, 0x5}, {0x7, 0x5}, {0x7, 0x9}, {0x3}, {0x1, 0x8}, {0x4, 0x2}]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x6, 0x4}, {0x2, 0x6}, {0x1, 0x1}, {0x5, 0x2}, {0x7, 0x2}, {0x4, 0xa}, {0x7, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x5, 0x9}, {0x6, 0xa}, {}, {0x1, 0x2}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x7}, {0x3, 0x3}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x3}, {0x6, 0x5}, {0x1, 0xa}, {0x3, 0x1}, {}, {0x3, 0x5}, {0x0, 0x2}, {0x6, 0xa}, {0x5, 0x7}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0xa}, {0x6, 0xa}, {0x1}, {0x2, 0x1}, {0x6, 0x2}, {0x6, 0x4}, {0x0, 0x6}, {0x4, 0x5}, {0x3, 0x3}, {0x6, 0x7}, {0x1, 0xa}, {}, {0x2, 0x1}, {0x5, 0x6}, {0x2, 0x5}, {0x5, 0x1}, {0x5, 0x9}, {0x3, 0x9}, {0x0, 0xa}, {0x1, 0x6}, {0x6, 0x7}, {0x4, 0x3}, {0x5}, {0x0, 0x9}, {0x7, 0x1}, {0x0, 0x7}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x3}, {0x7, 0x9}, {0x0, 0x7}, {0x0, 0x1}, {0x7, 0x3}, {0x5, 0x6}, {0x6, 0x1d}, {0x5, 0x4}, {0x5, 0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x2}, {0x3, 0x9}, {0x4, 0x3}, {0x2, 0x6}]}]}]}]}, 0x62c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="63e9b3cd2d03fbe59d504b3e74f698ff6d5eb5d4998f9c3780866395f53368d62de79ac60f122ac8ba7959149483526cc98f419938ab21190779210b8ad78ef67c81802532abbeefeeec02f49105e4cb8dbea765cc01740996e0a989a4ccdf1926953f25da33facf0b28d80331d4e5be64e7a633431c076d465446761fd96d5593b0f8ba672e86ce72be8e5052a14eabe286128f69f6a57b3fda1aa7fcdb197fe08338f33218c6649a3108438e7030c0e6c4e17e1dac34d7b84389f36e1df2c69cf4fdfad16c226b867ca4e5d54012d9a80851788a3e6202d3de414cdc27397eabb7cf3d9554928cf1033533420ece6175f90000000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000800000004000280180001801400020073797a5f74756e000000000000000000"], 0x30}}, 0x0) [ 583.438039][ T8998] usb 3-1: new high-speed USB device number 9 using dummy_hcd 01:55:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x1, &(0x7f0000000180)=@raw=[@jmp={0x6}], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:55:43 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xcc) 01:55:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000440)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "06976b60a9a11298aa4e3ddcd048d1501029d1b893596d1e0f9c9a4de0aaed"}}}, 0x27) [ 583.727845][ T8998] usb 3-1: Using ep0 maxpacket: 8 [ 583.958929][ T8998] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 583.978176][ T8998] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 583.992022][ T8998] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 584.003912][ T8998] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 584.218370][ T8998] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 584.228447][ T8998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.236782][ T8998] usb 3-1: Product: syz [ 584.243787][ T8998] usb 3-1: Manufacturer: syz [ 584.249681][ T8998] usb 3-1: SerialNumber: syz [ 584.268587][ T578] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 584.294223][ T8998] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 584.496248][ T3049] usb 3-1: USB disconnect, device number 9 [ 585.279056][ T3049] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 585.517803][ T3049] usb 3-1: Using ep0 maxpacket: 8 [ 585.748102][ T3049] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 585.764051][ T3049] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 585.775652][ T3049] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 585.791039][ T3049] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 585.997788][ T3049] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 586.007090][ T3049] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.016755][ T3049] usb 3-1: Product: syz [ 586.022473][ T3049] usb 3-1: Manufacturer: syz [ 586.027315][ T3049] usb 3-1: SerialNumber: syz [ 586.048769][ T578] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 586.071989][ T3049] cdc_ether: probe of 3-1:1.0 failed with error -22 01:55:46 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000200)) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) 01:55:46 executing program 1: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x2aab}, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 01:55:46 executing program 0: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0xf0, 0xa0000}, 0x20) 01:55:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000700)}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) sendmsg$inet(r2, &(0x7f00000006c0)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000040)="833fb2d1924592452dd2e02ef7b5ef6889c0f584805ea7feb24aa3b6ae6da84bd64bd773cdcad9c4507368076edc0de7e9a0b048f85f1b83f8ac337ace923b7b7dd869363b35c371b2404ebecfff60057701fa182fc2b9656201b3accbde1e39fa6037c732d7be8544b9b7de9b259dc11a21d7b0b2e6a3b647edabf71dd3c77d9b25123cab636eca8fc55a585dfe50bbc150e72e70064b00e124fb5b07d9e26c77e3cbd8ed352b4c226e7e7ad0255778c1b3da6419b9a25edc7e557375ffecafe7d9ca50ae1d6ac7a0bb81b220eb7ff795928b9ecc2810b67a3aec02ac9b74b62e782a886d1ddde48092a92f80d19220afd064050347cf1019", 0xf9}, {&(0x7f00000001c0)="27ad98635a4329a8bbd48ba549894b5839fa66a324169e39e2e695c775f51996426ad2b2e51d416c44b36b4ffe4cd5fa237d5584b8e789e1af9edc4c234ff0cd634f9514f2f7499d50ebaa577e6c857ae75f42e221a627d6c11bbac236c56d335be3283f8e4c22771567450f6021d6d4ae", 0x71}, {&(0x7f0000000240)="2970410554086e3a71bfe5645b47374d71402a1116108766bc68569ec1834cfae1029792b0f2d48f98f11e293f77fbb7ffc391ec7b7689e2b5fc9735c57a56b0cf96ccb64a0978f30f6851c8caa3ca0da8856a77087d88e645c362a1c42c07179e0f0c93b7694c5255275715ba882f2e3c0bacd3cd5df6873125d088f90851a0441472d941e86cce79935c8c054277e9b85d363d1a21689d2bf277c3bf23a27a5c8e81b22ed74b1a14311a", 0xab}, {&(0x7f0000000380)="8ac521840f1b649d9d532bfbdff955fe1eebc54e18a5af960a326bd526430a0f1b74cb6fc4efda47b94bc3f2a50e7a920b2a4c1d5a5412517945ee93bf416eeb59c522d478ba1b5461e89417f364e94a4bb1ff84d0a2d6bc65f75a04d88542573a32f601e30ed02dcdbeaed9c65341682e20ee2288227132948013f0e22430fdfec9d34a38d3c8736486cfe6afed29a07c73b9fadcc0af34dbebe368a96213e4b35111075dfe8d098fbcacc747ecee6764e42f80351d5dac34d0d4f0bb7f748caaa33cb04cb8f72633db17af7fb5130b44f07e23391c", 0xd6}, {&(0x7f0000000480)="d8ab2c80d761db75c9840fec5f0f6c348f3cf70e2cb15cba389d92c14ff6bd80451c8065edc2acd2895326df30d0999eebd695e43aa0d0cd1f57ad22db447454178e18fd8b94c9b44c63f0d686c38d7a8ac41404a7149c30ca443074c836", 0x5e}, {&(0x7f0000000500)="68ec63ccbc13f6656d76c615299ef6c2cf3aebf93bd58e7ddbc00d5aa1b11cd6ddaead36cfbbfd30cf40f11555420b634430fffb0397dbf21a80e393acac7af00e9ea729a2d67c211837bfd90e1c8913ed996ac98473e02070fb21faee83359a4b3c190bd151df0bc0db72f128f5443c0dba3d57517090ddc1520cb107fc44007c922ba23425b4d6255a924c2ee513f1382a8e7d02c1868ba6d443fcaacbb5cccd36d9bf2c0fc343b40f10b49363fb13d442624652b78c446051c53669876044f88ec0d8d07b6a63bd0809cacd7fa4c5087e", 0xd2}, {&(0x7f0000000600)="cac3719960ba979a1decf4122eaa9ec3cfff092b0380ef393afc", 0x1a}], 0x7}, 0x40) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x2, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x408c0) 01:55:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0205648, &(0x7f0000000100)={0x0, @pix_mp}) 01:55:46 executing program 5: r0 = syz_io_uring_setup(0x254e, &(0x7f0000000100)={0x0, 0xffa2, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x42d, &(0x7f0000000200)={0x0, 0x78a5, 0x2, 0x0, 0x121, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) [ 586.103559][ T3049] usb 3-1: USB disconnect, device number 10 01:55:46 executing program 0: syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0xffffffffffffffff, 0x0) 01:55:46 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x1, [{}]}) 01:55:46 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x244900, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) 01:55:46 executing program 4: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000000d40)=[{&(0x7f0000000980)='(', 0x1, 0x1c000}, {&(0x7f0000000a40)="e1", 0x1, 0xffffffff}], 0x0, 0x0) 01:55:46 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)={0x0, 0x4, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "be706bb3"}, 0x0, 0x0, @userptr}) 01:55:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x28, r2, 0x223, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}}, 0x0) 01:55:46 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfc, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 01:55:46 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0xd, @pix_mp}) 01:55:46 executing program 5: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000000140)=""/26, 0x1a) [ 586.509274][ T675] loop4: detected capacity change from 0 to 264192 [ 586.637306][ T675] loop4: detected capacity change from 0 to 264192 [ 586.817508][ T8998] usb 1-1: new high-speed USB device number 9 using dummy_hcd 01:55:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00', r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) 01:55:47 executing program 5: syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x11002, &(0x7f0000000340)={[{'$'}, {'-!'}, {'\x1a\\@\x00\x00\x00\x00\x00\x00'}]}) 01:55:47 executing program 2: syz_mount_image$erofs(&(0x7f0000000040)='erofs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)={[], [{@dont_appraise='dont_appraise'}]}) 01:55:47 executing program 1: syz_mount_image$omfs(&(0x7f00000000c0)='omfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000140)="e5", 0x1, 0x5}, {0x0, 0x0, 0xc86}, {&(0x7f0000000380)="9f", 0x1, 0x400000}, {&(0x7f0000000700)='\"', 0x1, 0x8001}], 0x1000010, &(0x7f0000000580)={[], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@seclabel='seclabel'}, {@fsmagic={'fsmagic'}}]}) 01:55:47 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002300)='/dev/bsg\x00', 0x0, 0x0) fcntl$getflags(r0, 0x408) [ 587.097611][ T8998] usb 1-1: Using ep0 maxpacket: 32 [ 587.141885][ T708] loop1: detected capacity change from 0 to 16384 [ 587.168367][ T711] erofs: Unknown parameter 'dont_appraise' 01:55:47 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={0x0, &(0x7f0000000080)=""/4096, 0x47, 0x1000, 0x1}, 0x20) [ 587.229946][ T708] loop1: detected capacity change from 0 to 16384 [ 587.244432][ T8998] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 252, using maximum allowed: 30 [ 587.302187][ T711] erofs: Unknown parameter 'dont_appraise' [ 587.344169][ T8998] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 587.356880][ T8998] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 587.369919][ T8998] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 587.381610][ T8998] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 01:55:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 01:55:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4c}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "4bb75db845a7e23accd9cdb28741e4e9"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "a0901713cad7662d09958a128c032c47"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e4e1623c96095d5addb3e6cd5c9608e2"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "9fe3ace9d35958553d1f7e05d99d9ea9"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20044800) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x10000, 0x4, 0xb1c4, 0x3f}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x400c854}, 0x20000000) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) [ 587.394149][ T8998] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 252 01:55:47 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f00000001c0)='/dev/video36\x00', 0xd) [ 587.697956][ T8998] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 587.716868][ T8998] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.728500][ T8998] usb 1-1: Product: syz [ 587.732851][ T8998] usb 1-1: Manufacturer: syz [ 587.739363][ T8998] usb 1-1: SerialNumber: syz [ 587.778881][ T8998] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 587.984361][ T34] usb 1-1: USB disconnect, device number 9 [ 588.767457][ T9497] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 589.007599][ T9497] usb 1-1: Using ep0 maxpacket: 32 [ 589.127730][ T9497] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 252, using maximum allowed: 30 [ 589.139441][ T9497] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 589.151493][ T9497] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 589.162904][ T9497] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 589.173970][ T9497] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 589.185416][ T9497] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 252 [ 589.357680][ T9497] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 589.367052][ T9497] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.377921][ T9497] usb 1-1: Product: syz [ 589.382225][ T9497] usb 1-1: Manufacturer: syz [ 589.386840][ T9497] usb 1-1: SerialNumber: syz [ 589.438539][ T9497] cdc_ether: probe of 1-1:1.0 failed with error -22 01:55:49 executing program 0: fsopen(&(0x7f0000000300)='devtmpfs\x00', 0x0) 01:55:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 01:55:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @sliced={0x0, [0x6, 0x0, 0x3]}}) 01:55:49 executing program 5: syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x11002, &(0x7f0000000340)={[{'$'}, {'-!'}, {'\x1a\\@\x00\x00\x00\x00\x00\x00'}]}) 01:55:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5e1b, 0x73}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x94, r2, 0x100, 0x70bd2b, 0x10000, {{}, {@void, @val={0xc, 0x99, {0xee7, 0x3c}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5a2b069d40a500e3bbbe0974c4"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=ANY=[@ANYBLOB="228b119b", @ANYRES16=0x0, @ANYBLOB="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"], 0x340}}, 0x0) 01:55:49 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f00000001c0)='/dev/video36\x00', 0xd) [ 589.505130][ T9497] usb 1-1: USB disconnect, device number 10 01:55:49 executing program 2: chown(0x0, 0xee00, 0xffffffffffffffff) 01:55:49 executing program 4: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[{&(0x7f0000001140)="c8", 0x1, 0x100000000}, {&(0x7f0000001200)=',', 0x1}], 0x0, 0x0) 01:55:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa8143ebb30c7cb36}, 0xc, &(0x7f00000000c0)={0x0, 0x50}}, 0x0) 01:55:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xccc154a3849ffd1c}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r2, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}}, 0x0) 01:55:49 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000004540)='/dev/video36\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 01:55:49 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000002300)='/dev/bsg\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 01:55:49 executing program 0: socket$packet(0x11, 0x2, 0x300) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) 01:55:49 executing program 2: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x81, &(0x7f0000000180)={[{@noadinicb='noadinicb'}], [{@euid_lt={'euid<', 0xee01}}]}) [ 589.777377][ T798] loop4: detected capacity change from 0 to 264192 01:55:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x64, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x1a}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0xfffffffffffffe71}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 589.883137][ T798] loop4: detected capacity change from 0 to 264192 [ 589.895171][ T811] UDF-fs: bad mount option "euid<00000000000000060929" or missing value 01:55:49 executing program 5: syz_mount_image$nfs(&(0x7f00000010c0)='nfs\x00', &(0x7f0000001100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)={[{}]}) 01:55:49 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000005840)={&(0x7f0000005780), 0x80, &(0x7f0000005800)=[{0x0}, {0x0}], 0x2}, 0x0) 01:55:50 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0xc) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x6) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz1\x00', {0x0, 0x5, 0x401, 0x3ff}, 0x51, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0, 0x0, 0xfffffffa, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x10000, 0x5, 0x1], [0x8, 0xfffffffe, 0x0, 0x1, 0x3f, 0x6, 0xb7, 0x9, 0x8, 0x5, 0xb8d9, 0x1, 0x6, 0x3, 0x8ff, 0x1, 0xc2e7, 0x7, 0x1, 0x3, 0x4, 0x8000, 0x3, 0x7f, 0xa429, 0x1, 0xef, 0x8000, 0x1, 0xb1, 0x1, 0x2, 0x6, 0x6, 0x7, 0x6, 0x3f, 0x7, 0x8, 0x101, 0x7, 0x1, 0x2, 0x5, 0x0, 0x5, 0x0, 0x7ff, 0x5387, 0x401, 0x90000, 0x2, 0xd94, 0x6, 0x9e88, 0x3, 0x7, 0x3, 0xd257, 0x2, 0x1, 0x6, 0x1, 0x1], [0x7, 0x3ff, 0x9fff, 0x4, 0x8, 0xf94, 0x80, 0x400000, 0x8, 0x6, 0x2, 0x6, 0x6, 0x4, 0x7f, 0x20, 0x28b2, 0x0, 0x6b, 0x7, 0x9, 0x7, 0x8, 0x8, 0x6, 0x0, 0x0, 0xa50d, 0x8, 0xacf, 0xf03, 0x6, 0xd, 0x7f, 0x10001, 0xf0e, 0x3, 0x3, 0x4, 0x7fffffff, 0x16, 0x9199, 0xff, 0x8, 0x8, 0x7fffffff, 0x40, 0x8000, 0x100, 0x5, 0x0, 0x2, 0x4, 0x5, 0x4, 0xfffffffa, 0x4, 0x7f, 0x8, 0x0, 0x401, 0x6, 0x7, 0x1], [0x9, 0x94, 0x8, 0x52, 0x5, 0x2, 0x3, 0xffff9410, 0x6e525ef2, 0xfffffffa, 0xe175, 0x401, 0x12, 0x6fa7, 0x200, 0x3, 0xcb, 0x0, 0x1, 0x9822, 0x7ff, 0xffffffff, 0x521, 0x6, 0xfffff001, 0x3, 0x4, 0x7, 0x20, 0x8000, 0x5, 0xff, 0x9, 0xfffffff9, 0x9, 0x5, 0x10001, 0x10001, 0xdf00000, 0xffff, 0x5, 0x799, 0x3, 0x670, 0xfffffffd, 0xceb, 0x2, 0x400, 0x43b, 0x101, 0x4, 0xfffffc00, 0x7, 0x0, 0x8, 0x9, 0xfffffffe, 0x1db, 0x6, 0x80, 0xffffffe0, 0x3]}, 0x45c) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000500)={0x37, 0x6, 0x9, 0x9, 0xae9a, 0x81}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000580)=0x2, 0x4) syz_mount_image$ubifs(&(0x7f00000005c0)='ubifs\x00', &(0x7f0000000600)='./file0\x00', 0x9, 0x2, &(0x7f0000001740)=[{&(0x7f0000000640)="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", 0xfa, 0x9}, {&(0x7f0000000740)="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", 0x1000, 0x6}], 0x8020, &(0x7f0000001780)={[{@compr_zlib='compr=zlib'}, {@auth_hash_name={'auth_hash_name', 0x3d, 'ghash'}}, {@chk_data_crc='chk_data_crc'}, {@compr_zstd='compr=zstd'}], [{@subj_role={'subj_role', 0x3d, 'syz1\x00'}}]}) r2 = socket$kcm(0x29, 0x2, 0x0) recvfrom(r2, &(0x7f0000001800)=""/111, 0x6f, 0x10022, &(0x7f0000001880)=@caif=@util={0x25, "f7cc3ab87f68be11428155e94b276dfb"}, 0x80) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000001900)={'geneve0\x00', 0x7fff, 0x8}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000001a00)='syz0\x00') [ 589.975579][ T823] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:55:50 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002300)='/dev/bsg\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', 0x0, 0x0, 0x3) 01:55:50 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[], &(0x7f0000000080)=""/4096, 0x47, 0x1000, 0x1}, 0x20) [ 590.016882][ T811] UDF-fs: bad mount option "euid<00000000000000060929" or missing value 01:55:50 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000004540)='/dev/video36\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000002000)={0x0, [], 0x0, "3f67e0ee83ae81"}) [ 590.086388][ T830] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 590.112462][ T830] device veth69 entered promiscuous mode [ 590.146945][ T823] device veth67 entered promiscuous mode [ 590.171927][ T849] loop4: detected capacity change from 0 to 8 01:55:50 executing program 2: syz_mount_image$affs(&(0x7f0000006240)='affs\x00', &(0x7f0000006280)='./file0\x00', 0x0, 0x1, &(0x7f00000076c0)=[{&(0x7f00000064c0)="b51f0bc99416949ae8be451425152f02082959c8b4fad40d2b289a5292fe3fe3de973ed1ae9b11b6b4180b715cd2145427d086829eae87d3d2085ab840e6119528127c3d568c2cfb878f70b813ea7be8f9c9f38c8d30e1a14e568daeb58e9ebdf90c8931ba6511d29ab60873451f1f48082d6e7cde3f3004b20c00a438dbf7a3ed2d997c9258559b642c92d01b1491e39965990d44998790c34ea6d361ee8963b681fb00c4cb87c6f5ae05527935febf8e332373b9e47eb55e07fb3179d57a6033a1fbf5276ed887fc252f4e2d2d44899ff588b6f24d5a9d77a7b28f62e4c88cfc0592f58ee6b7b61b2cb258f9bc371e4b8e1716c475d23c32e5a3986129cbccc1ceb8d8f2a7b5d0d8aca01968747b122794ebbca1d60d517c91b285fa6287762b3cd02e4af76712f2a5f08e183106fe0787fd071fd505a1023cda0f4b961585b27a3dedb574596226756d3f613ae6294e871994560a96fc0544c5c1ca14cc734ac2f84177d5d5465050a946e6eaa80c5c14fd9689c300f218e9457592e88075125411b968c03ec4d469a3eab4b63e79d4f992b3153b957b390604ab1a04af897745e8eff938c08ce8eabfd69e1f26087e0450d1ff2d87e4da661ac7bffa66e55ab80b5a4f3a2d428aeb9e9c1ed2f373d58f35ea878f6f480661a4c979fe04a948a7ae44dee586d6d5196cbe5cd0ab5d8e44c0994f3d379e57754c69ed157247c372fdac4d6a97a42b6e456c8916e4e955a8d3e8af2ccf074b7000608079e761cff905f4faf8a9ae5921c8dfece74e414a4e2c4a4d243bf051b8dbc74b02340dbb9c055607148d35ccd3c419c38a1090f5032c5776f56acff6fe76ab6c137a9b495951aeaaeba57eba4b58ead6f916d49da48aac3c4ce3016eeba33b4425ce86a49ae6ac319b7ab40a235ba248a63da84598d7af68ef9411cc2e21e4d1c64b678b5137e94042371d0aa9be189696eca9526ad17520dad90fe2769874653ddc1f1407350a3610ff229ae2da5fe7df436f12c934ea9a803ee04e8a90d6771575e1a16e0cc842dc2bd4749932bfde0ae19e0ee2b5f2de667549247cecceade63461de89458564d6032d4d5dc8c69febd4017ae7e5b790cc20f6ac26a0be410377188a519dfa5788b4cc2c7abe2d8dc502865658b0f841549621560cb02ac4b4734b47dc43ba3005da571c0311d5838321809cd2b2caccd951bf1b706b26428f56d15faddb1efe2bc6437b9718de20e726a1303415f384b83d21106dd0524d5e7041116dd2d4a4a45ed5a75f79bc6d4b24d50da2a10581363c7cf1e433a6385d2bf02383858d23c151ba87396d831fb7ef9aefa5e58ef3d73e3d61d06a882d6209376b4aac494bf621295f8bbc7e5f0d493934129dbfce3702170cdf586c48685555c323829cabd9441249f275448db68f49da34212103d85764da79454cc38e9358e3f6d2ae2a9ef25e33e3528bedd3eeb2662f5b44b2ecbbde93672587c105d02eb9864135f1bd0eaae14ac3bf9135774da7c03b2489c7d0bb2ed144382b926f4b2e049d8edec72b6b3ac2cb0dfb6f120290087593f867a432cd696cfeeaf6cae5f39a7eff35637e7c2e60dcf53d2778ac7a32968a4bce3312b37bf799580748f69a362910eb2e679643d94cbd3a9ba0ba903db720f9e094af8e8227c5bfa259df7213f9a8190f6c0950b5fef63048ee20f34fdafc838e9048b9fee5d997995338f3405390799856f988babb41824337a6dbf6f7e8952ef7901403c701a42e94eed41abece5a48eb0c3b6781a01385109bee9bd3eb8c40ea11416bd7460bd91e1b9a121d62643bf5620e9891dce3b037e6c3b56cf28904add4d4cc58b7c8caf203ba9b399155b20e55c16ec70d670474e3f7ee71dcb6309e5d3571203bd5061618bbb3887e01b59b4455609023430d307d2de3f77bf5531150e8279178f32fd1f18bd68dda69fc94f190952f0ceabef745ccd9510fcc55592aa2cf1f1ef8b54003fd172ced12009b608d72a9855e5a8e9f4e4a2f6b65824fbda3f3031072ade7e797d4f8e826d438b0b3a057ab48e022f5b224dec5826acf8779bcdc4186871a4ecece6ed92849d10ce0d2dd06c1be3a836d0933d749b7ba6666590c089ff2854914aecb9c8cf3049ef08ebf354cc804a291751f400597c5dcf1", 0x5f9, 0x7}], 0x0, &(0x7f00000097c0)=ANY=[]) [ 590.192425][ T823] device veth67 left promiscuous mode 01:55:50 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 01:55:50 executing program 5: open(0x0, 0x200000, 0x0) [ 590.302835][ T823] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 590.339762][ T864] loop2: detected capacity change from 0 to 3 01:55:50 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x200, 0x0) [ 590.362282][ T866] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 590.411703][ T864] affs: No valid root block on device loop2 01:55:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x160, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0x148, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x2}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0xfffffffffffffdf3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK]}]}, 0x160}}, 0x4080) 01:55:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0) [ 590.473651][ T864] loop2: detected capacity change from 0 to 3 [ 590.485691][ T864] affs: No valid root block on device loop2 01:55:50 executing program 0: syz_mount_image$ubifs(&(0x7f0000000040)='ubifs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x9084, &(0x7f0000000300)) 01:55:50 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000001a40)={0x11, 0x8, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) [ 590.996754][ T909] loop4: detected capacity change from 0 to 8 01:55:51 executing program 4: syz_mount_image$udf(&(0x7f0000000040)='udf\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x805080, &(0x7f0000000a80)=ANY=[]) 01:55:51 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002300)='/dev/bsg\x00', 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) 01:55:51 executing program 3: sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="d71789b34a50843ebe9e4710f44f20507d8d1bc9bda30488c1ff0caf8dbcffff8c8d19116767f675aaa4a24f4229fba78d3318b8a2f99b394a4f38efb0b32a85a1c1", @ANYRES16=0x0, @ANYBLOB="010000000000000000000800000004000280180001801400020073797a5f74756e000000000000000000"], 0x30}}, 0x0) 01:55:51 executing program 5: syz_mount_image$udf(&(0x7f0000000040)='udf\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='nostrict,defcontext']) 01:55:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 01:55:51 executing program 1: syz_mount_image$ufs(&(0x7f0000000140)='ufs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x2203028, &(0x7f0000002480)) [ 591.306595][ T923] UDF-fs: bad mount option "defcontext" or missing value 01:55:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00', r1) preadv(r1, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r1, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000004ee7c41b67701941bc9950154e23e11a7b735bb6369f06b876839a5992c802424ddbff40f1893bd5b92ffdda2f7dee05355d07d3c332aef24dfcde36c577b918df2e2d38ed4616051c93c9a5008dc2ce09cf0b7ae994313a7daaff1b7b0cd9c86f583e41417a46808efa3b2b85f022729f413914aca382bbc0da2f5ac12a421740e1046bbf92b0f29147035c8cf46f2bc6d311dc2e040f85f352d7696e391d3faa044733d58d7c3e7181da26f0d6211ffa5fc63d259c84d668eabb822efd4128ef112d6d2355ffff00000000000024d74c50dbb9d9cf2be5e3f7fbcd22fe968b98a49f92045206e07e185bd18414f3c2", @ANYRES16=r2, @ANYBLOB="010000000000000000000800000004000280180001801400020073797a5f74756e000000000000000000"], 0x30}}, 0x4000000) 01:55:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000001200)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 01:55:51 executing program 0: openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$affs(&(0x7f0000006240)='affs\x00', &(0x7f0000006280)='./file0\x00', 0x7fffffff, 0x0, &(0x7f00000076c0), 0x0, &(0x7f00000097c0)=ANY=[]) 01:55:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) 01:55:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x51, &(0x7f0000000000)={&(0x7f0000000580)={0x60, r1, 0x1, 0x800000, 0x800000, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x60}}, 0x40000) [ 591.504008][ T939] loop0: detected capacity change from 0 to 264192 [ 591.519684][ T939] affs: No valid root block on device loop0 [ 591.538875][ T923] UDF-fs: bad mount option "defcontext" or missing value 01:55:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000001200)={&(0x7f0000000000)=@caif, 0x80, &(0x7f0000001180)=[{0x0}, {0x0}], 0x2, &(0x7f00000011c0)=[@mark={{0x14}}], 0x18}, 0x11) 01:55:51 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 01:55:51 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002300)='/dev/bsg\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)=':@{}\'}\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) 01:55:51 executing program 1: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@noadinicb='noadinicb'}], [{@euid_lt={'euid<', 0xee01}}]}) 01:55:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x10, 0x8008, 0x0, 0x344, {{0x3d, 0x4, 0x3, 0x30, 0xf4, 0x66, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0x2c, 0x7e, 0x1, 0xe, [{@loopback, 0x3}, {@private=0xa010100, 0x7fff}, {@remote, 0x1}, {@loopback, 0x100}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x200}]}, @rr={0x7, 0x17, 0xf1, [@rand_addr=0x64010102, @remote, @local, @remote, @loopback]}, @timestamp_prespec={0x44, 0x14, 0xde, 0x3, 0x0, [{@empty}, {@local, 0x5}]}, @timestamp_addr={0x44, 0x1c, 0xae, 0x1, 0x0, [{@local, 0x1000}, {@multicast2, 0x9}, {@loopback, 0x2}]}, @cipso={0x86, 0x30, 0xfffffffffffffffc, [{0x6381259e27c679e6, 0xa, "84d3836361750815"}, {0x3, 0xa, "4caf54903a8926e2"}, {0x6, 0xc, "7ef2900cebb65a5ed3cb"}, {0x1, 0xa, "5ad62bbadbc85159"}]}, @cipso={0x86, 0x1c, 0x0, [{0x6, 0xe, "e8e8b661c9864cd1fcc59a24"}, {0x2, 0x4, "e470"}, {0x5, 0xd, "a7324621512d88b1317d43"}, {0x7, 0x9, "95a049769cbcb9"}]}, @timestamp_addr={0x44, 0xc, 0x86, 0x1, 0x0, [{@loopback, 0x4}]}, @noop]}}}}}) r3 = open(&(0x7f0000000440)='./file0\x00', 0x103441, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0xf29, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x2}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x54}}, 0x48850) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x50, r1, 0x1, 0x0, 0x4, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x50}}, 0x20008000) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x4, 0xa, 0x301, 0x0, 0x0, {0xd, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffe0}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) 01:55:51 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xa6941, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000038) 01:55:51 executing program 2: syz_mount_image$nfs(&(0x7f00000010c0)='nfs\x00', &(0x7f0000001100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)) 01:55:51 executing program 4: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[{&(0x7f0000001140)="c8", 0x1, 0x100000000}, {&(0x7f0000001180)="c2", 0x1}], 0x0, 0x0) 01:55:51 executing program 5: syz_mount_image$nilfs2(&(0x7f0000000000)='nilfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x40404, &(0x7f0000001340)=ANY=[]) [ 591.812828][ T959] UDF-fs: bad mount option "euid<00000000000000060929" or missing value 01:55:51 executing program 0: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x81, &(0x7f0000000180)={[{@noadinicb='noadinicb'}]}) 01:55:51 executing program 2: syz_mount_image$ufs(0x0, 0x0, 0x0, 0x2, &(0x7f0000002200)=[{&(0x7f0000000080)="1b", 0x1, 0x7fff}, {&(0x7f00000010c0)="fa", 0x1, 0x40000000000000}], 0x0, 0x0) [ 591.929360][ T959] UDF-fs: bad mount option "euid<00000000000000060929" or missing value 01:55:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRESDEC=r1, @ANYRES32], 0x30}}, 0x20048002) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x2, 0x3, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, 0x1, 0x7800, 0x9, 0x9}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c000}, 0x8814) [ 591.974887][ T978] loop4: detected capacity change from 0 to 264192 [ 591.991135][ T982] loop2: detected capacity change from 0 to 262144 01:55:52 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x6}) 01:55:52 executing program 1: syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0xcfbfd59f77bb7283, &(0x7f0000000300)=ANY=[]) [ 592.068491][ T987] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 592.077505][ T982] loop2: detected capacity change from 0 to 262144 [ 592.099008][ T978] loop4: detected capacity change from 0 to 264192 01:55:52 executing program 2: sendto$packet(0xffffffffffffffff, &(0x7f0000002a80), 0x0, 0x0, 0x0, 0x0) getuid() r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000001a40)={0x11, 0x8, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) [ 592.139372][ T987] UDF-fs: Scanning with blocksize 512 failed [ 592.175086][ T987] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found 01:55:52 executing program 3: ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x2a) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000028018000180141a3300022073797a5f74756e00"/42], 0x30}}, 0x0) 01:55:52 executing program 4: syz_mount_image$nfs(&(0x7f00000010c0)='nfs\x00', &(0x7f0000001100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)={[], [{@context={'context', 0x3d, 'sysadm_u'}}]}) 01:55:52 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000004540)='/dev/video36\x00', 0x2, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) [ 592.211813][ T987] UDF-fs: Scanning with blocksize 1024 failed [ 592.263334][ T987] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 592.280243][ T1013] nfs: Unknown parameter 'context' [ 592.302385][ T1013] nfs: Unknown parameter 'context' 01:55:52 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @ax25={0x3, @default}, @can, @qipcrtr}) [ 592.304287][ T987] UDF-fs: Scanning with blocksize 2048 failed [ 592.318695][ T1015] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 592.330248][ T987] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 592.341637][ T987] UDF-fs: Scanning with blocksize 4096 failed 01:55:52 executing program 4: fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) [ 592.360842][ T1017] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 01:55:52 executing program 1: syz_mount_image$affs(&(0x7f0000006240)='affs\x00', &(0x7f0000006280)='./file0\x00', 0x7fffffff, 0x0, &(0x7f00000076c0), 0x0, &(0x7f00000097c0)=ANY=[]) [ 592.432538][ T987] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 592.441744][ T987] UDF-fs: Scanning with blocksize 512 failed [ 592.451415][ T987] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 592.460258][ T987] UDF-fs: Scanning with blocksize 1024 failed [ 592.491306][ T1025] loop1: detected capacity change from 0 to 264192 [ 592.502081][ T987] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 592.531382][ T987] UDF-fs: Scanning with blocksize 2048 failed [ 592.532722][ T1025] affs: No valid root block on device loop1 [ 592.549723][ T987] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 592.574480][ T987] UDF-fs: Scanning with blocksize 4096 failed 01:55:52 executing program 0: syz_mount_image$nfs(&(0x7f0000000180)='nfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x124081a, &(0x7f00000006c0)) 01:55:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240)='ethtool\x00', r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x17c, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x148, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x17c}, 0x1, 0x0, 0x0, 0x128d75354f950180}, 0x4001) r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x2000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', r0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0xc10}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044000}, 0x80) 01:55:52 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) [ 592.615653][ T1025] loop1: detected capacity change from 0 to 264192 [ 592.658712][ T1025] affs: No valid root block on device loop1 01:55:53 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 01:55:53 executing program 4: syz_mount_image$ufs(&(0x7f0000000000)='ufs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000002340)) 01:55:53 executing program 0: syz_mount_image$udf(&(0x7f0000000040)='udf\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@anchor={'anchor', 0x3d, 0xfffffffffffeffff}}, {@uid_forget='uid=forget'}, {@fileset={'fileset'}}, {@dmode={'dmode'}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/video36\x00'}}]}) 01:55:53 executing program 1: syz_mount_image$udf(&(0x7f0000000040)='udf\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)) 01:55:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x50}}, 0x0) 01:55:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xc50c, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x18c, r1, 0x0, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x70, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xcb7}, @ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xd8)@\\(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^**\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000808}, 0x8800) syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x4, 0x20200) 01:55:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa8143ebb30c7cb36}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000026fd17"], 0x50}}, 0x0) [ 593.135681][ T1059] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 593.151741][ T1063] UDF-fs: bad mount option "fscontext=system_u" or missing value [ 593.151825][ T1061] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 593.180707][ T1061] UDF-fs: Scanning with blocksize 512 failed [ 593.187920][ T1061] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 593.195618][ T1061] UDF-fs: Scanning with blocksize 1024 failed [ 593.215697][ T1061] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found 01:55:53 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000080)=""/4096, 0x47, 0x1000, 0x1}, 0x20) 01:55:53 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002b0000002b"], &(0x7f0000000080)=""/4096, 0x47, 0x1000, 0x1}, 0x20) [ 593.231623][ T1061] UDF-fs: Scanning with blocksize 2048 failed [ 593.239885][ T1061] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 593.248598][ T1061] UDF-fs: Scanning with blocksize 4096 failed [ 593.256510][ T1063] UDF-fs: bad mount option "fscontext=system_u" or missing value 01:55:53 executing program 5: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x3, &(0x7f00000016c0)=[{&(0x7f0000001140)="c8", 0x1, 0x100000000}, {&(0x7f0000001180)="c2", 0x1, 0x7dc6}, {&(0x7f0000001200)=',', 0x1}], 0x0, 0x0) [ 593.300239][ T1069] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 593.331883][ T1061] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found 01:55:53 executing program 0: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)) [ 593.355194][ T1061] UDF-fs: Scanning with blocksize 512 failed 01:55:53 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000f80)) [ 593.404021][ T1069] device veth75 entered promiscuous mode [ 593.432816][ T1061] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found 01:55:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000001240)=0x1e) [ 593.459969][ T1097] loop5: detected capacity change from 0 to 264192 [ 593.467725][ T1061] UDF-fs: Scanning with blocksize 1024 failed [ 593.482125][ T1076] device veth73 entered promiscuous mode [ 593.506232][ T1061] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 593.525338][ T1099] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 593.526176][ T1061] UDF-fs: Scanning with blocksize 2048 failed [ 593.533267][ T1099] UDF-fs: Scanning with blocksize 512 failed [ 593.533785][ T1099] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 593.556715][ T1076] device veth73 left promiscuous mode 01:55:53 executing program 2: syz_mount_image$udf(&(0x7f0000000140)='udf\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={[{@umask={'umask'}}, {@nostrict='nostrict'}, {@umask={'umask', 0x3d, 0x80000001}}]}) 01:55:53 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x68000, 0x0) [ 593.611033][ T1099] UDF-fs: Scanning with blocksize 1024 failed [ 593.631950][ T1069] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 593.650696][ T1061] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 593.667708][ T1097] loop5: detected capacity change from 0 to 264192 [ 593.688009][ T1099] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 593.695998][ T1061] UDF-fs: Scanning with blocksize 4096 failed [ 593.753472][ T1099] UDF-fs: Scanning with blocksize 2048 failed [ 593.774696][ T1099] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found 01:55:53 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002300)='/dev/bsg\x00', 0x0, 0x0) fcntl$getflags(r0, 0x401) 01:55:53 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80a40, 0x0) [ 593.807833][ T1099] UDF-fs: Scanning with blocksize 4096 failed 01:55:53 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000005840)={&(0x7f0000005780), 0x80, 0x0}, 0x0) 01:55:53 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002300)='/dev/bsg\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 593.861281][ T1099] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found 01:55:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r2, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00', r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x178c, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xbc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb6, 0x4, "91f4f7c1d4a54cfb8703d4aa383fc57abb2a97a5b5c1a39936ee637a6d13104d265267e06c425583c5cb33ed16b4dee9f411008876102621a8ee68330ec53bae433706a3e0e7329f4bae7a6a405ede1120f48ca2bb6d93cb2bda8b5bb39aca8364b5e0682bd27802a239eb713ce352cba9953ee2ebc453febba7eab6d5addc8866cfaea98db20824adee1bf0a81cc8a4b873d05b3ad556a47fef551a21c3623a369c85142e154ae86b07dd0154d83e758bb3"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1164, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4d, 0x4, "c0cef5ba85ae109ba6cdb0246b7fe30f66ec3c7a5116c8551537a9b9fd928d05c2427667172bf5a6ebbbe7e1c9f70d4fd2e42ac5cc58cfc4b3a551582e593801ddc286f45ff39d3bf4"}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa9f2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcfef}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '$.[&{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']}]#\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x5, 0x4, 'm'}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffc4dc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x24, 0x5, "dcb64e3f2fd1f77efded9c83dc8398ef7009f59339216f87b8da773c50e87d8e"}, @ETHTOOL_A_BITSET_BITS={0xd0, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-,{\xeb&+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\x8a[.-\\[*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '$-$|\x98\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&}&\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2c4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xc5, 0x4, "2d85c337d4d1dba7f15d06781a3b32a83dfab0893bd4df309fc7d8db200d458fd296df8613efb98e08bcebace2656b88dd45d438b730cced68b44427147e3f941ad63b1ad3911dfdd3efa4f37efb876cc1a3582753efe802494363626c5eba8b0b7e6a8cc2364dee98b820d08fd811642809ae99dc3d56825f2aa23e0de140c4f65b89b537d0b5c26b9b338876a6afc6b6bbf73f7910013742d513a3ff037652307db26c2b4dc6dfe6bf298e6fe5428d529858ec426e7022425ed1ea1a3de2f95c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x4}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x78c7982f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x90, 0x4, "4089130e029646d6c8bd9022126a85508f0982f3af7843a3865aa1bc715bd466cc3fdc936548ecf464aa38bb8e34cf16e0667c720132cfc0c84d84a0b6582ac7159b7a8fa2138e0f28f5f2d15a838921b0c43f89fdb063c1ce2d23983e9313f3e2fba053ca1e59a57927327a8c5f8906f3d269987221100d9528c1913f11f295f4063f8a7d99a3eccd66f240"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10c, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x275b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xab}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x415}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff95}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x19c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xcf, 0x4, "510883a510a023e350df9c8f31840b58fca1c7834fa7d247dfd3ece0348c682015661428278008dd8cf2642041b0966e7107f0aa5cb584ab215eb1360b732e808e840160c56ff2d80a3f8172969b7acb75978a9c0e95582bc831c93d57a4ed8028d1983dac80da606c6b85839ac948521ee1ea493d61e993682b52b1dd256e53feb7f322efaf03ceb09d50b76cad919730ed8a99a7935d02c1898ce39fc9f7275bb279980a00424f51f303aa185c754a8121de5ac31384d06f57d7dddb8dbd4cdb5f5e4fe1ff6caa9c5cf0"}, @ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}^:}]\x90\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x510}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}]}]}]}, 0x178c}, 0x1, 0x0, 0x0, 0x44}, 0x8000044) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="303684a6e4a8c81e6282801bef64", @ANYRES16=r1, @ANYBLOB="010000000000000000000800000004000280180001801400020073797a5f74756e000000000000000000"], 0x30}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000140), 0x0, 0x40000d9f, 0xfffffffd) sendto$inet(r4, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240)='ethtool\x00', r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000001b00)={0x1254, r5, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7f}, @ETHTOOL_A_LINKMODES_OURS={0x1050, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x81}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffff64}]}, @ETHTOOL_A_LINKMODES_OURS={0x190, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0x11c, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffc1}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x597a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'/-\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}^:}]\x90\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x77e}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[*I]\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x67, 0x4, "ea3a4e46fbb59b52ce62fb666432786eb88eb79035379d84585231e8d520bcc3fb30afd9956fd91d0ceb5bd2df59638c2f44ed7b95bfe41198ec49e7d222c8e2789b1bd546a4bd0ddcb7149ce361f7f9b1fa76dd6693bd3ea8da1d98db444e26f30fa4"}]}]}, 0x1254}, 0x1, 0x0, 0x0, 0x4004040}, 0x40800) [ 593.958460][ T1099] UDF-fs: Scanning with blocksize 512 failed 01:55:54 executing program 4: syz_mount_image$sysv(&(0x7f0000000040)='sysv\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x2044c2, &(0x7f0000000440)={[{'->O\x14\xd4\xdb\xa7\xde\x8c_\xdd\xed[\xe7\xe52\xfdsl\x1d{\x1bh\x90\x14[\xf2\x10^\xd9\x15\xae\x87ZZ\'2b\xc9\xf3\xe1\xf9\xd7\xc0\x1bT0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000000c0)=0xe8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto$packet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00\b\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0xfc, r0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x4}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) 01:55:54 executing program 2: syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x20, 0x0) 01:55:54 executing program 4: clock_gettime(0x0, &(0x7f0000000f40)) 01:55:54 executing program 1: syz_mount_image$udf(&(0x7f0000000040)='udf\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='nostrict,defcontext=']) [ 594.648623][ T1168] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 594.732268][ T1172] device veth79 entered promiscuous mode [ 594.770809][ T1178] UDF-fs: bad mount option "defcontext=" or missing value 01:55:54 executing program 5: syz_mount_image$affs(&(0x7f0000000000)='affs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x20b200b, &(0x7f0000002500)) 01:55:54 executing program 0: syz_mount_image$sysv(&(0x7f0000000100)='sysv\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) 01:55:54 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002300)='/dev/bsg\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, 0x0, 0x0, 0x0, 0x0) 01:55:54 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002a40)='/dev/dlm-control\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 01:55:54 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0}) [ 594.893295][ T1178] UDF-fs: bad mount option "defcontext=" or missing value 01:55:55 executing program 5: syz_mount_image$nilfs2(&(0x7f0000000280)='nilfs2\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000500)) 01:55:55 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) 01:55:55 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000000aa40)={0x0, 0x989680}) 01:55:55 executing program 5: faccessat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 595.172825][ T1209] VFS: unable to find oldfs superblock on device loop0 01:55:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto$packet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x18, r11, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0xe0, r11, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xbe, 0x5, "4d8ac85ad82929fd5a65d708bf740b78aeb1c87b006ec5ac28dd4da9869a890c939061825bef35022f9fe288742269ca113ad15c649a5bfa7f5bccb2e9bb0635a517d761eadca0357cd9fde63ee72fe95f35b6ec062ff371ff589d37355870a6659f37120b3152daa2080b27ada6bc5f79da0c531aa1104589cab1bd7c5b6eb29aee2478abe18e76f7db1554f8e9d962a4852e85056063afdc626f909562cfc258cc848694b9672d70370bed87e53a0b0ef12d36e69b6aa7b2a3"}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x85}, 0x24048813) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100003040000000400000020e1ff0091", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0xb8, r1, 0x100, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0xb8}}, 0x0) 01:55:55 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) fcntl$getflags(r0, 0xb) [ 595.300645][ T1209] VFS: unable to find oldfs superblock on device loop0 [ 595.385166][ T1224] __nla_validate_parse: 2 callbacks suppressed [ 595.385182][ T1224] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:55:55 executing program 2: signalfd4(0xffffffffffffffff, &(0x7f0000002800), 0x8, 0xc00) 01:55:55 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000002300)='/dev/bsg\x00', 0x131080, 0x0) 01:55:55 executing program 5: syz_mount_image$affs(&(0x7f0000006240)='affs\x00', &(0x7f0000006280)='./file0\x00', 0x0, 0x1, &(0x7f00000076c0)=[{&(0x7f00000064c0)="b51f0bc99416949ae8be451425152f02082959c8b4fad40d2b289a5292fe3fe3de973ed1ae9b11b6b4180b715cd2145427d086829eae87d3d2085ab840e6119528127c3d568c2cfb878f70b813ea7be8f9c9f38c8d30e1a14e568daeb58e9ebdf90c8931ba6511d29ab60873451f1f48082d6e7cde3f3004b20c00a438dbf7a3ed2d997c9258559b642c92d01b1491e39965990d44998790c34ea6d361ee8963b681fb00c4cb87c6f5ae05527935febf8e332373b9e47eb55e07fb3179d57a6033a1fbf5276ed887fc252f4e2d2d44899ff588b6f24d5a9d77a7b28f62e4c88cfc0592f58ee6b7b61b2cb258f9bc371e4b8e1716c475d23c32e5a3986129cbccc1ceb8d8f2a7b5d0d8aca01968747b122794ebbca1d60d517c91b285fa6287762b3cd02e4af76712f2a5f08e183106fe0787fd071fd505a1023cda0f4b961585b27a3dedb574596226756d3f613ae6294e871994560a96fc0544c5c1ca14cc734ac2f84177d5d5465050a946e6eaa80c5c14fd9689c300f218e9457592e88075125411b968c03ec4d469a3eab4b63e79d4f992b3153b957b390604ab1a04af897745e8eff938c08ce8eabfd69e1f26087e0450d1ff2d87e4da661ac7bffa66e55ab80b5a4f3a2d428aeb9e9c1ed2f373d58f35ea878f6f480661a4c979fe04a948a7ae44dee586d6d5196cbe5cd0ab5d8e44c0994f3d379e57", 0x1f9, 0x7}], 0x0, &(0x7f00000097c0)=ANY=[]) [ 595.564080][ T1227] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 595.613885][ T1227] device veth83 entered promiscuous mode [ 595.638516][ T1230] device veth81 entered promiscuous mode 01:55:55 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x121941, 0x0) [ 595.662969][ T1248] loop5: detected capacity change from 0 to 1 [ 595.673139][ T1230] device veth81 left promiscuous mode 01:55:55 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000fb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 595.712222][ T1248] affs: No valid root block on device loop5 [ 595.730160][ T1227] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 595.779063][ T1224] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 595.819319][ T1248] loop5: detected capacity change from 0 to 1 [ 595.848863][ T1248] affs: No valid root block on device loop5 [ 595.911234][ T1224] device veth85 entered promiscuous mode 01:55:56 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:55:56 executing program 2: syz_io_uring_complete(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x282440, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00', 0xffffffffffffffff) 01:55:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x6c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x44, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET={0x1a, 0x2, 0x0, 0x1, {0x34, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0xfffffffffffffd41}, {0x8}, {0x2}]}}]}, @IFLA_GROUP={0x8}]}, 0x6c}}, 0x0) 01:55:56 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00', 0xffffffffffffffff) 01:55:56 executing program 0: msgsnd(0x0, &(0x7f0000000240)={0x2}, 0x8, 0x0) 01:55:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='%o\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000800000004000280180001801400020073797a5f74756e000000000000000000"], 0x30}}, 0x0) 01:55:56 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r0, 0x40285107) 01:55:56 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2, &(0x7f0000000200)=@raw=[@func, @ldst], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 596.239711][ T1290] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 01:55:56 executing program 5: mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8d4e) 01:55:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x24}}, 0x20000041) [ 596.309429][ T1290] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 01:55:56 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) [ 596.377486][ T1290] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 01:55:56 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:55:56 executing program 1: r0 = mq_open(&(0x7f0000000040)='^\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/29, 0x1d, 0x0, &(0x7f0000000140)) [ 596.455447][ T1290] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. [ 596.511585][ T1290] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 01:55:56 executing program 5: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 596.563172][ T1290] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. [ 596.666963][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 596.716787][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 596.753504][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 01:55:56 executing program 4: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f00000004c0), 0x8) 01:55:56 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) 01:55:56 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:55:56 executing program 2: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) bind(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) madvise(&(0x7f0000fd5000/0x1000)=nil, 0x1000, 0x3) 01:55:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r0) 01:55:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r8, @ANYBLOB="000076657468b11c1752cd12ffacf4a4f25e62d5"], 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x4e0, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xaf885b4713a80a22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_EEE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x108, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x103, 0x4, "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"}]}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_EEE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_MODES_OURS={0x244, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffc37}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1a7ec181}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[@!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdab1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']f\\\xfc\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '$&#-\\@:)\'/-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{:!&%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe4fe}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}, @ETHTOOL_A_BITSET_VALUE={0xaa, 0x4, "c0e4f95cb78af72681015ccefbf555d868ffb1d8e4a47d73cb9d3176626c944e465b5c8b9a17e66e4ec672abe2434be652247c80fb921f2978c6ca90c92cc07a9ba640bbd338c76ddd37f04995e4d832ed88496ebf527791bcfa7bcc7ac1a2e507c8b42f3b7e0cb6135b9dcfd52f7d8075776dded8166c527b0a75c631f2b6872bb4bdbe089a7e8d0ebb02d62ab41e2bc7e0e06a16cd9ebbe26edee65857f2eeaf03483c0d19"}]}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x8080}, 0x10) 01:55:57 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc}]}, @NFT_MSG_DELSET={0x4c, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_DATA_LEN={0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_0\x00'}, @NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'sit0\x00'}, @NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_HANDLE={0xc}]}, @NFT_MSG_DELSET={0x14}, @NFT_MSG_NEWSETELEM={0x398, 0xc, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x344, 0x3, 0x0, 0x1, [{0x340, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x41, 0x1, "c95efe5d8f137a719e35c8cf72e37a6fc4ba4376687e7903fbbe37f126c66a11339d81f25679347c02c2e4735701415f35135a1f453e3e976ca81e4576"}]}, @NFTA_SET_ELEM_KEY={0x28, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x5, 0x1, "f8"}]}, @NFTA_SET_ELEM_KEY_END={0x1d4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "200dee7ed5fc481cb99206a7bcc4a0541b74d8d7319318eea578660e6242001b89043dba834d3ccd1b4aa53c7cbf95a6b2e4d5990ae54e5c0b83b3ddffcbaffa679c12c6bdd69b934a293c4a2b668aeaf2a81b352c567ad68bac72eb52d8dd4102c1a81861b6fc0eddd2bd574c71055a467fd5063010886ebf17092a082c17255d4652e5fc28d77a93fae52d4135ad217f9c02b2668d5777297ea4a83d730c26cc"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x75, 0x1, "f3a723081053fd00086e0d75488ff60196d6d58567d1317ceb8cc9f90c9e9630bb66bdf4404d482374e3483f2d96a249e2ce0c2433af75ca0f5fb8a175a0f0d461e8f33c966f988314af2e438c2d2883514e5db62740f22ba1bb70fc16ef6ff31404ab6ac74bbf9dca80b3e6be77a53034"}, @NFTA_DATA_VALUE={0x8d, 0x1, "e60319b4cc3a6ac517899c47d9b3bff0bad3c5d805e1b11247b8311db97bf8c98dacc41db5066a19be26d49da1ca8c86cf77d1e8e30f8a5003d02f2442ac6bc750d114e80b54650d0fd13e2dcdd6a13288052a9d378cc2a31b31b7d9e451d05d081bb9c879d998b9d64c5e65e8d4d1fb083c3d63f9b05fdf27a683d78c24b07989c36128b5189adf1d"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_USERDATA={0x35, 0x6, 0x1, 0x0, "45c4d699e36e325bc42b47400d104e35502b6f2e8c412bf79f04cfb67c67976401633d41479cbcaa1dbb8103d5f4a592f0"}, @NFTA_SET_ELEM_KEY_END={0xb0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa9, 0x1, "2a2ebc350294474db035e2a65d00531042297f42348bd7cfcb1c5c2dad8a81adcab03d6d6c5f1f1defd3823063faa2f18a8e0d07a7dd185efe28a79844cac710f81c76093f808ff7466f7a26ee9f911db47a3a730efe704a706472d07b43f0efb9ed8b4642f29432bad1046d13c80a861e6cf15df71003cc90aa8fbd393aa71ab78c89d859551087d1d9979e29d56ad908526c2f7b0da8348144b36c82b4ef02a3d83b7381"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@counter={{0xc, 0x1, 'counter\x00'}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}]}}]}]}]}], {0x14}}, 0x540}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="08009e00000d000080008480080002000900000008000200000000000a0005004b82012c996200000a000500ffffffffffff0000340006800800000000000000080001000600000008000200000000000800020000000000080001000001000008000200910000000a000500b074a652944700000a0001000202020202020000080902000300000038007d"], 0xdc}}, 0x0) 01:55:57 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_getparam(r0, &(0x7f0000000000)) [ 597.116155][ T1324] device veth87 entered promiscuous mode 01:55:57 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bee83e20d313263266b0000000010902120001000000000904"], 0x0) 01:55:57 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{}, {0x35, 0x0, 0x0, 0x400}, {0x6}]}) 01:55:57 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001240)='nl80211\x00', 0xffffffffffffffff) 01:55:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x570005) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="5cfc67341a4ab345f0000000000000000000000012001f0000000000000000000000006600000001fc0000000000200015b979f10000000000000000"], 0x38) [ 597.375090][ T37] audit: type=1326 audit(1616896557.394:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1339 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 01:55:57 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000003500)={r0, 0x0}, 0x20) 01:55:57 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x18, 0x0, 0x0) 01:55:57 executing program 4: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) io_setup(0x20, &(0x7f00000000c0)) socket$inet(0x2, 0x1, 0x2) [ 597.523338][ T1355] ubi0: attaching mtd0 [ 597.540862][ T1355] ubi0 error: io_init: bad VID header (50331648) or data offsets (50331712) 01:55:57 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:55:57 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) read$dsp(r0, &(0x7f0000000180)=""/62, 0x3e) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x46) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1) [ 597.586628][ T9625] usb 3-1: new high-speed USB device number 11 using dummy_hcd 01:55:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x570005) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="5cfc67341a4ab345f0000000000000000000000012001f0000000000000000000000006600000001fc0000000000200015b979f10000000000000000"], 0x38) [ 597.757408][ T1371] ubi0: attaching mtd0 [ 597.773977][ T1371] ubi0 error: io_init: bad VID header (50331648) or data offsets (50331712) 01:55:57 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r1, 0x0, 0x2, 0x1}}, 0x20) 01:55:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f000000000000000007000000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) [ 597.856843][ T9625] usb 3-1: Using ep0 maxpacket: 32 [ 597.978350][ T9625] usb 3-1: New USB device found, idVendor=13d3, idProduct=3226, bcdDevice=b0.66 [ 597.994997][ T9625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.025549][ T9625] usb 3-1: config 0 descriptor?? [ 598.119536][ T9625] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 598.146275][ T9625] dvb_usb_af9015: probe of 3-1:0.0 failed with error -22 [ 598.325052][ T9625] usb 3-1: USB disconnect, device number 11 [ 598.838665][ T8] kworker/dying (8) used greatest stack depth: 23056 bytes left [ 599.106448][ T9486] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 599.367502][ T9486] usb 3-1: Using ep0 maxpacket: 32 [ 599.507719][ T9486] usb 3-1: New USB device found, idVendor=13d3, idProduct=3226, bcdDevice=b0.66 [ 599.517181][ T9486] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.532283][ T9486] usb 3-1: config 0 descriptor?? [ 599.579128][ T9486] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 599.587440][ T9486] dvb_usb_af9015: probe of 3-1:0.0 failed with error -22 01:55:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x570005) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="5cfc67341a4ab345f0000000000000000000000012001f0000000000000000000000006600000001fc0000000000200015b979f10000000000000000"], 0x38) 01:55:59 executing program 5: socket(0x11, 0x2, 0x4) 01:55:59 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:55:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x10}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x4, 0x9, 0x0, 0x6, 0x69, @empty, @loopback, 0x0, 0x7, 0x8, 0x401}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="002d0000000000000c0012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x2, 0x6, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr=' \x01\x00', 0x20, 0x7, 0x1a8}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x164, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x148, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x268f}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r10}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0xfff, 0x34, 0x9, 0x400}, {0x67, 0x2, 0xff, 0x80000000}, {0x1, 0x5, 0x7f, 0xffff0761}, {0x8001, 0xa6, 0xff, 0x5}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r11}}}]}}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000090}, 0x800) 01:55:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f000000000000000007000000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:55:59 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bee83e20d313263266b0000000010902120001000000000904"], 0x0) [ 599.786602][ T34] usb 3-1: USB disconnect, device number 12 [ 599.888671][ T1410] ubi0: attaching mtd0 [ 599.910079][ T1410] ubi0 error: io_init: bad VID header (50331648) or data offsets (50331712) 01:56:00 executing program 5: io_uring_setup(0x320, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x152}) 01:56:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f000000000000000007000000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:00 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000080000000400028018000180e200020073787a5fd01a1e4d319d6384c062b8f4"], 0x30}}, 0x0) 01:56:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x570005) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="5cfc67341a4ab345f0000000000000000000000012001f0000000000000000000000006600000001fc0000000000200015b979f10000000000000000"], 0x38) 01:56:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f000000000000000007000000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) [ 600.177823][ T1436] ubi0: attaching mtd0 [ 600.194552][ T1436] ubi0 error: io_init: bad VID header (50331648) or data offsets (50331712) [ 600.356337][ T34] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 600.606284][ T34] usb 3-1: Using ep0 maxpacket: 32 [ 600.759020][ T34] usb 3-1: New USB device found, idVendor=13d3, idProduct=3226, bcdDevice=b0.66 [ 600.768606][ T34] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.785159][ T34] usb 3-1: config 0 descriptor?? [ 600.833769][ T34] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 600.841447][ T34] dvb_usb_af9015: probe of 3-1:0.0 failed with error -22 [ 601.042500][ T34] usb 3-1: USB disconnect, device number 13 01:56:01 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bee83e20d313263266b0000000010902120001000000000904"], 0x0) 01:56:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x10c, r1, 0x800, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0xf4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x72c}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffc258}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe9}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}]}, 0x10c}}, 0x10000831) 01:56:01 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000140)={0x0, 0x0}) 01:56:01 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f000000000000000007000000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:01 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x570005) 01:56:01 executing program 3: close(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="30060800", @ANYRES16=r1, @ANYBLOB="01000000000000000000080000000400028018000180140002007379400074756e000000000000000000"], 0x30}}, 0x0) 01:56:01 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:01 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f000000000000000007000000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:01 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004340)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000045c0)={0x2020}, 0x2020) 01:56:01 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x570005) 01:56:01 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) [ 602.006459][ T9625] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 602.266176][ T9625] usb 3-1: Using ep0 maxpacket: 32 [ 602.406737][ T9625] usb 3-1: New USB device found, idVendor=13d3, idProduct=3226, bcdDevice=b0.66 [ 602.416231][ T9625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.426869][ T9625] usb 3-1: config 0 descriptor?? [ 602.468490][ T9625] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 602.475837][ T9625] dvb_usb_af9015: probe of 3-1:0.0 failed with error -22 [ 602.679160][ T9625] usb 3-1: USB disconnect, device number 14 01:56:03 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bee83e20d313263266b0000000010902120001000000000904"], 0x0) 01:56:03 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000007ec0)={0x77359400}) 01:56:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="77c600007152edc1e7cf4a50f52aa90f88be49a377adb6bca6e9f786c062dc1ffa5869dabc70fbcb3bb0b7229a429ba01df0986d86bbebe8332f12205ebb19913b1415e81b86e492c617457c34a227792c2352590ef90250c08c68b35518b167254d2e24bc1e6237521c831513c9703da43b34b3a6d3672de02416d2dacd5be223558569e74e67ce459d12c90fb6f0274676b201ad6a045f8e90c69af0", @ANYRES16=r1, @ANYBLOB="010000000000000000000800000004000280180001801400020073797a5f74756e000000000000000000"], 0x30}}, 0x0) 01:56:03 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f000000000000000007000000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:03 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x570005) 01:56:03 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x570005) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="5cfc67341a4ab345f0000000000000000000000012001f0000000000000000000000006600000001fc0000000000200015b979f10000000000000000"], 0x38) 01:56:03 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000007c0)={0x1, &(0x7f0000000780)=[{0x5}]}) 01:56:03 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:03 executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f000000000000000007000000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:03 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') read$FUSE(r0, &(0x7f0000000cc0)={0x2020}, 0x2020) 01:56:03 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/renderD128\x00', 0x44000, 0x0) [ 603.586283][ T3049] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 603.846045][ T3049] usb 3-1: Using ep0 maxpacket: 32 [ 603.966357][ T3049] usb 3-1: New USB device found, idVendor=13d3, idProduct=3226, bcdDevice=b0.66 [ 603.980234][ T3049] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.995111][ T3049] usb 3-1: config 0 descriptor?? [ 604.038503][ T3049] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 604.045566][ T3049] dvb_usb_af9015: probe of 3-1:0.0 failed with error -22 [ 604.245214][ T34] usb 3-1: USB disconnect, device number 15 01:56:04 executing program 2: 01:56:04 executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f000000000000000007000000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x570005) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="5cfc67341a4ab345f0000000000000000000000012001f0000000000000000000000006600000001fc0000000000200015b979f10000000000000000"], 0x38) 01:56:04 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:04 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x2024) 01:56:04 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f00000006c0)={0x0, 0x25, 0x0, 0x0, 0x0, 0xffffffffffffff5a}, 0x40) 01:56:04 executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f000000000000000007000000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:04 executing program 5: perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x80, 0x200) 01:56:04 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002800050ad25a802e8c63940d0424fc60040018400a0009000200000037153e370a00038004000008d1bd", 0x33fe0}], 0x1}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) 01:56:04 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x570005) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="5cfc67341a4ab345f0000000000000000000000012001f0000000000000000000000006600000001fc0000000000200015b979f10000000000000000"], 0x38) 01:56:05 executing program 2: 01:56:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 01:56:05 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) socket$inet6_sctp(0x1c, 0x5, 0x84) close_range(r0, 0xffffffffffffffff, 0x0) 01:56:05 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:05 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x570005) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="5cfc67341a4ab345f0000000000000000000000012001f0000000000000000000000006600000001fc0000000000200015b979f10000000000000000"], 0x38) 01:56:05 executing program 2: 01:56:05 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000001c0), 0x98) 01:56:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 01:56:05 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:05 executing program 2: syz_usb_connect(0x0, 0x24, 0x0, 0x0) 01:56:05 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x570005) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="5cfc67341a4ab345f0000000000000000000000012001f0000000000000000000000006600000001fc0000000000200015b979f10000000000000000"], 0x38) 01:56:05 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x104, &(0x7f0000000180), &(0x7f0000000200)=0x4) 01:56:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 01:56:05 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) recvmsg(r0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=""/72, 0x48}, 0x40001) 01:56:05 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:05 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x570005) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="5cfc67341a4ab345f0000000000000000000000012001f0000000000000000000000006600000001fc0000000000200015b979f10000000000000000"], 0x38) 01:56:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 01:56:05 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x570005) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="5cfc67341a4ab345f0000000000000000000000012001f0000000000000000000000006600000001fc0000000000200015b979f10000000000000000"], 0x38) 01:56:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x570005) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="5cfc67341a4ab345f0000000000000000000000012001f0000000000000000000000006600000001fc0000000000200015b979f10000000000000000"], 0x38) 01:56:05 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 01:56:06 executing program 2: syz_usb_connect(0x0, 0x24, 0x0, 0x0) 01:56:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x64, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x1a}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0xfffffffffffffe71}, 0x1, 0x0, 0x0, 0x4}, 0x0) 01:56:06 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x570005) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="5cfc67341a4ab345f0000000000000000000000012001f0000000000000000000000006600000001fc0000000000200015b979f10000000000000000"], 0x38) 01:56:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x570005) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="5cfc67341a4ab345f0000000000000000000000012001f0000000000000000000000006600000001fc0000000000200015b979f10000000000000000"], 0x38) 01:56:06 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 01:56:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x570005) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="5cfc67341a4ab345f0000000000000000000000012001f0000000000000000000000006600000001fc0000000000200015b979f10000000000000000"], 0x38) 01:56:06 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) [ 606.157516][ T1668] __nla_validate_parse: 181 callbacks suppressed [ 606.157539][ T1668] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:06 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x570005) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="5cfc67341a4ab345f0000000000000000000000012001f0000000000000000000000006600000001fc0000000000200015b979f10000000000000000"], 0x38) 01:56:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) [ 606.249830][ T1670] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 606.306772][ T1670] device veth43 entered promiscuous mode 01:56:06 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:06 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x570005) [ 606.354583][ T1668] device veth41 entered promiscuous mode [ 606.383614][ T1668] device veth41 left promiscuous mode 01:56:06 executing program 2: syz_usb_connect(0x0, 0x24, 0x0, 0x0) 01:56:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) 01:56:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x570005) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="5cfc67341a4ab345f0000000000000000000000012001f0000000000000000000000006600000001fc0000000000200015b979f10000000000000000"], 0x38) 01:56:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:06 executing program 3: ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x570005) 01:56:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x64, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x1a}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0xfffffffffffffe71}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 606.824314][ T1708] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x570005) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="5cfc67341a4ab345f0000000000000000000000012001f0000000000000000000000006600000001fc0000000000200015b979f10000000000000000"], 0x38) 01:56:06 executing program 3: ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x570005) [ 606.913690][ T1715] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) [ 606.987732][ T1715] device veth47 entered promiscuous mode [ 607.021481][ T1708] device veth45 entered promiscuous mode 01:56:07 executing program 3: ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x570005) [ 607.055977][ T1708] device veth45 left promiscuous mode 01:56:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x570005) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="5cfc67341a4ab345f0000000000000000000000012001f0000000000000000000000006600000001fc0000000000200015b979f10000000000000000"], 0x38) 01:56:07 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 01:56:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f000000000000000007000000", @ANYRES32], 0x20}}, 0x0) 01:56:07 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x570005) 01:56:07 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x570005) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="5cfc67341a4ab345f0000000000000000000000012001f0000000000000000000000006600000001fc0000000000200015b979f10000000000000000"], 0x38) 01:56:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x64, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x1a}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0xfffffffffffffe71}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 607.485701][ T1761] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:07 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x570005) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="5cfc67341a4ab345f0000000000000000000000012001f0000000000000000000000006600000001fc0000000000200015b979f10000000000000000"], 0x38) 01:56:07 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x570005) 01:56:07 executing program 0: r0 = socket$kcm(0x10, 0x0, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) [ 607.573663][ T1765] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 607.604539][ T1768] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f000000000000000007000000", @ANYRES32], 0x20}}, 0x0) 01:56:07 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x570005) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="5cfc67341a4ab345f0000000000000000000000012001f0000000000000000000000006600000001fc0000000000200015b979f10000000000000000"], 0x38) [ 607.672719][ T1768] device veth51 entered promiscuous mode [ 607.704019][ T1761] device veth49 entered promiscuous mode 01:56:07 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x570005) [ 607.756439][ T1761] device veth49 left promiscuous mode [ 607.804318][ T1788] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 607.853624][ T34] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 608.061392][ T34] usb 3-1: device descriptor read/64, error 18 [ 608.355694][ T34] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 608.565517][ T34] usb 3-1: device descriptor read/64, error 18 [ 608.687012][ T34] usb usb3-port1: attempt power cycle [ 609.415434][ T34] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 609.645724][ T34] usb 3-1: device descriptor read/8, error -61 [ 609.915509][ T34] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 610.095676][ T34] usb 3-1: device descriptor read/8, error -61 [ 610.216113][ T34] usb usb3-port1: unable to enumerate USB device 01:56:10 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 01:56:10 executing program 0: r0 = socket$kcm(0x10, 0x0, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f000000000000000007000000", @ANYRES32], 0x20}}, 0x0) 01:56:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x570005) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="5cfc67341a4ab345f0000000000000000000000012001f0000000000000000000000006600000001fc0000000000200015b979f10000000000000000"], 0x38) 01:56:10 executing program 3: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x570005) 01:56:10 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:10 executing program 0: r0 = socket$kcm(0x10, 0x0, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) [ 610.525908][ T1808] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:56:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f000000000000000007000000", @ANYRES32, @ANYBLOB], 0x20}}, 0x0) [ 610.599099][ T1811] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 610.607586][ T1813] ubi0: attaching mtd0 [ 610.630615][ T1813] ubi0 error: io_init: bad VID header (50331648) or data offsets (50331712) 01:56:10 executing program 3: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x570005) 01:56:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x570005) setsockopt$inet6_opts(r0, 0x29, 0x0, 0x0, 0x38) [ 610.657249][ T1811] device veth55 entered promiscuous mode [ 610.683873][ T1811] device veth53 entered promiscuous mode [ 610.729699][ T1811] device veth53 left promiscuous mode 01:56:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f000000000000000007000000", @ANYRES32, @ANYBLOB], 0x20}}, 0x0) 01:56:10 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) [ 610.855418][ T34] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 610.877074][ T1840] ubi0: attaching mtd0 [ 610.890879][ T1840] ubi0 error: io_init: bad VID header (50331648) or data offsets (50331712) [ 611.085287][ T34] usb 3-1: device descriptor read/64, error 18 [ 611.355416][ T34] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 611.555368][ T34] usb 3-1: device descriptor read/64, error 18 [ 611.675562][ T34] usb usb3-port1: attempt power cycle [ 612.405342][ T34] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 612.595770][ T34] usb 3-1: device descriptor read/8, error -61 [ 612.865182][ T34] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 613.045802][ T34] usb 3-1: device descriptor read/8, error -61 [ 613.168092][ T34] usb usb3-port1: unable to enumerate USB device 01:56:13 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 01:56:13 executing program 3: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x570005) 01:56:13 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f000000000000000007000000", @ANYRES32, @ANYBLOB], 0x20}}, 0x0) 01:56:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) [ 613.601262][ T1863] __nla_validate_parse: 3 callbacks suppressed [ 613.601283][ T1863] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:56:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) [ 613.643212][ T1864] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f000000000000000007000000", @ANYRES32, @ANYBLOB='\b\x00'], 0x20}}, 0x0) 01:56:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:13 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f000000000000000007000000", @ANYRES32, @ANYBLOB='\b\x00'], 0x20}}, 0x0) 01:56:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f000000000000000007000000", @ANYRES32, @ANYBLOB='\b\x00'], 0x20}}, 0x0) [ 613.887693][ T1885] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 614.001727][ T9497] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 614.225339][ T9497] usb 3-1: device descriptor read/64, error 18 [ 614.495091][ T9497] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 614.685218][ T9497] usb 3-1: device descriptor read/64, error 18 [ 614.805344][ T9497] usb usb3-port1: attempt power cycle [ 615.534965][ T9497] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 615.705731][ T9497] usb 3-1: device descriptor read/8, error -61 [ 615.974923][ T9497] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 616.145340][ T9497] usb 3-1: device descriptor read/8, error -61 [ 616.265610][ T9497] usb usb3-port1: unable to enumerate USB device 01:56:16 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 01:56:16 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:16 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f000000000000000007000000", @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f000000000000000007000000", @ANYBLOB="080001"], 0x20}}, 0x0) [ 616.638381][ T1910] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 616.673007][ T1911] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:16 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:16 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000006740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000006680)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}, 0x50) 01:56:16 executing program 3: r0 = socket(0x18, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 616.772651][ T1924] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:56:16 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:16 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000)=0x4, 0x4) 01:56:16 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) 01:56:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f000000000000000007000000", @ANYBLOB="080001"], 0x20}}, 0x0) [ 616.966114][ T1934] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 617.022964][ T1938] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 617.045795][ T1934] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 617.084944][ T8998] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 617.284906][ T8998] usb 3-1: device descriptor read/64, error 18 [ 617.555404][ T8998] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 617.744897][ T8998] usb 3-1: device descriptor read/64, error 18 [ 617.866408][ T8998] usb usb3-port1: attempt power cycle [ 618.574707][ T8998] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 618.745056][ T8998] usb 3-1: device descriptor read/8, error -61 [ 619.014630][ T8998] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 619.184700][ T8998] usb 3-1: device descriptor read/8, error -61 [ 619.305210][ T8998] usb usb3-port1: unable to enumerate USB device 01:56:19 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 01:56:19 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:19 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 01:56:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='wchan\x00') write$FUSE_POLL(r0, 0x0, 0x0) 01:56:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:19 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 619.740496][ T1966] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:19 executing program 1: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0xff, 0x2, 0x7, 0x4, 0x0, 0x100, 0x443, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x9}, 0x2010, 0xffffffffffff7fff, 0x10001, 0x7, 0x100000000, 0x9, 0x1}) r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x20, 0x1, 0x6, 0x2b, 0x0, 0x3, 0x14820, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffc01, 0x0, @perf_bp={&(0x7f0000000080), 0x45f083a355a331ae}, 0x414, 0x6e7a, 0x1, 0x3, 0x1, 0xffffffa5, 0xfe4b}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x7) r1 = perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x20, 0x7f, 0x7f, 0x6, 0x0, 0x1d, 0x80, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000140), 0xa}, 0xa033, 0x9, 0x2, 0x1, 0x2c9, 0x1f, 0x101}, 0xffffffffffffffff, 0x2, r0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x2, 0x70, 0xf8, 0x4, 0x94, 0x7, 0x0, 0xc36b, 0x20, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000200), 0x9}, 0x8000, 0x4, 0x8, 0x6, 0x101, 0x2, 0xff7f}) r2 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x9, 0x1) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000300)={0x8, 0xef, 0x7, 0x81, 0x8, 0xb5}) r3 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x80, 0x200) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000380)={&(0x7f0000ffc000/0x2000)=nil}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x32) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffffffe) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000440)={0x4c0, 0x384, 0x3c00, 0x0, 0x5, 0x7, 0x18, 0x0, {0x7, 0x4, 0x1}, {0x9, 0x1}, {0x70, 0x1}, {0x40, 0x8}, 0x0, 0x0, 0x1940, 0x0, 0x0, 0x9, 0x3, 0x2, 0xdeb, 0x6, 0x1f, 0x47b5cdf2, 0x28, 0x1, 0x2, 0xb}) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000500)={0x3f, 0x3fe0000, 0x401, 0x2, 0x11, 0xffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000540)='j%!+:\x00') ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000005c0)={0x2, 0x0, &(0x7f0000000580)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000600)={r4}) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x10010, r0, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x5) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000640)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) 01:56:19 executing program 3: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)) io_setup(0x3, &(0x7f0000000600)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) io_destroy(r0) 01:56:19 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) [ 619.846416][ T1973] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:20 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) [ 620.065824][ T3049] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 620.254524][ T3049] usb 3-1: device descriptor read/64, error 18 [ 620.524512][ T3049] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 620.714624][ T3049] usb 3-1: device descriptor read/64, error 18 [ 620.836070][ T3049] usb usb3-port1: attempt power cycle [ 621.544588][ T3049] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 621.734788][ T3049] usb 3-1: device descriptor read/8, error -61 [ 622.004783][ T3049] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 622.174914][ T3049] usb 3-1: device descriptor read/8, error -61 [ 622.294588][ T3049] usb usb3-port1: unable to enumerate USB device 01:56:22 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 01:56:22 executing program 1: io_setup(0x8001, &(0x7f0000000340)) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000540)) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, 0x0) io_setup(0x3, &(0x7f0000000600)) io_getevents(0x0, 0xfe65, 0x0, &(0x7f0000000640), &(0x7f00000006c0)={0x0, 0x989680}) io_destroy(0x0) 01:56:22 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:22 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) 01:56:22 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:22 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002440)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000002480)) [ 622.832138][ T2029] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:22 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) [ 622.885917][ T2029] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:23 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:23 executing program 1: io_setup(0x3, &(0x7f0000000600)=0x0) io_getevents(r0, 0xfe65, 0x0, 0x0, 0x0) 01:56:23 executing program 3: perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 623.122465][ T2054] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 623.132444][ T9497] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 623.334378][ T9497] usb 3-1: device descriptor read/64, error 18 [ 623.604457][ T9497] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 623.804259][ T9497] usb 3-1: device descriptor read/64, error 18 [ 623.924710][ T9497] usb usb3-port1: attempt power cycle [ 624.434811][ T3232] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.441736][ T3232] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.644240][ T9497] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 624.814317][ T9497] usb 3-1: device descriptor read/8, error -61 [ 625.084136][ T9497] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 625.254236][ T9497] usb 3-1: device descriptor read/8, error -61 [ 625.374352][ T9497] usb usb3-port1: unable to enumerate USB device 01:56:25 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bee83e20d313263266b000"], 0x0) 01:56:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:25 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, 0x0) 01:56:25 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:25 executing program 1: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$FUSE_WRITE(r0, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_POLL(r0, &(0x7f0000000100)={0x18}, 0x18) [ 625.870527][ T2077] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f0000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:26 executing program 1: openat$drirender128(0xffffffffffffff9c, 0x0, 0x161300, 0x0) 01:56:26 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:26 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002440)='/dev/dri/renderD128\x00', 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0}) 01:56:26 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f0000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) [ 626.214391][ T8998] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 626.235850][ T2104] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 626.469284][ T8998] usb 3-1: Using ep0 maxpacket: 32 [ 626.516038][ T8998] usb 3-1: no configurations [ 626.521205][ T8998] usb 3-1: can't read configurations, error -22 [ 626.674157][ T8998] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 626.913959][ T8998] usb 3-1: Using ep0 maxpacket: 32 [ 626.954855][ T8998] usb 3-1: no configurations [ 626.959637][ T8998] usb 3-1: can't read configurations, error -22 [ 626.968398][ T8998] usb usb3-port1: attempt power cycle [ 627.714029][ T8998] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 627.804588][ T8998] usb 3-1: Using ep0 maxpacket: 32 [ 627.844298][ T8998] usb 3-1: no configurations [ 627.849477][ T8998] usb 3-1: can't read configurations, error -22 [ 628.003996][ T8998] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 628.094509][ T8998] usb 3-1: Using ep0 maxpacket: 32 [ 628.134071][ T8998] usb 3-1: no configurations [ 628.138860][ T8998] usb 3-1: can't read configurations, error -22 [ 628.151654][ T8998] usb usb3-port1: unable to enumerate USB device 01:56:28 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bee83e20d313263266b000"], 0x0) 01:56:28 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2, 0x52}, {0x9}]}) 01:56:28 executing program 1: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x77359400}) 01:56:28 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f0000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:28 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:29 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:29 executing program 1: syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x1) [ 628.969179][ T2142] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f00000000000000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:29 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) [ 629.072292][ T2142] device veth75 entered promiscuous mode 01:56:29 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:29 executing program 1: io_setup(0x3, &(0x7f0000000600)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x989680}) [ 629.274408][ T2172] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 629.312392][ T2172] device veth77 entered promiscuous mode [ 629.328649][ T9486] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 629.583921][ T9486] usb 3-1: Using ep0 maxpacket: 32 [ 629.624077][ T9486] usb 3-1: no configurations [ 629.628869][ T9486] usb 3-1: can't read configurations, error -22 [ 629.783878][ T9486] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 630.039759][ T9486] usb 3-1: Using ep0 maxpacket: 32 [ 630.084169][ T9486] usb 3-1: no configurations [ 630.089065][ T9486] usb 3-1: can't read configurations, error -22 [ 630.096445][ T9486] usb usb3-port1: attempt power cycle [ 630.813766][ T9486] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 630.903714][ T9486] usb 3-1: Using ep0 maxpacket: 32 [ 630.943812][ T9486] usb 3-1: no configurations [ 630.948733][ T9486] usb 3-1: can't read configurations, error -22 [ 631.103799][ T9486] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 631.203790][ T9486] usb 3-1: Using ep0 maxpacket: 32 [ 631.255205][ T9486] usb 3-1: no configurations [ 631.259905][ T9486] usb 3-1: can't read configurations, error -22 [ 631.269424][ T9486] usb usb3-port1: unable to enumerate USB device 01:56:32 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bee83e20d313263266b000"], 0x0) 01:56:32 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f00000000000000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:32 executing program 3: io_uring_setup(0x320, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x152}) 01:56:32 executing program 1: syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_cache\x00') 01:56:32 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:32 executing program 3: pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x77359400}) [ 632.096860][ T2198] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f00000000000000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:32 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:32 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000004540)='/dev/udmabuf\x00', 0x2) [ 632.168117][ T2198] device veth79 entered promiscuous mode 01:56:32 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:32 executing program 3: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 632.364026][ T2223] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 632.443686][ T8998] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 632.452686][ T2226] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 632.471436][ T2226] device veth81 entered promiscuous mode [ 632.683561][ T8998] usb 3-1: Using ep0 maxpacket: 32 [ 632.724143][ T8998] usb 3-1: no configurations [ 632.728982][ T8998] usb 3-1: can't read configurations, error -22 [ 632.883600][ T8998] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 633.134408][ T8998] usb 3-1: Using ep0 maxpacket: 32 [ 633.173587][ T8998] usb 3-1: no configurations [ 633.178556][ T8998] usb 3-1: can't read configurations, error -22 [ 633.191270][ T8998] usb usb3-port1: attempt power cycle [ 633.903571][ T8998] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 634.003937][ T8998] usb 3-1: Using ep0 maxpacket: 32 [ 634.044005][ T8998] usb 3-1: no configurations [ 634.048929][ T8998] usb 3-1: can't read configurations, error -22 [ 634.203464][ T8998] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 634.293696][ T8998] usb 3-1: Using ep0 maxpacket: 32 [ 634.334143][ T8998] usb 3-1: no configurations [ 634.339152][ T8998] usb 3-1: can't read configurations, error -22 [ 634.351256][ T8998] usb usb3-port1: unable to enumerate USB device 01:56:35 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bee83e20d313263266b00000000109021200"], 0x0) 01:56:35 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, 0x0, 0x0, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:35 executing program 3: syz_open_dev$hiddev(&(0x7f0000000000)='/dev/usb/hiddev#\x00', 0x0, 0x260802) 01:56:35 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) 01:56:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f00000000000000000700", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:35 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 635.106997][ T2249] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:56:35 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip_tables_targets\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip_tables_targets\x00') 01:56:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f00000000000000000700", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:35 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, 0x0, 0x0, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) [ 635.150053][ T2253] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:35 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000006740)={0x0, 0x0, 0x0}, 0x0) [ 635.233372][ T2259] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:35 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) [ 635.286582][ T2259] device veth83 entered promiscuous mode 01:56:35 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 635.345992][ T2273] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 635.423307][ T7] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 635.525120][ T2282] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 635.582912][ T2290] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 635.621461][ T2290] device veth85 entered promiscuous mode [ 635.663635][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 635.783350][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.794405][ T7] usb 3-1: config 0 has no interfaces? [ 635.799967][ T7] usb 3-1: New USB device found, idVendor=13d3, idProduct=3226, bcdDevice=b0.66 [ 635.812226][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.826845][ T7] usb 3-1: config 0 descriptor?? [ 636.076178][T29792] usb 3-1: USB disconnect, device number 52 01:56:36 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, 0x0, 0x0, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:36 executing program 1: getresuid(&(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)) 01:56:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f00000000000000000700", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:36 executing program 3: syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x80, 0x0) 01:56:36 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bee83e20d313263266b00000000109021200"], 0x0) 01:56:36 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:36 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) [ 636.689190][ T2313] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:36 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 01:56:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f0000000000000000070000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000300)) [ 636.791566][ T2320] device veth89 entered promiscuous mode 01:56:36 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:36 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f0000000000000000070000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:37 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip_tables_targets\x00') [ 637.003229][ T34] usb 3-1: new high-speed USB device number 53 using dummy_hcd 01:56:37 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 01:56:37 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) [ 637.088660][ T2343] device veth93 entered promiscuous mode [ 637.113771][ T2356] __nla_validate_parse: 5 callbacks suppressed [ 637.113790][ T2356] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 637.253125][ T34] usb 3-1: Using ep0 maxpacket: 32 [ 637.373727][ T34] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.384485][ T34] usb 3-1: config 0 has no interfaces? [ 637.390146][ T34] usb 3-1: New USB device found, idVendor=13d3, idProduct=3226, bcdDevice=b0.66 [ 637.399691][ T34] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.412794][ T34] usb 3-1: config 0 descriptor?? [ 637.656169][ T7] usb 3-1: USB disconnect, device number 53 01:56:38 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bee83e20d313263266b00000000109021200"], 0x0) 01:56:38 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007200030f0000000000000000070000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) 01:56:38 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rtc0\x00', 0x8402, 0x0) 01:56:38 executing program 0: socket$kcm(0x10, 0x2, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:38 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000006740)={0x0, 0x0, &(0x7f0000000cc0)=[{0x0}, {0x0}], 0x2, &(0x7f0000006680)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}, 0x50) [ 638.268485][ T2384] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:56:38 executing program 3: io_getevents(0x0, 0x8, 0x0, 0x0, &(0x7f0000000040)={0x77359400}) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, &(0x7f0000000080)="7607aea6ebe1d2813c0c", 0xa, 0x2}, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000140)={0xff, 0x6, 0x2, 0x0, 0x2769, 0x79b, 0x0, 0x1}, &(0x7f0000000180)={0x7fffffff, 0x5, 0x0, 0x800, 0x4, 0x4, 0x6, 0x3}, &(0x7f00000001c0)={0x7, 0x10000, 0xf241, 0xffffffffffffffe0, 0xa5, 0xffffffffe3a99db7, 0x80000001, 0x8001}, &(0x7f0000000240)={r0, r1+60000000}, &(0x7f00000002c0)={&(0x7f0000000280)={[0xfffe00000]}, 0x8}) io_setup(0x8001, &(0x7f0000000340)=0x0) io_getevents(r2, 0x4, 0x6, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f00000005c0)) io_getevents(0x0, 0xfe65, 0x4, &(0x7f0000000640)=[{}, {}, {}, {}], &(0x7f00000006c0)={0x0, 0x989680}) bind$xdp(0xffffffffffffffff, 0x0, 0x0) 01:56:38 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) [ 638.325795][ T2386] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:38 executing program 0: socket$kcm(0x10, 0x2, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:38 executing program 4: socket(0x3, 0x0, 0xfffffffa) [ 638.398408][ T2394] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 638.483733][ T2394] device veth97 entered promiscuous mode 01:56:38 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:38 executing program 4: syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xe7, 0x0) [ 638.583224][ T34] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 638.662459][ T2417] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 638.741846][ T2422] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 638.790233][ T2422] device veth99 entered promiscuous mode [ 638.823269][ T34] usb 3-1: Using ep0 maxpacket: 32 [ 638.943343][ T34] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.954251][ T34] usb 3-1: config 0 has no interfaces? [ 638.959948][ T34] usb 3-1: New USB device found, idVendor=13d3, idProduct=3226, bcdDevice=b0.66 [ 638.970091][ T34] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.983953][ T34] usb 3-1: config 0 descriptor?? [ 639.236256][T29792] usb 3-1: USB disconnect, device number 54 01:56:39 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bee83e20d313263266b0000000010902120001000000"], 0x0) 01:56:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2, 0x0, 0x0, 0x6}, {0x9, 0x50, 0xc5}, {}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 01:56:39 executing program 0: socket$kcm(0x10, 0x2, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc60", 0x14}], 0x1}, 0x0) 01:56:39 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000002700)={0x420}, 0x420}}, 0x0) 01:56:39 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) 01:56:39 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:39 executing program 1: openat$userio(0xffffffffffffff9c, 0x0, 0x432480, 0x0) 01:56:39 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x161300, 0x0) [ 639.840746][ T2449] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:40 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 01:56:40 executing program 3: pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) [ 639.916693][ T2457] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 639.954846][ T2457] device veth101 entered promiscuous mode 01:56:40 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_mtu(r0, 0x0, 0x2, 0x0, 0x0) [ 640.157448][ T2480] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 640.168973][T29792] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 640.242932][ T2487] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 640.287502][ T2487] device veth103 entered promiscuous mode [ 640.443541][T29792] usb 3-1: Using ep0 maxpacket: 32 [ 640.562889][T29792] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.575313][T29792] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 640.587921][T29792] usb 3-1: New USB device found, idVendor=13d3, idProduct=3226, bcdDevice=b0.66 [ 640.599321][T29792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.611273][T29792] usb 3-1: config 0 descriptor?? [ 640.857812][ T34] usb 3-1: USB disconnect, device number 55 01:56:41 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bee83e20d313263266b0000000010902120001000000"], 0x0) 01:56:41 executing program 1: pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x160, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x138, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x128, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}, @IFLA_VLAN_INGRESS_QOS={0x64, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa99, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7ff, 0x7f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x10001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffd, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcb0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xae5f}}]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x200f3af9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fffffff, 0x38}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x104}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x160}}, 0x8000) 01:56:41 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 01:56:41 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x40000) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) readv(r0, &(0x7f0000002600)=[{&(0x7f00000012c0)=""/4095, 0xfff}], 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 01:56:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket(0x2b, 0x0, 0x1) 01:56:41 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x803, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:41 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, 0x0, 0x0) [ 641.489908][ T2524] device veth105 entered promiscuous mode 01:56:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xffffffffffffe3bc, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001900)='/dev/ocfs2_control\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 01:56:41 executing program 1: pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x160, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x138, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x128, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}, @IFLA_VLAN_INGRESS_QOS={0x64, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa99, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7ff, 0x7f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x10001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffd, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcb0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xae5f}}]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x200f3af9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fffffff, 0x38}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x104}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x160}}, 0x8000) 01:56:41 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x803, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:41 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003140)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}], 0x20}, 0x0) 01:56:41 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 641.732207][ T2547] mmap: syz-executor.3 (2547) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 641.768779][ T2548] device veth107 entered promiscuous mode [ 641.812968][ T7] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 642.061827][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 642.182915][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.194756][ T7] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 642.206320][ T7] usb 3-1: New USB device found, idVendor=13d3, idProduct=3226, bcdDevice=b0.66 [ 642.217400][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.230831][ T7] usb 3-1: config 0 descriptor?? [ 642.476020][T29792] usb 3-1: USB disconnect, device number 56 01:56:43 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bee83e20d313263266b0000000010902120001000000"], 0x0) 01:56:43 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x24) 01:56:43 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x803, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:43 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x401070c9, 0xffffffffffffffff) 01:56:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xffffffffffffe3bc, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001900)='/dev/ocfs2_control\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 01:56:43 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 643.097463][ T2587] __nla_validate_parse: 2 callbacks suppressed [ 643.097483][ T2587] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:43 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) 01:56:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f000000d0c0)={0x0, 0x0, &(0x7f000000cf00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 01:56:43 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 01:56:43 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000240)={0x0, "16b4140671fdb3e666933e0515467f019dda3696ada1720d0578815a3aa52200d03a6a1bb0683cb8e86889422d8282020e42170854a4d4f0173f83e12afb2e99"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x3, r0, 0xfffffffffffffffd, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000240)={0x0, "16b4140671fdb3e666933e0515467f019dda3696ada1720d0578815a3aa52200d03a6a1bb0683cb8e86889422d8282020e42170854a4d4f0173f83e12afb2e99"}, 0x48, 0xfffffffffffffffc) [ 643.185261][ T2587] device veth109 entered promiscuous mode 01:56:43 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) 01:56:43 executing program 4: prctl$PR_SET_MM_MAP(0x18, 0x540000, 0x0, 0x0) [ 643.416602][ T2611] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 643.452606][ T8998] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 643.473042][ T2611] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 643.509659][ T2611] device veth113 entered promiscuous mode [ 643.530141][ T2611] device veth111 entered promiscuous mode [ 643.723450][ T8998] usb 3-1: Using ep0 maxpacket: 32 [ 643.842911][ T8998] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.854041][ T8998] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 643.863777][ T8998] usb 3-1: New USB device found, idVendor=13d3, idProduct=3226, bcdDevice=b0.66 [ 643.873816][ T8998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.885209][ T8998] usb 3-1: config 0 descriptor?? [ 644.128860][ T34] usb 3-1: USB disconnect, device number 57 01:56:44 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bee83e20d313263266b00000000109021200010000000009"], 0x0) 01:56:44 executing program 1: openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x470402}, 0x18) 01:56:44 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 01:56:44 executing program 3: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000002c0)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x3) 01:56:44 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x19, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:56:44 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) [ 644.692732][ T2646] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:44 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$vcsu(&(0x7f0000000580)='/dev/vcsu#\x00', 0x400, 0x40000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000740), 0x1, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x200, 0x8, {"17b8563f76b969c5cdc80efde3596f6a"}, 0xf4, 0x1, 0x800}}}, 0xa0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003080)={'veth0_to_bond\x00'}) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f00000036c0)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003680)={&(0x7f0000003600)={0x44, 0x453, 0x8, 0x70bd26, 0x25dfdbfb, "3a536a93e279d954a68905472639167abe168ea2615e6a3d7e544f82f9ea99d120784bbba58f98e36ac1afe6e14366b703f7", ["", "", "", "", "", ""]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40) 01:56:44 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 01:56:44 executing program 1: r0 = semget$private(0x0, 0x4, 0x0) semctl$IPC_RMID(r0, 0x4, 0x10) 01:56:44 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x40505412) [ 644.800639][ T2653] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:44 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 644.852645][ T2653] device veth117 entered promiscuous mode [ 644.887473][ T2665] device veth115 entered promiscuous mode 01:56:44 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) [ 644.917867][ T37] audit: type=1107 audit(1616896604.938:12): pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=':SjyTG&9za^j=~TO xKjCf' [ 645.042587][ T7] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 645.302452][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 645.423100][ T7] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 645.432859][ T7] usb 3-1: New USB device found, idVendor=13d3, idProduct=3226, bcdDevice=b0.66 [ 645.443522][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.459698][ T7] usb 3-1: config 0 descriptor?? [ 645.711172][ T7] usb 3-1: USB disconnect, device number 58 01:56:46 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bee83e20d313263266b00000000109021200010000000009"], 0x0) 01:56:46 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETA(r0, 0x5429, 0x0) 01:56:46 executing program 1: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000002c0)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) 01:56:46 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) 01:56:46 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) 01:56:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 01:56:46 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) ioctl$FIOCLEX(r0, 0x5451) 01:56:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) [ 646.329323][ T2710] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:46 executing program 1: r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, 0x0) 01:56:46 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) [ 646.412514][ T2715] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 01:56:46 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0)='nl80211\x00', 0xffffffffffffffff) [ 646.487183][ T2715] device veth121 entered promiscuous mode [ 646.524088][ T2710] device veth119 entered promiscuous mode [ 646.622364][ T34] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 646.876569][ T34] usb 3-1: Using ep0 maxpacket: 32 [ 647.002724][ T34] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 647.011911][ T34] usb 3-1: New USB device found, idVendor=13d3, idProduct=3226, bcdDevice=b0.66 [ 647.023523][ T34] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.037188][ T34] usb 3-1: config 0 descriptor?? [ 647.284980][ T34] usb 3-1: USB disconnect, device number 59 01:56:47 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bee83e20d313263266b00000000109021200010000000009"], 0x0) 01:56:47 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x40485404) 01:56:47 executing program 4: clone3(&(0x7f00000001c0)={0x48042200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:56:47 executing program 3: socketpair(0x2c, 0x3, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0)='nl80211\x00', 0xffffffffffffffff) syz_usbip_server_init(0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000036c0)='./cgroup/syz0\x00', 0x200002, 0x0) 01:56:47 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:47 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 01:56:47 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x1, &(0x7f0000000800)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0}], &(0x7f0000000840)='syzkaller\x00', 0x5, 0xfc, &(0x7f0000000880)=""/252, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 647.887358][ T2765] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 647.912160][ T2766] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 647.919247][ T2766] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 647.963387][ T2769] vhci_hcd: connection closed [ 647.968106][ T100] vhci_hcd: stop threads [ 647.985889][ T100] vhci_hcd: release socket [ 647.991544][ T100] vhci_hcd: disconnect device 01:56:48 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 01:56:48 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf100, &(0x7f0000000140)=@framed={{}, [@func]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xed, &(0x7f0000000200)=""/237, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 648.023380][ T2773] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 648.081392][ T2773] device veth125 entered promiscuous mode 01:56:48 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:48 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 01:56:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 648.192466][ T9625] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 648.224505][ T2796] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 648.267265][ T2796] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 648.319066][ T2796] device veth129 entered promiscuous mode [ 648.442485][ T9625] usb 3-1: Using ep0 maxpacket: 32 [ 648.470334][ T2774] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(4) [ 648.476975][ T2774] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 648.510345][ T2815] vhci_hcd: connection closed [ 648.511557][ T9] vhci_hcd: stop threads [ 648.534351][ T9] vhci_hcd: release socket [ 648.580094][ T9] vhci_hcd: disconnect device [ 648.593025][ T9625] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 648.603419][ T9625] usb 3-1: New USB device found, idVendor=13d3, idProduct=3226, bcdDevice=b0.66 [ 648.615881][ T9625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.628268][ T9625] usb 3-1: config 0 descriptor?? [ 648.900459][ T7] usb 3-1: USB disconnect, device number 60 01:56:49 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:49 executing program 4: clone3(&(0x7f00000001c0)={0x101000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:56:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a", 0xa}], 0x1}, 0x0) 01:56:49 executing program 3: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000240)={0x3}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000100)={0x0, ""/12}, 0x14, 0x0, 0x0) 01:56:49 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0xffffffffffffffff) 01:56:49 executing program 2: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="03"], 0x8, 0x0) msgrcv(r0, &(0x7f0000000080)=ANY=[], 0x14, 0x0, 0x4800) 01:56:49 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETA(r0, 0x5452, &(0x7f0000000080)) [ 649.495157][ T2835] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:49 executing program 3: r0 = getpid() waitid(0x1, r0, 0x0, 0x2, 0x0) 01:56:49 executing program 1: syz_mount_image$squashfs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x470402}, 0x18) 01:56:49 executing program 2: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="03"], 0x8, 0x0) msgrcv(r0, &(0x7f0000000080)=ANY=[], 0x14, 0x0, 0x4800) [ 649.585857][ T2843] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a", 0xa}], 0x1}, 0x0) [ 649.657822][ T2843] device veth133 entered promiscuous mode 01:56:49 executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000240)={0x3}, 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x3, 0x2800) 01:56:49 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}}, 0x0) 01:56:49 executing program 3: msgrcv(0x0, 0x0, 0x14, 0x0, 0x4800) 01:56:49 executing program 2: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="03"], 0x8, 0x0) msgrcv(r0, &(0x7f0000000080)=ANY=[], 0x14, 0x0, 0x4800) 01:56:49 executing program 4: mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$squashfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:56:49 executing program 1: io_uring_setup(0x6dff, &(0x7f0000000080)) 01:56:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a", 0xa}], 0x1}, 0x0) 01:56:49 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000280)={{0x3, 0x0, 0x0, 0x0, 0xa}}) [ 649.945014][ T2874] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:50 executing program 2: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="03"], 0x8, 0x0) msgrcv(r0, &(0x7f0000000080)=ANY=[], 0x14, 0x0, 0x4800) 01:56:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c6394", 0xf}], 0x1}, 0x0) [ 650.075937][ T2880] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:50 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f000000b080)='/dev/vcsu#\x00', 0x0, 0x0) sendmsg$SMC_PNETID_GET(r0, 0x0, 0x0) 01:56:50 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000004900)='nl80211\x00', 0xffffffffffffffff) 01:56:50 executing program 2: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000080)=ANY=[], 0x14, 0x0, 0x4800) 01:56:50 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}}, 0x0) 01:56:50 executing program 4: syz_mount_image$squashfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='Y'], 0x10, 0x0) 01:56:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c6394", 0xf}], 0x1}, 0x0) 01:56:50 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) 01:56:50 executing program 3: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{}, [{}]}}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}}) 01:56:50 executing program 2: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000080)=ANY=[], 0x14, 0x0, 0x4800) 01:56:50 executing program 4: clock_gettime(0x0, &(0x7f0000000100)={0x0}) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x5}, 0x0, &(0x7f0000000140)={r0}, 0x0) [ 650.493048][ T2916] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c6394", 0xf}], 0x1}, 0x0) [ 650.555452][ T2926] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:50 executing program 2: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000080)=ANY=[], 0x14, 0x0, 0x4800) 01:56:50 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x80041284, 0xffffffffffffffff) 01:56:50 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x41, 0x0) write$tun(r0, 0x0, 0x0) 01:56:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524", 0x12}], 0x1}, 0x0) 01:56:50 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}}, 0x0) 01:56:50 executing program 2: msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03"], 0x8, 0x0) msgrcv(0x0, &(0x7f0000000080)=ANY=[], 0x14, 0x0, 0x4800) 01:56:50 executing program 1: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0xad03}, {}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x10) [ 650.812162][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd 01:56:50 executing program 4: connect$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast]}, 0x48) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x86) [ 650.867312][ T2951] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 650.901081][ T2951] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 651.062082][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 651.262303][ T7] usb 4-1: config 1 interface 0 altsetting 32 endpoint 0x1 has invalid wMaxPacketSize 0 [ 651.278837][ T7] usb 4-1: config 1 interface 0 altsetting 32 bulk endpoint 0x1 has invalid maxpacket 0 [ 651.290112][ T7] usb 4-1: config 1 interface 0 altsetting 32 endpoint 0x82 has invalid wMaxPacketSize 0 [ 651.301301][ T7] usb 4-1: config 1 interface 0 altsetting 32 bulk endpoint 0x82 has invalid maxpacket 0 [ 651.311396][ T7] usb 4-1: config 1 interface 0 has no altsetting 0 [ 651.472117][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 651.481629][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.492493][ T7] usb 4-1: Product: syz [ 651.497031][ T7] usb 4-1: Manufacturer: syz [ 651.503678][ T7] usb 4-1: SerialNumber: syz [ 651.783584][ T7] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 32 proto 1 vid 0x0525 pid 0xA4A8 [ 651.801030][ T7] usb 4-1: USB disconnect, device number 8 [ 651.823128][ T7] usblp0: removed [ 652.542092][ T34] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 652.791831][ T34] usb 4-1: Using ep0 maxpacket: 32 [ 653.021926][ T34] usb 4-1: config 1 interface 0 altsetting 32 endpoint 0x1 has invalid wMaxPacketSize 0 [ 653.032625][ T34] usb 4-1: config 1 interface 0 altsetting 32 bulk endpoint 0x1 has invalid maxpacket 0 [ 653.043361][ T34] usb 4-1: config 1 interface 0 altsetting 32 endpoint 0x82 has invalid wMaxPacketSize 0 [ 653.054601][ T34] usb 4-1: config 1 interface 0 altsetting 32 bulk endpoint 0x82 has invalid maxpacket 0 [ 653.065234][ T34] usb 4-1: config 1 interface 0 has no altsetting 0 [ 653.252237][ T34] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 653.261735][ T34] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.269928][ T34] usb 4-1: Product: syz [ 653.275923][ T34] usb 4-1: Manufacturer: syz [ 653.280912][ T34] usb 4-1: SerialNumber: syz 01:56:53 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x0, 0x9}}) 01:56:53 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524", 0x12}], 0x1}, 0x0) 01:56:53 executing program 2: msgsnd(0x0, 0x0, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000080)=ANY=[], 0x14, 0x0, 0x4800) 01:56:53 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}}, 0x0) 01:56:53 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000240)={0x0, "16b4140671fdb3e666933e0515467f019dda3696ada1720d0578815a3aa52200d03a6a1bb0683cb8e86889422d8282020e42170854a4d4f0173f83e12afb2e99"}, 0x48, 0xfffffffffffffffc) keyctl$link(0x8, r0, 0xfffffffffffffffb) 01:56:53 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x6, &(0x7f0000000000)=@framed={{}, [@alu={0x7}, @map_val]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 653.469531][ T34] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 32 proto 1 vid 0x0525 pid 0xA4A8 [ 653.536921][ T34] usb 4-1: USB disconnect, device number 9 [ 653.562300][ T3028] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 653.601093][ T34] usblp0: removed 01:56:53 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETA(r0, 0x5425, &(0x7f0000000080)) 01:56:53 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524", 0x12}], 0x1}, 0x0) 01:56:53 executing program 2: msgsnd(0x0, 0x0, 0x8, 0x0) msgrcv(0x0, 0x0, 0x14, 0x0, 0x4800) 01:56:53 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 01:56:53 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x5420) [ 653.687198][ T3038] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:53 executing program 1: socketpair(0x2, 0x3, 0xff, &(0x7f0000000400)) [ 653.782929][ T3038] device veth143 entered promiscuous mode 01:56:53 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r0, 0x0, &(0x7f00000003c0)) 01:56:53 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x80e85411) 01:56:53 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}}, 0x0) 01:56:53 executing program 2: msgsnd(0x0, 0x0, 0x8, 0x0) msgrcv(0x0, 0x0, 0x14, 0x0, 0x4800) 01:56:53 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc", 0x13}], 0x1}, 0x0) 01:56:54 executing program 3: syz_genetlink_get_family_id$ethtool(&(0x7f0000000400)='ethtool\x00', 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000480)) 01:56:54 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f00000002c0)='logon\x00', &(0x7f0000000200)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000240)={0x0, "16b4140671fdb3e666933e0515467f019dda3696adbd720d683cb8e86889422d8282020e42090054a4d4f0173f83e12afb2e9900000000000000000000000400"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x3, r0, 0xfffffffffffffffd, 0x0, 0x0) add_key$keyring(&(0x7f00000001c0)='keyring\x00', 0x0, 0x0, 0x0, r0) [ 653.990946][ T3073] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:54 executing program 1: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, r1, r0) 01:56:54 executing program 2: msgsnd(0x0, 0x0, 0x8, 0x0) msgrcv(0x0, 0x0, 0x14, 0x0, 0x4800) [ 654.083492][ T3079] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc", 0x13}], 0x1}, 0x0) 01:56:54 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab05, 0xffffffffffffffff) [ 654.136572][ T3079] device veth147 entered promiscuous mode 01:56:54 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x7f, 0x4, {{0x43, 0x4, 0x2, 0x39, 0x10c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@generic={0x0, 0xc, "63a0059b38d9bd5e5e66"}, @rr={0x7, 0x23, 0x59, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x4, [0x8000, 0x6, 0xc0, 0x0, 0x7fffffff, 0x1fffc000, 0x800]}, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x80000000}, {@local, 0xfff}, {@multicast1, 0x231}, {@empty, 0xd093}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xddf1}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x71, 0x3, 0xe, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x7f}, {@private=0xa010100, 0x4}, {@broadcast, 0x400}, {@remote, 0xb91}, {@loopback, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}}, 0x0) 01:56:54 executing program 4: syz_open_dev$vcsu(&(0x7f0000000580)='/dev/vcsu#\x00', 0x400, 0x40000) 01:56:54 executing program 2: msgsnd(0x0, 0x0, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000080)=ANY=[], 0x14, 0x0, 0x0) 01:56:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xc0101282, 0xffffffffffffffff) 01:56:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003d000505d25a80648c63940d0524fc", 0x13}], 0x1}, 0x0) 01:56:54 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) [ 654.338965][ T3105] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:54 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x12, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 654.406927][ T3109] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:54 executing program 2: msgsnd(0x0, 0x0, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000080)=ANY=[], 0x14, 0x0, 0x0) 01:56:54 executing program 1: mount$9p_fd(0xedc000000000, 0x0, 0x0, 0x0, 0x0) [ 654.498765][ T3109] device veth151 entered promiscuous mode 01:56:54 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1}, 0x40) 01:56:54 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:54 executing program 0: prctl$PR_SET_MM_MAP(0x17, 0x540000, 0x0, 0x0) 01:56:54 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0xc0f85403) 01:56:54 executing program 1: r0 = semget$private(0x0, 0x4, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000040)={{0x2, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}) 01:56:54 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xc0481273, 0xffffffffffffffff) [ 654.729294][ T3138] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:54 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x1409, 0x1}, 0x10}}, 0x0) 01:56:54 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 01:56:54 executing program 4: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x0) [ 654.827483][ T3146] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 654.907587][ T3146] device veth155 entered promiscuous mode 01:56:55 executing program 0: prctl$PR_SET_MM_MAP(0x28, 0x540000, 0x0, 0x0) [ 654.951399][ T3138] device veth153 entered promiscuous mode [ 654.994174][ T3138] device veth153 left promiscuous mode 01:56:55 executing program 2: msgsnd(0x0, 0x0, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000080)=ANY=[], 0x14, 0x0, 0x0) 01:56:55 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x11, 0x3, &(0x7f0000001480)=@framed, &(0x7f0000001540)='syzkaller\x00', 0x4, 0xd0, &(0x7f0000001680)=""/208, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:56:55 executing program 1: clock_nanosleep(0xb565bd43aebf005b, 0x0, 0x0, 0x0) 01:56:55 executing program 4: syz_mount_image$squashfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x18) 01:56:55 executing program 0: clone3(&(0x7f00000001c0)={0x1f00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:56:55 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 655.561196][ T3191] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:55 executing program 4: bpf$MAP_CREATE(0xa, &(0x7f0000000080), 0x40) 01:56:55 executing program 1: socketpair(0x26, 0x5, 0xc8, &(0x7f0000000000)) 01:56:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={0x0}}, 0x0) [ 655.664109][ T3198] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:55 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)) [ 655.753666][ T3198] device veth159 entered promiscuous mode [ 655.785704][ T3203] device veth157 entered promiscuous mode 01:56:55 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x1, 0x0) write$tun(r0, 0x0, 0xf0ffffff7f0000) [ 655.813221][ T3203] device veth157 left promiscuous mode 01:56:55 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @dev}}, 0x24) 01:56:56 executing program 0: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000080)="574108611d7f3884b757faa186113b8464c4737a87fc5a260a7f4a9713", 0x1d, r0) 01:56:56 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0xc0189436) 01:56:56 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003140)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x40}, 0x0) 01:56:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:56 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETA(r0, 0x402c542b, &(0x7f0000000080)) 01:56:56 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 01:56:56 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x40049409, 0xffffffffffffffff) 01:56:56 executing program 0: prctl$PR_SET_MM_MAP(0xf, 0x540000, 0x0, 0x0) 01:56:56 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x40081271, 0xffffffffffffffff) 01:56:56 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000d80)='ns/uts\x00') 01:56:56 executing program 2: request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xfffffffffffffffb) [ 656.639292][ T3246] device veth163 entered promiscuous mode [ 656.690822][ T3261] device veth161 entered promiscuous mode [ 656.738881][ T3261] device veth161 left promiscuous mode 01:56:56 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r1, r0, 0x0) sendto$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:56:56 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x5460) 01:56:56 executing program 2: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000240)={0x3}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/20}, 0x1c, 0x2, 0x2000) 01:56:56 executing program 4: syz_mount_image$squashfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8cffffff, 0x0) 01:56:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:56 executing program 0: socket$inet(0x2, 0x5, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0xfffffffffffff800, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000054c0)={&(0x7f0000005400), 0xc, &(0x7f0000005480)={0x0}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000005500)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 01:56:57 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@map_val]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:56:57 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f00000000c0)={0x0, "60295a6c02150e59ac47c454d7758296b13ec6d5215196905510f0ce3adf712eeb9ffe83ffbf7230510b6680128f0e0160cf8a335e95f409e47b304c1f753ed2"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x6, r0, 0x0, 0x0, 0x0) 01:56:57 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x40101283, 0xffffffffffffffff) 01:56:57 executing program 4: socket(0x10, 0x3, 0x80000000) 01:56:57 executing program 3: rseq(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x21000000}}, 0x20, 0x0, 0x0) 01:56:57 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0xc0045878) 01:56:57 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @dev}}, 0x24) 01:56:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:57 executing program 2: syz_mount_image$squashfs(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@v2={0x0, 0x0, 0x0, 0x0, 0x3c, "ed65f1b8df5ba6726010cc0f4e51e7c9cf8c3ba233e0ba5b84001336eab1d7963719d742f34de78c4b67f0ee441e248996ae098e3f4cd407d983181f"}, 0x45, 0x0) 01:56:57 executing program 3: semctl$IPC_RMID(0x0, 0x0, 0x12) 01:56:57 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r0, 0x5608, 0x0) 01:56:57 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0) connect$rxrpc(r0, 0x0, 0x0) 01:56:57 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @vsock={0x28, 0x0, 0x0, @host}, @tipc, @l2={0x1f, 0x0, @none}}) 01:56:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETA(r0, 0xc0189436, &(0x7f0000000080)) 01:56:57 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0xc020660b) 01:56:57 executing program 3: prctl$PR_SET_MM_MAP(0x10, 0x540000, 0x0, 0x0) 01:56:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:57 executing program 3: prctl$PR_SET_MM_MAP(0x1c, 0x540000, 0x0, 0x0) 01:56:57 executing program 4: pselect6(0x40, &(0x7f0000000040)={0x2}, &(0x7f0000000080)={0x5}, 0x0, 0x0, 0x0) 01:56:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x16, 0x0, 0x0, 0x1ff}, 0x40) 01:56:57 executing program 1: keyctl$dh_compute(0x17, &(0x7f0000000300), &(0x7f0000000340)=""/4096, 0x1000, &(0x7f0000001480)={0x0}) 01:56:57 executing program 0: mount$9p_fd(0x400000, 0x0, 0x0, 0x0, 0x0) 01:56:58 executing program 4: socket$tipc(0x1e, 0x82b213b95b3ca0c, 0x0) 01:56:58 executing program 3: syz_open_dev$vcsu(&(0x7f0000000580)='/dev/vcsu#\x00', 0x400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000036c0)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003680)={&(0x7f0000003600)={0x14, 0x453, 0x8, 0x0, 0x0, ':'}, 0x14}}, 0x40) 01:56:58 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)=ANY=[], 0x8, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/174) 01:56:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x0, 0x0, 0x1f}, 0x40) 01:56:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:58 executing program 0: r0 = semget$private(0x0, 0x4, 0x0) r1 = semget$private(0x0, 0x4, 0x0) semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) r2 = semget$private(0x0, 0x4, 0x0) semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1) [ 658.144763][ T37] audit: type=1107 audit(1616896618.169:13): pid=3386 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=':' 01:56:58 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) 01:56:58 executing program 2: read$usbmon(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 01:56:58 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000240)={0x0, "16b4140671fdb3e666933e0515467f019dda3696ada1720d0578815a3aa52200d03a6a1bb0683cb8e86889422d8282020e42170854a4d4f0173f83e12afb2e99"}, 0x48, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0) 01:56:58 executing program 1: syz_mount_image$squashfs(0x0, &(0x7f0000000300)='./file0\x00', 0xfff, 0x0, 0x0, 0x24, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1}, 0x13c) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20000000) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@v2={0x3, 0x0, 0xa, 0x7, 0xbd, "ed65f1b8df5ba6726010cc0f4e51e7c9cf8c3ba233e0ba5b84001336eab1d7963719d742f34de78c4b67f0ee441e248996ae098e3f4cd407d983181fda4fee4f46f67022fd60f45f6077714b7fbcad5b835fa4e60ae48bf35774f41b488e9edac567092c4ac993e1303b94ee62fe3f9738abd6e4f6ea588b51b30edc9b0367ec2ed36ea8620a79104bf6fd5d189f3abcd072e13155b872a4ca24a6c6d2c6e5ff6f4092813f559b9a8983939669a1bf34dc0bf63a4ca3a817ddd74f21e1"}, 0xc6, 0x0) 01:56:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x7, 0x90, &(0x7f0000000100)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:56:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:58 executing program 4: msgsnd(0x0, &(0x7f0000000240), 0xffffffffffffffc0, 0x0) 01:56:58 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000000080), 0xffffffffffffffff) 01:56:58 executing program 0: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x10) 01:56:58 executing program 2: read$usbmon(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 01:56:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab08, 0xffffffffffffffff) 01:56:58 executing program 4: fsmount(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/vga_arbiter\x00', 0x20000, 0x0) [ 658.586521][ T3431] __nla_validate_parse: 11 callbacks suppressed [ 658.586542][ T3431] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:58 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab09, 0xffffffffffffffff) [ 658.660376][ T3443] block nbd1: NBD_DISCONNECT 01:56:58 executing program 0: socketpair(0x2, 0x3, 0x0, &(0x7f00000001c0)) 01:56:58 executing program 2: semget$private(0x0, 0xf580a682211c6e85, 0x0) 01:56:58 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x11, 0x4, &(0x7f0000001480)=@framed={{}, [@alu={0x0, 0x0, 0x5}]}, &(0x7f0000001540)='syzkaller\x00', 0x4, 0xd0, &(0x7f0000001680)=""/208, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:56:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc900, &(0x7f0000000140)=@framed={{}, [@func]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0xed, &(0x7f0000000200)=""/237, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:56:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x401070cd, 0xffffffffffffffff) 01:56:58 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53941048c11e3000, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:56:58 executing program 1: socketpair(0x29, 0x0, 0x0, &(0x7f0000000040)) [ 658.958214][ T3471] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:59 executing program 0: syz_mount_image$squashfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x20100000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, 0x0) [ 659.061563][ T3476] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:59 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x4020940d) 01:56:59 executing program 2: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = msgget(0x2, 0x3c0f9616889b5ec8) msgsnd(r1, &(0x7f0000000040)={0x1, "4206701744d19d222a5320350c816457fb1d343393"}, 0x1d, 0x800) 01:56:59 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x0) 01:56:59 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 01:56:59 executing program 4: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000000)=[{}], 0x1) semctl$IPC_RMID(r0, 0x0, 0xb) 01:56:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:59 executing program 2: bpf$MAP_CREATE(0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) [ 659.303567][ T3500] 9pnet_virtio: no channels available for device 01:56:59 executing program 1: ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000006c0)={'filter\x00', 0x4}, 0x68) socket$nl_generic(0x10, 0x3, 0x10) 01:56:59 executing program 0: semctl$IPC_RMID(0x0, 0x0, 0x7) 01:56:59 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000240)={0x0, "16b4140671fdb3e666933e0515467f019dda3696ada1720d0578815a3aa52200d03a6a1bb0683cb8e86889422d8282020e42170854a4d4f0173f83e12afb2e99"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x3, r0, 0xfffffffffffffffd, 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000080)="892047873493539f6610c29f2c840f301530e4766cda9190178e1492e20b14095b8486adecaf91163f1056e2614c74c6413af41779aa29e7089decd09a0e93cc0866bac947243cf372f957de3ce9db55ea3277b2fafe85e5a1a31c966d542829900f737e9db915f00e52f12838dfbebe550c662054d2377bc8601aaaad", 0x7d, r0) keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={'vmac(seed-generic)\x00'}}) [ 659.433386][ T3510] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:59 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x5422) 01:56:59 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0x90, &(0x7f0000000100)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 659.515151][ T3515] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:59 executing program 0: r0 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r0, r1) 01:56:59 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 659.571760][ T3515] device veth179 entered promiscuous mode 01:56:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:56:59 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0xed, &(0x7f0000000200)=""/237, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:56:59 executing program 4: syz_mount_image$squashfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@msize={'msize', 0x3d, 0x100000001}}, {@version_u='version=9p2000.u'}, {@version_L='version=9p2000.L'}]}}) 01:56:59 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) getsockname$tipc(r0, 0x0, &(0x7f00000000c0)) 01:56:59 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/vga_arbiter\x00', 0x0, 0x0) [ 659.811290][ T3548] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 659.831291][ T3531] could not allocate digest TFM handle vmac(seed-generic) 01:56:59 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000001300)='/dev/net/tun\x00', 0x6000, 0x0) [ 659.855410][ T3531] could not allocate digest TFM handle vmac(seed-generic) 01:57:00 executing program 4: r0 = msgget(0x2, 0x221) msgctl$IPC_RMID(r0, 0x0) [ 659.912303][ T3559] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:00 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x9, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:57:00 executing program 1: socketpair(0x10, 0x2, 0x5a3186c, &(0x7f0000000040)) [ 660.044310][ T3559] device veth183 entered promiscuous mode 01:57:00 executing program 0: socket$inet(0x2, 0x0, 0xfffffffd) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000240)={0x0, @private, 0x0, 0x0, 'lc\x00'}, 0x2c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00', 0xffffffffffffffff) syz_open_dev$sndctrl(&(0x7f0000000500)='/dev/snd/controlC#\x00', 0x0, 0x84100) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, 0x0) 01:57:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:00 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001800)='/proc/capi/capi20ncci\x00', 0x0, 0x0) clone3(&(0x7f0000000480)={0x4a0620cfa1464f43, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 01:57:00 executing program 3: prctl$PR_SET_MM_MAP(0x25, 0x970000, 0x0, 0x0) 01:57:00 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, 0x0, 0x0, 0x20004801, 0x0, 0x0) [ 660.246759][ T3581] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 660.286216][ T3587] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:00 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) syz_mount_image$squashfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 660.288584][ T3590] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 01:57:00 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab02, 0xffffffffffffffff) 01:57:00 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@alu]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:57:00 executing program 4: clock_gettime(0x0, &(0x7f0000000100)={0x0}) pselect6(0x40, &(0x7f0000000040)={0x2}, &(0x7f0000000080)={0x5}, 0x0, &(0x7f0000000140)={r0}, 0x0) [ 660.398897][ T3594] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:00 executing program 0: prctl$PR_SET_MM_MAP(0x25, 0x540000, 0x0, 0x0) [ 660.463916][ T3594] device veth187 entered promiscuous mode 01:57:00 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc900, &(0x7f0000000140)=@framed={{}, [@func]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xed, &(0x7f0000000200)=""/237, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:57:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x48002, 0x0) write$tun(r0, 0x0, 0x130) 01:57:00 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x8, r0, 0xfffffffffffffffe) 01:57:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:00 executing program 0: syz_mount_image$squashfs(0x0, &(0x7f0000000300)='./file0\x00', 0xfff, 0x0, 0x0, 0x24, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x13c) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@v2={0x3, 0x0, 0xa, 0x7, 0xfb, "ed65f1b8df5ba6726010cc0f4e51e7c9cf8c3ba233e0ba5b84001336eab1d7963719d742f34de78c4b67f0ee441e248996ae098e3f4cd407d983181fda4fee4f46f67022fd60f45f6077714b7fbcad5b835fa4e60ae48bf35774f41b488e9edac567092c4ac993e1303b94ee62fe3f9738abd6e4f6ea588b51b30edc9b0367ec2ed36ea8620a79104bf6fd5d189f3abcd072e13155b872a4ca24a6c6d2c6e5ff6f4092813f559b9a8983939669a1bf34dc0bf63a4ca3a817ddd74f21e1e8cbb7499240b411473dbc83de5a61ac224c6eecfd65a48fece13bdff1afa72881b1c2f47dff7ab0511f0c68dfe30b6e456c2411b47406368e3518c8b426"}, 0x104, 0x0) [ 660.635806][ T3620] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:00 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) [ 660.740460][ T3620] device veth191 entered promiscuous mode 01:57:00 executing program 4: clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) 01:57:01 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000080), 0x4) 01:57:01 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semctl$IPC_RMID(r0, 0x0, 0xc) 01:57:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:01 executing program 0: msgsnd(0x0, &(0x7f0000000240)=ANY=[], 0x8, 0x0) 01:57:01 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETA(r0, 0x402c542c, &(0x7f0000000080)) 01:57:01 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x5450) 01:57:01 executing program 0: r0 = semget$private(0x0, 0x4, 0x0) semctl$IPC_RMID(r0, 0xff7f0000, 0x10) 01:57:01 executing program 3: prctl$PR_SET_MM_MAP(0x19, 0x7fffffffefff, 0x0, 0x0) 01:57:01 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xa}, 0x40) 01:57:01 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETA(r0, 0x5456, &(0x7f0000000080)) 01:57:01 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000240)={0x3}, 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x5800) [ 661.495293][ T3659] device veth195 entered promiscuous mode 01:57:01 executing program 0: syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x44000) 01:57:01 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETA(r0, 0x5421, &(0x7f0000000080)) 01:57:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:01 executing program 4: r0 = syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000a40)='l2tp\x00', r0) 01:57:01 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) io_setup(0xffff, &(0x7f00000000c0)) io_setup(0xff, &(0x7f0000000040)) 01:57:01 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000005c40)='/dev/snd/seq\x00', 0x0) 01:57:01 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x40, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000001d40)={0x0, @llc={0x1a, 0x312, 0x1, 0x1, 0x80, 0x5, @link_local}, @l2={0x1f, 0x2, @any, 0x81, 0x1}, @tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}}}, 0x100, 0x0, 0x0, 0x0, 0x100, &(0x7f0000001d00)='geneve0\x00', 0x200, 0x6}) sendmsg$inet(r1, &(0x7f0000004100)={&(0x7f0000002f80)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000003fc0)=[{&(0x7f0000002fc0)="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", 0x1000}], 0x1, &(0x7f0000004000)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x44d}}, @ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xb7, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0x92, [@remote, @multicast2, @loopback, @local, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xb, 0x58, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @cipso={0x86, 0x55, 0x3, [{0x0, 0x5, "3930fa"}, {0x5, 0xf, "223792e0a5d9357c09ab6d940f"}, {0x7, 0xc, "c865ad94ead8ed58898d"}, {0x6, 0x7, "3f09d8a1ae"}, {0x2, 0xa, "3b282221eb39a100"}, {0x6, 0x10, "2188f93c7a3b09e7d0893e3c7af1"}, {0x1, 0xe, "cdd1bc53a420bda297f9e79e"}]}]}}}], 0xf0}, 0x4000800) openat$null(0xffffffffffffff9c, &(0x7f0000004240)='/dev/null\x00', 0x80400, 0x0) 01:57:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x40) [ 661.818346][ T3687] device veth199 entered promiscuous mode 01:57:01 executing program 4: mount$9p_fd(0x1000000, 0x0, 0x0, 0x0, 0x0) 01:57:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:02 executing program 1: syz_mount_image$befs(&(0x7f0000000000)='befs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x1081000, &(0x7f0000000580)) 01:57:02 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x200882, 0x0) 01:57:02 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) io_setup(0x7, &(0x7f0000000640)=0x0) io_submit(r1, 0x1, &(0x7f0000000940)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 01:57:02 executing program 4: openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x0, 0x0) 01:57:02 executing program 2: io_setup(0x7, &(0x7f0000000640)=0x0) r1 = memfd_create(&(0x7f00000000c0)='/dev/nvram\x00', 0x4) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) [ 662.194623][ T3719] device veth203 entered promiscuous mode 01:57:02 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000002a80)='/dev/nvram\x00', 0xa5780455a21ffb8a, 0x0) 01:57:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:02 executing program 1: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000007a80)) 01:57:02 executing program 2: io_setup(0x7, &(0x7f0000000640)=0x0) r1 = memfd_create(&(0x7f00000000c0)='/dev/nvram\x00', 0x4) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 01:57:02 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) [ 662.416048][ T3752] device veth207 entered promiscuous mode 01:57:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c066ff000000e2", 0x10) 01:57:02 executing program 0: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r0}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x80100, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x1) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000180)=0x8) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f00000001c0)) 01:57:02 executing program 1: io_setup(0x7, &(0x7f0000000640)=0x0) r1 = memfd_create(&(0x7f00000000c0)='/dev/nvram\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 01:57:02 executing program 3: openat$vmci(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/vmci\x00', 0x2, 0x0) 01:57:02 executing program 2: io_setup(0x7, &(0x7f0000000640)=0x0) r1 = memfd_create(&(0x7f00000000c0)='/dev/nvram\x00', 0x4) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) [ 662.700172][ T3771] device veth211 entered promiscuous mode 01:57:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:02 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003900)='/dev/vim2m\x00', 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000003940)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000003980)={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fa914a0f"}, 0x0, 0x0, @fd}) 01:57:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={0x0}}, 0x0) 01:57:02 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) 01:57:02 executing program 2: io_setup(0x7, &(0x7f0000000640)=0x0) r1 = memfd_create(&(0x7f00000000c0)='/dev/nvram\x00', 0x4) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 01:57:02 executing program 0: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) 01:57:03 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) [ 662.987065][ T3810] device veth215 entered promiscuous mode 01:57:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={0x0}}, 0x0) io_setup(0x77, &(0x7f0000001480)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/nvram\x00', 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socket(0x8, 0x0, 0x0) 01:57:03 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) io_submit(0x0, 0x1, &(0x7f0000000940)=[0x0]) io_setup(0xffff, &(0x7f00000000c0)) [ 663.072831][ T3828] device veth213 entered promiscuous mode 01:57:03 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000001f00)={'ip6tnl0\x00', 0x0}) 01:57:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:03 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) 01:57:03 executing program 2: io_setup(0x7, &(0x7f0000000640)=0x0) io_submit(r0, 0x0, 0x0) 01:57:03 executing program 3: syz_mount_image$befs(0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)=[{&(0x7f0000000080)="cc", 0x1}, {&(0x7f00000004c0)="8a4817ce134da7654f54", 0xa, 0xfffffffffffffff7}], 0x0, 0x0) 01:57:03 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{}, {}]}) 01:57:03 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) [ 663.435625][ T3849] device veth219 entered promiscuous mode 01:57:03 executing program 4: select(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)) 01:57:03 executing program 2: syz_mount_image$befs(&(0x7f0000003740)='befs\x00', &(0x7f0000003780)='./file0\x00', 0x0, 0x0, &(0x7f0000003800), 0x0, &(0x7f0000003840)) [ 663.481792][ T3864] device veth217 entered promiscuous mode [ 663.509790][ T3871] loop3: detected capacity change from 0 to 16383 01:57:03 executing program 1: setitimer(0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000080)) 01:57:03 executing program 1: setitimer(0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000080)) 01:57:03 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5}]}) [ 663.617690][ T3871] loop3: detected capacity change from 0 to 16383 01:57:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:03 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000002a80)='/dev/nvram\x00', 0xa5780455a21ffb8a, 0x0) socket$isdn_base(0x22, 0x3, 0x0) [ 663.727124][ T3896] __nla_validate_parse: 15 callbacks suppressed [ 663.727144][ T3896] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 663.758172][ T3896] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:03 executing program 1: setitimer(0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000080)) 01:57:03 executing program 4: capget(&(0x7f00000079c0)={0x20071026}, &(0x7f0000007a00)) [ 663.791968][ T3896] device veth223 entered promiscuous mode [ 663.804869][ T3899] befs: (loop2): No write support. Marking filesystem read-only [ 663.854025][ T3899] befs: (loop2): invalid magic header [ 663.873847][ T3908] device veth221 entered promiscuous mode 01:57:03 executing program 2: capset(&(0x7f00000000c0)={0x20080522, 0xffffffffffffffff}, 0x0) [ 663.907814][ T3899] befs: (loop2): No write support. Marking filesystem read-only [ 663.916332][ T3899] befs: (loop2): invalid magic header 01:57:04 executing program 3: syz_mount_image$befs(0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000100)="c9", 0x1}, {&(0x7f00000001c0)=' ', 0x1}, {&(0x7f0000000080)="85", 0x1}], 0x0, 0x0) 01:57:04 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x48, 0x0}) 01:57:04 executing program 1: setitimer(0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000080)) 01:57:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000002c0)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) 01:57:04 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000003940)='/proc/self/net/pfkey\x00', 0x0, 0x0) 01:57:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x0) 01:57:04 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000800)='/dev/nvram\x00', 0x4080, 0x0) 01:57:04 executing program 1: pselect6(0x40, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0}) 01:57:04 executing program 0: capget(&(0x7f00000079c0)={0x20071026}, 0x0) [ 664.180303][ T3942] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:04 executing program 2: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) getuid() r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) geteuid() fchownat(r0, 0x0, 0x0, 0xee00, 0x1000) socket$isdn(0x22, 0x3, 0x0) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f0000003600), 0x0, 0x24000040, 0x0, 0x0) syz_mount_image$befs(&(0x7f0000003740)='befs\x00', &(0x7f0000003780)='./file0\x00', 0x0, 0x1, &(0x7f0000003800)=[{&(0x7f00000037c0)}], 0x0, &(0x7f0000003840)={[{'\'['}], [{@smackfsroot={'smackfsroot', 0x3d, '.log\x00'}}, {@uid_lt={'uid<'}}]}) [ 664.230041][ T3942] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:04 executing program 0: io_setup(0x7, &(0x7f0000000640)=0x0) r1 = memfd_create(&(0x7f00000000c0)='/dev/nvram\x00', 0x4) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 01:57:04 executing program 3: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_init_net_socket$llc(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000c00)='l2tp\x00', 0xffffffffffffffff) 01:57:04 executing program 4: socket(0x28, 0x0, 0xff) [ 664.315711][ T3942] device veth227 entered promiscuous mode [ 664.348122][ T3959] device veth225 entered promiscuous mode 01:57:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000002c0)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) [ 664.471441][ T3975] befs: Unrecognized mount option "'[" or missing value [ 664.508795][ T3988] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:04 executing program 3: memfd_create(&(0x7f0000000200)='/dev/nvram\x00', 0x2) [ 664.518002][ T3975] befs: (loop2): cannot parse mount options [ 664.535404][ T3988] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:04 executing program 4: socket$inet6(0xa, 0x0, 0x100) 01:57:04 executing program 0: clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x750}, &(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000280)={&(0x7f0000000240), 0x8}) 01:57:04 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/nvram\x00', 0x0, 0x0) [ 664.612310][ T3988] device veth231 entered promiscuous mode [ 664.623560][ T4004] befs: Unrecognized mount option "'[" or missing value [ 664.646946][ T4004] befs: (loop2): cannot parse mount options [ 664.649995][ T3997] device veth229 entered promiscuous mode 01:57:04 executing program 2: pselect6(0x40, &(0x7f0000000080), &(0x7f00000001c0)={0x2}, &(0x7f0000000200)={0x1}, 0x0, 0x0) 01:57:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) 01:57:05 executing program 3: syz_mount_image$befs(&(0x7f0000003740)='befs\x00', 0x0, 0x0, 0x0, &(0x7f0000003800), 0x0, &(0x7f0000003840)) 01:57:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000002c0)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) 01:57:05 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x8}]}) 01:57:05 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x258fc0, 0x0) [ 665.290613][ T4039] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:05 executing program 4: ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) 01:57:05 executing program 1: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x4d0181) [ 665.364040][ T4051] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:05 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) syz_init_net_socket$llc(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) 01:57:05 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) [ 665.429563][ T4051] device veth235 entered promiscuous mode [ 665.506895][ T4039] device veth233 entered promiscuous mode 01:57:05 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, 0x0) 01:57:05 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) 01:57:05 executing program 2: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000003940)='/proc/self/net/pfkey\x00', 0x2, 0x0) 01:57:05 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 01:57:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:05 executing program 3: io_setup(0xff, &(0x7f0000000b40)=0x0) io_submit(r0, 0x0, 0x0) [ 665.780239][ T4100] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:05 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) 01:57:05 executing program 2: gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffff6b, &(0x7f0000000000)='/proc/sys/net\x00le\xf44.\xab%n'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000280)=""/4096, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) [ 665.898128][ T4105] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:06 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) [ 665.973829][ T4105] device veth239 entered promiscuous mode [ 666.013718][ T4117] device veth237 entered promiscuous mode 01:57:06 executing program 1: select(0x40, &(0x7f0000000000)={0x95d}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)) 01:57:06 executing program 2: gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffff6b, &(0x7f0000000000)='/proc/sys/net\x00le\xf44.\xab%n'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000280)=""/4096, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) 01:57:06 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, 0x0) 01:57:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:06 executing program 4: io_cancel(0x0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:57:06 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x200000, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) 01:57:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}}, 0x841) 01:57:06 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, 0x0) 01:57:06 executing program 2: gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffff6b, &(0x7f0000000000)='/proc/sys/net\x00le\xf44.\xab%n'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000280)=""/4096, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) 01:57:06 executing program 4: io_setup(0x7, &(0x7f0000000640)=0x0) r1 = memfd_create(&(0x7f00000000c0)='/dev/nvram\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0xee86}]) 01:57:06 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) io_setup(0xff, &(0x7f0000000b40)) [ 666.394892][ T4156] device veth243 entered promiscuous mode [ 666.463075][ T4173] device veth241 entered promiscuous mode 01:57:06 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000001cc0)={0x0, @tipc=@name, @xdp, @nl=@unspec}) 01:57:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:06 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, 0x0) 01:57:06 executing program 2: gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffff6b, &(0x7f0000000000)='/proc/sys/net\x00le\xf44.\xab%n'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000280)=""/4096, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) 01:57:06 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f00000001c0)="8c", 0x1}], 0x3}, 0x0) 01:57:06 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f000013f000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000020d000/0x1000)=nil) 01:57:06 executing program 1: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x9c80}, 0x0, &(0x7f0000000400)={0x0, r0/1000+10000}) [ 666.814959][ T4211] device veth247 entered promiscuous mode [ 666.877100][ T4228] device veth245 entered promiscuous mode 01:57:07 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000026c0)='ns/user\x00') openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 01:57:07 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x1) 01:57:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c}, 0x1c}}, 0x0) 01:57:07 executing program 3: io_setup(0x5, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:57:07 executing program 1: select(0x40, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000400)) 01:57:07 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="99", 0x1}, {&(0x7f0000000180)='W', 0x1}, {&(0x7f00000001c0)="8c", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 01:57:07 executing program 2: io_setup(0x7, &(0x7f0000000640)=0x0) r1 = memfd_create(&(0x7f00000000c0)='/dev/nvram\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000100)="d2dbc9e3d8d64078f7", 0x9}]) 01:57:07 executing program 3: symlinkat(&(0x7f00000008c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00') 01:57:07 executing program 1: socket(0x28, 0x0, 0x98) [ 667.272523][ T4245] device veth249 entered promiscuous mode 01:57:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:07 executing program 0: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) 01:57:07 executing program 4: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000002000)) 01:57:07 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xdc05, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000638477fbac141417ee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x288, 0x158, 0x98, 0x98, 0x98, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1\x00', 'gretap0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) connect$inet(0xffffffffffffffff, 0x0, 0x0) 01:57:07 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x125ac0, 0x0) 01:57:07 executing program 2: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x4d0181) 01:57:07 executing program 4: getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) 01:57:07 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x8001]}, 0x8}) [ 667.668345][ T4339] x_tables: duplicate underflow at hook 1 01:57:07 executing program 3: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300), 0x0, &(0x7f0000000380)={0x5}, &(0x7f0000000400)={0x0, r0/1000+10000}) 01:57:07 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000500)='ns/time\x00') [ 667.762532][ T4339] x_tables: duplicate underflow at hook 1 [ 667.776035][ T4341] device veth251 entered promiscuous mode 01:57:07 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x0, 0x0) 01:57:07 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x0, 0x0}) 01:57:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:07 executing program 4: syz_mount_image$befs(&(0x7f0000003740)='befs\x00', &(0x7f0000003780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003840)) 01:57:08 executing program 0: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) 01:57:08 executing program 1: sendto$isdn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 01:57:08 executing program 4: syz_mount_image$befs(&(0x7f0000003740)='befs\x00', 0x0, 0x0, 0x1, &(0x7f0000003800)=[{&(0x7f00000037c0)}], 0x0, 0x0) 01:57:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0x1}, 0x24}}, 0x0) [ 668.163383][ T4381] device veth253 entered promiscuous mode 01:57:08 executing program 2: openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[{0x8, 0x1, 0x8}, {0x99, 0x8, 0x7f, 0x3}, {0x2, 0xfe, 0x1, 0xffffffff}, {0x4, 0x40, 0x8, 0x9}]}) io_submit(0x0, 0x1, &(0x7f0000000940)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x4, 0x101, 0xffffffffffffffff, 0x0}]) io_setup(0xffff, &(0x7f00000000c0)) io_setup(0xff, &(0x7f0000000040)) 01:57:08 executing program 1: sendto$isdn(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x6) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000002000)) 01:57:08 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/ppp\x00', 0x4000, 0x0) 01:57:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:08 executing program 0: io_setup(0x7, &(0x7f0000000640)=0x0) io_destroy(r0) 01:57:08 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000180)='W', 0x1}, {&(0x7f00000001c0)="8c", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 01:57:08 executing program 4: syz_genetlink_get_family_id$ethtool(&(0x7f0000000e40)='ethtool\x00', 0xffffffffffffffff) 01:57:08 executing program 2: syz_genetlink_get_family_id$ethtool(&(0x7f0000000e40)='ethtool\x00', 0xffffffffffffffff) socket(0x0, 0x0, 0x0) [ 668.767542][ T4425] __nla_validate_parse: 10 callbacks suppressed [ 668.767563][ T4425] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:08 executing program 1: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000007a80)) 01:57:08 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, 0x0) 01:57:08 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x1) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) 01:57:08 executing program 3: openat$pfkey(0xffffffffffffff9c, 0x0, 0x464300, 0x0) 01:57:08 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, 0x0) read$alg(r0, 0x0, 0x0) [ 668.910768][ T4428] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 668.984954][ T4428] device veth255 entered promiscuous mode 01:57:09 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x0, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) 01:57:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 01:57:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:09 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 01:57:09 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 01:57:09 executing program 2: capget(0x0, &(0x7f0000007a00)) 01:57:09 executing program 1: select(0x40, &(0x7f0000000300), 0x0, &(0x7f0000000380)={0x5}, &(0x7f0000000400)) 01:57:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000001f00)={'ip6tnl0\x00', 0x0}) [ 669.264531][ T4471] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aa2e35d3"}, 0x0, 0x0, @fd}) 01:57:09 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x101800, 0x0) [ 669.355243][ T4474] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:09 executing program 2: io_submit(0x0, 0x1, &(0x7f0000000940)=[0x0]) io_setup(0xffff, &(0x7f00000000c0)) io_setup(0xff, &(0x7f0000000040)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) [ 669.412128][ T4474] device veth257 entered promiscuous mode 01:57:09 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000026c0)='ns/user\x00') 01:57:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', r0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000c00)='l2tp\x00', 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) 01:57:09 executing program 0: syz_open_dev$vim2m(&(0x7f0000000280)='/dev/video#\x00', 0x4, 0x2) 01:57:09 executing program 4: io_setup(0x7, &(0x7f0000000640)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 01:57:09 executing program 1: openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) io_setup(0xffff, &(0x7f00000000c0)) [ 669.688827][ T4507] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:09 executing program 3: syz_mount_image$befs(0x0, 0x0, 0x0, 0x0, &(0x7f0000003800), 0x0, 0x0) 01:57:09 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/autofs\x00', 0xe742, 0x0) [ 669.783910][ T4511] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 669.844899][ T4511] device veth259 entered promiscuous mode 01:57:09 executing program 4: syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2) clock_gettime(0x2, &(0x7f0000000100)) 01:57:09 executing program 2: io_setup(0x7, &(0x7f0000000640)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x989680}) 01:57:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:10 executing program 0: pselect6(0x40, &(0x7f0000000080), &(0x7f00000001c0)={0x2}, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x1]}, 0x8}) [ 670.059215][ T4539] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:10 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffff6b, &(0x7f0000000000)='/proc/sys/net\x00le\xf44.\xab%n'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$nilfs2(&(0x7f00000000c0)='nilfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)) 01:57:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000c00)='l2tp\x00', 0xffffffffffffffff) 01:57:10 executing program 1: openat$nvram(0xffffffffffffff9c, 0x0, 0x402200, 0x0) 01:57:10 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000280)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "586516bb"}}) 01:57:10 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x8, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 670.216088][ T4545] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:10 executing program 4: clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, r0/1000+10000}) [ 670.263818][ T4545] device veth263 entered promiscuous mode 01:57:10 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffff6b, &(0x7f0000000000)='/proc/sys/net\x00le\xf44.\xab%n'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$nilfs2(&(0x7f00000000c0)='nilfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)) 01:57:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x8081) 01:57:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:10 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x200000, 0x0) 01:57:10 executing program 2: syz_mount_image$befs(0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000100)="c9", 0x1}, {&(0x7f00000001c0)=' ', 0x1}], 0x0, 0x0) 01:57:10 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffff6b, &(0x7f0000000000)='/proc/sys/net\x00le\xf44.\xab%n'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$nilfs2(&(0x7f00000000c0)='nilfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)) [ 670.507134][ T4587] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:10 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=']) r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(0x0, 0x0) acct(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {}, [], {}, [{}], {0x10, 0x4}}, 0x2c, 0x0) lchown(&(0x7f0000000340)='./bus\x00', r1, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 01:57:10 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000003940)='/proc/self/net/pfkey\x00', 0x2, 0x0) [ 670.604106][ T4592] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 670.674189][ T4592] device veth267 entered promiscuous mode 01:57:10 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffff6b, &(0x7f0000000000)='/proc/sys/net\x00le\xf44.\xab%n'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$nilfs2(&(0x7f00000000c0)='nilfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)) 01:57:10 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) io_setup(0x7, &(0x7f0000000640)=0x0) io_submit(r1, 0x1, &(0x7f0000000940)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x4, 0x0, r0, 0x0}]) 01:57:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:10 executing program 4: clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x2}, &(0x7f0000000200)={0x0, r0+60000000}, 0x0) 01:57:10 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x180, 0x0) 01:57:11 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, 0x0) 01:57:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0xf4}]}) [ 671.044512][ T4631] device veth271 entered promiscuous mode 01:57:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:11 executing program 2: fchownat(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$befs(0x0, &(0x7f0000003780)='./file0\x00', 0x0, 0x1, &(0x7f0000003800)=[{&(0x7f00000037c0)="98", 0x1, 0xfab}], 0x0, &(0x7f0000003840)={[{'\xf1'}]}) 01:57:11 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=']) r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(0x0, 0x0) acct(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {}, [], {}, [{}], {0x10, 0x4}}, 0x2c, 0x0) lchown(&(0x7f0000000340)='./bus\x00', r1, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 01:57:11 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=']) r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(0x0, 0x0) acct(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {}, [], {}, [{}], {0x10, 0x4}}, 0x2c, 0x0) lchown(&(0x7f0000000340)='./bus\x00', r1, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 01:57:11 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=']) r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(0x0, 0x0) acct(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {}, [], {}, [{}], {0x10, 0x4}}, 0x2c, 0x0) lchown(&(0x7f0000000340)='./bus\x00', r1, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') [ 671.314307][ T4659] loop2: detected capacity change from 0 to 15 01:57:11 executing program 4: syz_open_dev$media(0x0, 0x0, 0x0) [ 671.403364][ T4670] device veth273 entered promiscuous mode 01:57:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:11 executing program 2: pselect6(0x40, &(0x7f0000000080), &(0x7f00000001c0)={0x2}, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) 01:57:11 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=']) r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(0x0, 0x0) acct(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {}, [], {}, [{}], {0x10, 0x4}}, 0x2c, 0x0) lchown(&(0x7f0000000340)='./bus\x00', r1, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 01:57:11 executing program 4: syz_mount_image$befs(&(0x7f0000000000)='befs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4052, &(0x7f0000000840)) 01:57:11 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=']) r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(0x0, 0x0) acct(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {}, [], {}, [{}], {0x10, 0x4}}, 0x2c, 0x0) lchown(&(0x7f0000000340)='./bus\x00', r1, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') [ 671.856619][ T4693] device veth275 entered promiscuous mode 01:57:11 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)) 01:57:11 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=']) r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(0x0, 0x0) acct(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {}, [], {}, [{}], {0x10, 0x4}}, 0x2c, 0x0) lchown(&(0x7f0000000340)='./bus\x00', r1, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 01:57:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:12 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) write$rfkill(r0, 0x0, 0x0) [ 672.273750][ T4729] device veth277 entered promiscuous mode 01:57:12 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=']) r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(0x0, 0x0) acct(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {}, [], {}, [{}], {0x10, 0x4}}, 0x2c, 0x0) lchown(&(0x7f0000000340)='./bus\x00', r1, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 01:57:12 executing program 4: memfd_create(&(0x7f00000000c0)='/dev/nvram\x00', 0x4) 01:57:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:12 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=']) r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(0x0, 0x0) acct(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {}, [], {}, [{}], {0x10, 0x4}}, 0x2c, 0x0) lchown(&(0x7f0000000340)='./bus\x00', r1, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 01:57:12 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCATTACH(r0, 0x4004743d, 0x0) 01:57:12 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=']) r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(0x0, 0x0) acct(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {}, [], {}, [{}], {0x10, 0x4}}, 0x2c, 0x0) lchown(&(0x7f0000000340)='./bus\x00', r1, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 01:57:12 executing program 4: perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 672.792694][ T4769] device veth279 entered promiscuous mode 01:57:13 executing program 3: accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:57:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:13 executing program 1: io_setup(0x7, &(0x7f0000000640)=0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[0x0]) 01:57:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}}, 0x0) 01:57:13 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) 01:57:13 executing program 3: syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0)='nl802154\x00', 0xffffffffffffffff) [ 673.307063][ T4810] device veth281 entered promiscuous mode 01:57:13 executing program 1: io_setup(0xff, &(0x7f0000000b40)=0x0) io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:57:13 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nullb0\x00', 0x80, 0x0) 01:57:13 executing program 4: pselect6(0x40, &(0x7f0000000080), &(0x7f00000001c0)={0x2}, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={[0x1]}, 0x8}) 01:57:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:13 executing program 3: symlinkat(&(0x7f00000008c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00') syz_mount_image$befs(&(0x7f0000000000)='befs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={[{}, {'[$'}, {}, {',!!((\\'}, {'^^+'}]}) 01:57:13 executing program 0: sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000080)) 01:57:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aa2e35d3"}, 0x0, 0x0, @fd}) 01:57:13 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x180, 0xa) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000040)) fchownat(r0, 0x0, 0x0, 0xffffffffffffffff, 0x400) r1 = openat$incfs(r0, 0x0, 0x8140, 0x0) r2 = geteuid() fchownat(r1, 0x0, r2, 0xee00, 0x1000) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) getuid() socket$isdn(0x22, 0x3, 0x24) recvmsg$kcm(r0, &(0x7f0000003580)={&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002500)=[{0x0}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2}, 0x100) sendto$llc(0xffffffffffffffff, &(0x7f0000003600)="3d3c952de6c1c2ee2668f8457e72f877557e4602070fb85a31458d0e1f5e38bfb81dd095fd1941fdd4660307a810ca31eabbc27fc34d5f0bda499e6cd1", 0x3d, 0x24000040, &(0x7f0000003700)={0x1a, 0x323, 0x8, 0x2, 0x93, 0x9, @link_local}, 0x10) syz_mount_image$befs(&(0x7f0000003740)='befs\x00', &(0x7f0000003780)='./file0\x00', 0x9, 0x1, &(0x7f0000003800)=[{&(0x7f00000037c0)="98a8b182ef334840a4b2f268c9b3db7c6fa9b8c607eb67816296f391d95213b3958773d08d7f1b58", 0x28, 0xfab}], 0x300028, &(0x7f0000003840)={[{'\xf1'}, {}, {'\'['}], [{@uid_lt={'uid<'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x65, 0x0, 0x53, 0x38, 0x63, 0x34, 0x63], 0x2d, [0x36, 0x61, 0x0, 0x33], 0x2d, [0x36, 0x64, 0x0, 0x64], 0x2d, [0x62, 0x32], 0x2d, [0x62, 0x0, 0x32, 0x61, 0x61, 0x0, 0x31, 0x39]}}}, {@appraise='appraise'}, {@measure='measure'}]}) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000003940)='/proc/self/net/pfkey\x00', 0x2, 0x0) 01:57:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8b"], 0x1e4}}, 0x0) [ 673.662326][ T4841] device veth283 entered promiscuous mode 01:57:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003900)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0) 01:57:13 executing program 3: capget(&(0x7f00000079c0), 0x0) 01:57:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:13 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f00000001c0)=0x1) [ 673.815793][ T4856] loop2: detected capacity change from 0 to 15 01:57:13 executing program 4: socket(0x34, 0x0, 0x0) [ 673.891110][ T4868] __nla_validate_parse: 14 callbacks suppressed [ 673.891130][ T4868] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:13 executing program 3: clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x7f}, 0x0, &(0x7f0000000200)={0x0, r0+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x8001]}, 0x8}) 01:57:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003900)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0) 01:57:14 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) [ 673.969862][ T4880] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 674.043813][ T4880] device veth285 entered promiscuous mode 01:57:14 executing program 4: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) getuid() ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) syz_mount_image$befs(&(0x7f0000003740)='befs\x00', &(0x7f0000003780)='./file0\x00', 0x9, 0x1, &(0x7f0000003800)=[{&(0x7f00000037c0)="98", 0x1}], 0x300028, &(0x7f0000003840)={[{'\xf1'}, {'.log\x00'}, {'\'['}], [{@smackfsroot={'smackfsroot', 0x3d, '.log\x00'}}, {@uid_lt={'uid<'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x65, 0x0, 0x53, 0x0, 0x63, 0x34, 0x63], 0x2d, [0x0, 0x61, 0x0, 0x33], 0x2d, [0x0, 0x64, 0x0, 0x64], 0x2d, [0x62, 0x32, 0x64, 0x1], 0x2d, [0x62, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x39]}}}, {@appraise='appraise'}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x64, 0x38, 0x0, 0x63, 0x0, 0x39], 0x2d, [0x0, 0x61, 0x66, 0x65], 0x2d, [0x64, 0x65, 0x64, 0x38], 0x2d, [0x30, 0x0, 0x67, 0x64], 0x2d, [0x36, 0x39, 0x61, 0x1b, 0x35, 0x30, 0x36]}}}]}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000003900)='/dev/vim2m\x00', 0x2, 0x0) 01:57:14 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/autofs\x00', 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 01:57:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:14 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000029c0)) 01:57:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003900)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0) 01:57:14 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x0, 0x0) accept$alg(r0, 0x0, 0x0) [ 674.259852][ T4903] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:14 executing program 3: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x80e}, 0x0) 01:57:14 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) 01:57:14 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) read$alg(r0, 0x0, 0x0) [ 674.380268][ T4919] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003900)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0) 01:57:14 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) [ 674.437441][ T4919] device veth287 entered promiscuous mode 01:57:14 executing program 3: io_setup(0x7, &(0x7f0000000640)=0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 01:57:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:14 executing program 1: io_setup(0x5, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000800)='/dev/nvram\x00', 0x4080, 0x0) 01:57:14 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x41, 0x0) 01:57:14 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, 0x0) [ 674.651444][ T4949] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:14 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0)='nl802154\x00', 0xffffffffffffffff) 01:57:14 executing program 0: syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) [ 674.738881][ T4959] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:14 executing program 1: clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x1ff}, 0x0, &(0x7f0000000200)={0x0, r0+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x8001]}, 0x8}) 01:57:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0x1}, 0x24}}, 0x0) [ 674.813505][ T4959] device veth289 entered promiscuous mode 01:57:14 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x80, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) 01:57:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1e4}}, 0x0) 01:57:15 executing program 2: syz_mount_image$befs(0x0, 0x0, 0x0, 0x1, &(0x7f0000003800)=[{&(0x7f00000037c0)="98", 0x1}], 0x0, 0x0) 01:57:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:15 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x240201, 0x0) getpeername(r0, 0x0, 0x0) 01:57:15 executing program 3: bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) 01:57:15 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:57:15 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x80100, 0x0) [ 675.590357][ T5000] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:15 executing program 1: io_setup(0x7, &(0x7f0000000640)=0x0) io_getevents(r0, 0x81, 0x0, 0x0, 0x0) 01:57:15 executing program 3: syz_open_dev$media(&(0x7f0000000880)='/dev/media#\x00', 0x5, 0x400) 01:57:15 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) 01:57:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000bc0)={&(0x7f0000000a80), 0xc, 0x0}, 0x0) [ 675.707483][ T5000] device veth291 entered promiscuous mode 01:57:15 executing program 4: getuid() fchownat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x0, 0x0) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$befs(&(0x7f0000003740)='befs\x00', &(0x7f0000003780)='./file0\x00', 0x0, 0x0, &(0x7f0000003800), 0x300028, &(0x7f0000003840)={[{'.log\x00'}]}) 01:57:15 executing program 2: clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={r0, r1+60000000}, 0x0) 01:57:15 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSMRU1(r0, 0x40047452, 0x0) 01:57:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:15 executing program 0: syz_mount_image$befs(0x0, &(0x7f0000003780)='./file0\x00', 0x0, 0x0, &(0x7f0000003800), 0x0, 0x0) 01:57:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 01:57:16 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x80100, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x1) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000180)=0x8) 01:57:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 675.970431][ T5029] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 676.008082][ T5029] device veth293 entered promiscuous mode 01:57:16 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x240201, 0x0) 01:57:16 executing program 4: openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0xe000, 0x0) [ 676.109331][ T5062] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:16 executing program 0: r0 = getpgid(0x0) wait4(r0, 0x0, 0x0, &(0x7f0000000140)) 01:57:16 executing program 3: openat$incfs(0xffffffffffffffff, 0x0, 0x8140, 0x0) [ 676.215563][ T5062] device veth295 entered promiscuous mode 01:57:16 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x2}]}) 01:57:16 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000800)='/dev/nvram\x00', 0x4080, 0x0) 01:57:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:16 executing program 4: syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2) 01:57:16 executing program 0: setitimer(0x1, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000080)) 01:57:16 executing program 1: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff, 0x0, 0x80000}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x80100, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x1) 01:57:16 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240), 0x8}) 01:57:16 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x101800, 0x0) 01:57:16 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002980)) [ 676.471573][ T5101] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000bc0)={&(0x7f0000000a80), 0xc, &(0x7f0000000b80)={0x0}}, 0x0) [ 676.553090][ T5101] device veth297 entered promiscuous mode 01:57:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:16 executing program 2: pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x4}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x1]}, 0x8}) 01:57:16 executing program 3: fchownat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0xee00, 0x1000) 01:57:16 executing program 0: getuid() openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x0, 0x0) geteuid() ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x24000040, 0x0, 0x0) syz_mount_image$befs(&(0x7f0000003740)='befs\x00', &(0x7f0000003780)='./file0\x00', 0x9, 0x1, &(0x7f0000003800)=[{&(0x7f00000037c0)="98", 0x1, 0xfab}], 0x300028, &(0x7f0000003840)={[{'.log\x00'}, {}], [{@euid_lt={'euid<'}}]}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) 01:57:16 executing program 4: io_setup(0x77, &(0x7f0000001480)=0x0) io_submit(r0, 0x1, &(0x7f0000002a40)=[&(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:57:16 executing program 1: syz_genetlink_get_family_id$smc(&(0x7f0000000100)='SMC_PNETID\x00', 0xffffffffffffffff) 01:57:16 executing program 3: io_setup(0x7, &(0x7f0000000640)=0x0) io_submit(r0, 0x0, 0x0) io_cancel(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 676.803997][ T5130] device veth299 entered promiscuous mode 01:57:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:16 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x802, 0x0) [ 676.882710][ T5146] loop0: detected capacity change from 0 to 15 01:57:17 executing program 1: syz_genetlink_get_family_id$l2tp(&(0x7f0000000c00)='l2tp\x00', 0xffffffffffffffff) [ 676.939331][ T5154] loop0: detected capacity change from 0 to 15 01:57:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0) 01:57:17 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) getuid() r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) geteuid() fchownat(r0, 0x0, 0x0, 0xee00, 0x1000) socket$isdn(0x22, 0x3, 0x0) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$befs(&(0x7f0000003740)='befs\x00', &(0x7f0000003780)='./file0\x00', 0x0, 0x1, &(0x7f0000003800)=[{&(0x7f00000037c0)}], 0x0, &(0x7f0000003840)={[{'\'['}], [{@smackfsroot={'smackfsroot', 0x3d, '.log\x00'}}, {@uid_lt={'uid<'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x65, 0x65, 0x53, 0x38, 0x63, 0x34, 0x63], 0x2d, [0x36, 0x61, 0x0, 0x33], 0x2d, [0x36, 0x64, 0x0, 0x64], 0x2d, [0x62, 0x32, 0x64, 0x1], 0x2d, [0x62, 0x36, 0x32, 0x61, 0x61, 0x0, 0x31, 0x39]}}}, {@appraise='appraise'}]}) 01:57:17 executing program 0: sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0) [ 677.050072][ T5165] befs: Unrecognized mount option "'[" or missing value [ 677.143643][ T5160] device veth301 entered promiscuous mode [ 677.155895][ T5165] befs: (loop1): cannot parse mount options 01:57:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)=@ipv4_delrule={0x1c}, 0x1c}}, 0x0) 01:57:17 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003900)='/dev/vim2m\x00', 0x2, 0x0) 01:57:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 01:57:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:17 executing program 0: memfd_create(&(0x7f00000000c0)='/dev/nvram\x00', 0x0) 01:57:17 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) io_setup(0x7, &(0x7f0000000640)=0x0) io_submit(r0, 0x0, 0x0) io_destroy(r0) 01:57:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001400)={0x0}}, 0x0) [ 677.711003][ T5198] device veth303 entered promiscuous mode 01:57:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:17 executing program 4: pselect6(0x40, &(0x7f0000000080), &(0x7f00000001c0)={0x2}, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) 01:57:17 executing program 2: io_setup(0x77, &(0x7f0000001480)) 01:57:17 executing program 3: pselect6(0x40, &(0x7f0000000080), &(0x7f00000001c0)={0x2}, 0x0, 0x0, 0x0) 01:57:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000280)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "586516bb"}}) 01:57:17 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x8, 0x1, 0x8, 0x1}, {0x2, 0x0, 0x1, 0xffffffff}, {0x4, 0x40, 0x8, 0x9}]}) io_submit(0x0, 0x1, &(0x7f0000000940)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x101, r0, 0x0}]) io_setup(0xffff, &(0x7f00000000c0)) io_setup(0xff, 0x0) [ 677.954917][ T5214] device veth305 entered promiscuous mode 01:57:18 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x8000000) 01:57:18 executing program 3: mremap(&(0x7f0000ff9000/0x4000)=nil, 0x300, 0x7ffffffff000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 01:57:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:18 executing program 0: read$rfkill(0xffffffffffffffff, 0x0, 0x0) 01:57:18 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000100)='SMC_PNETID\x00', r0) 01:57:18 executing program 4: r0 = getpgid(0x0) ptrace$setopts(0x4206, r0, 0x53af, 0x0) 01:57:18 executing program 3: r0 = getpgid(0x0) ptrace$setregset(0x4205, r0, 0x0, 0x0) 01:57:18 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 678.264415][ T5239] device veth307 entered promiscuous mode 01:57:18 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3424, &(0x7f0000000340)=ANY=[]) 01:57:18 executing program 2: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x46, 0x1008, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') 01:57:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x80041284) 01:57:18 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x0, 0x0) statx(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)) 01:57:18 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:57:18 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) mknodat$null(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x103) name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440)={0x8}, 0x0, 0x0) 01:57:18 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xc, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) 01:57:18 executing program 3: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) [ 678.565160][ T5262] device veth309 entered promiscuous mode 01:57:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:18 executing program 4: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xfffffffffffffffa, 0x0) 01:57:18 executing program 0: mremap(&(0x7f0000ff9000/0x4000)=nil, 0x300, 0x201e, 0x3, &(0x7f0000ffe000/0x2000)=nil) 01:57:18 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x4100, 0x0) 01:57:18 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:57:18 executing program 1: madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x15) 01:57:18 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1d}, 0x40) [ 678.835708][ T5283] device veth311 entered promiscuous mode 01:57:18 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x4}, {0x2}, {0x6}]}) 01:57:19 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) 01:57:19 executing program 4: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x300, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 01:57:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:19 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) open$dir(&(0x7f0000000280)='./file0\x00', 0x6240, 0x0) 01:57:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 679.091327][ T37] audit: type=1326 audit(1616896639.121:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5302 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 01:57:19 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x35, 0x13]}}}}]}) [ 679.137990][ T5308] __nla_validate_parse: 7 callbacks suppressed [ 679.138011][ T5308] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:19 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, &(0x7f0000000140)) 01:57:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c6a21b1b9d6276, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 679.272967][ T5318] tmpfs: Bad value for 'mpol' 01:57:19 executing program 3: fanotify_mark(0xffffffffffffffff, 0xa4, 0x0, 0xffffffffffffff9c, 0x0) 01:57:19 executing program 2: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) [ 679.297806][ T5308] device veth313 entered promiscuous mode [ 679.317285][ T5318] tmpfs: Bad value for 'mpol' 01:57:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x0, 0x1ced}, 0x40) 01:57:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:19 executing program 0: mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)=""/158) 01:57:19 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) syz_mount_image$romfs(&(0x7f0000000480)='romfs\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000001880)=ANY=[]) 01:57:19 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x42b51ed0734b030b, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x5460) 01:57:19 executing program 2: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4a80) [ 679.515388][ T5334] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 679.553882][ T5334] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:19 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) 01:57:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4013, r0, 0x0) 01:57:19 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x42b51ed0734b030b, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x40305828) 01:57:19 executing program 3: perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:57:19 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) mknodat$null(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x103) name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440)={0x8}, &(0x7f0000000140), 0x0) [ 679.684795][ T5334] device veth315 entered promiscuous mode 01:57:19 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@mode={'mode', 0x3d, 0xfffffffffffffffa}}]}) 01:57:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x401070c9) [ 679.881748][ T5363] tmpfs: Bad value for 'mode' 01:57:19 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x5460) 01:57:19 executing program 4: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 01:57:19 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000007c0)=""/36, 0x24) [ 679.908453][ T5365] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:20 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x81346c, &(0x7f0000000340)=ANY=[]) [ 679.967355][ T5365] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:20 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x210342d, &(0x7f0000000340)=ANY=[]) 01:57:20 executing program 4: openat$dir(0xffffffffffffff9c, 0xfffffffffffffffd, 0x0, 0x0) [ 680.072145][ T5365] device veth317 entered promiscuous mode 01:57:20 executing program 3: pipe(&(0x7f00000033c0)) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x300, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) munmap(&(0x7f0000ff1000/0x3000)=nil, 0x3000) 01:57:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:20 executing program 0: pipe(&(0x7f00000033c0)) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) munmap(&(0x7f0000ff8000/0x2000)=nil, 0x2000) 01:57:20 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xe) 01:57:20 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000180)='./file1\x00') 01:57:20 executing program 4: perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 680.317556][ T5391] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:20 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') [ 680.361575][ T5391] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:20 executing program 2: shmat(0x0, &(0x7f0000ff9000/0x6000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x3ff, 0x0) 01:57:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x1269) 01:57:20 executing program 4: mbind(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8001, &(0x7f0000000000)=0x1cef, 0x9, 0x0) mremap(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) [ 680.477554][ T5391] device veth319 entered promiscuous mode 01:57:20 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="95"], &(0x7f0000000040)='GPL\x00', 0x5, 0xf2, &(0x7f0000000080)=""/242, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:57:20 executing program 1: statx(0xffffffffffffffff, 0x0, 0x0, 0x245ba995d7c348a2, 0x0) 01:57:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x401870c8) 01:57:20 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:57:20 executing program 3: shmat(0x0, &(0x7f0000ff9000/0x6000)=nil, 0x4000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x300, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) [ 680.708494][ T5423] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:20 executing program 4: mremap(&(0x7f0000ff9000/0x4000)=nil, 0x300, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 01:57:20 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x6000)=nil, 0x4000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x300, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) remap_file_pages(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) [ 680.768969][ T5423] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:20 executing program 3: shmat(0x0, &(0x7f0000ff9000/0x6000)=nil, 0x4000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x300, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 01:57:20 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/205, 0xcd) [ 680.855873][ T5423] device veth321 entered promiscuous mode 01:57:20 executing program 0: bpf$MAP_CREATE(0xa, &(0x7f0000000180), 0x40) 01:57:20 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) r0 = syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=ANY=[]) getdents64(r0, &(0x7f0000000180)=""/246, 0xf6) 01:57:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:21 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c05) 01:57:21 executing program 3: shmat(0x0, &(0x7f0000ff9000/0x6000)=nil, 0x4000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x300, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 01:57:21 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x42b51ed0734b030b, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x541b) 01:57:21 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 681.100031][ T5453] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 681.184599][ T5458] device veth323 entered promiscuous mode 01:57:21 executing program 3: shmat(0x0, &(0x7f0000ff9000/0x6000)=nil, 0x4000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x300, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 01:57:21 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@size={'size', 0x3d, [0x25]}}]}) 01:57:21 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x127f) 01:57:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c09) 01:57:21 executing program 0: mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 01:57:21 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) syz_mount_image$romfs(&(0x7f0000000480)='romfs\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000001880)=ANY=[@ANYBLOB='e']) 01:57:21 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000140)='tmpfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'local', '=static', @void}}}]}) 01:57:21 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000015c0)=ANY=[]) 01:57:21 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)) 01:57:21 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x3424, &(0x7f0000000340)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') futimesat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) [ 681.483039][ T5479] device veth325 entered promiscuous mode 01:57:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 681.567386][ T5491] tmpfs: Unknown parameter 'e' [ 681.617180][ T5495] tmpfs: Bad value for 'mpol' 01:57:21 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) mknodat$null(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x103) 01:57:21 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16}, 0x40) [ 681.650218][ T5495] tmpfs: Bad value for 'mpol' 01:57:21 executing program 2: prctl$PR_SET_MM_MAP(0x29, 0xe, 0x0, 0x0) pipe(&(0x7f00000033c0)) 01:57:21 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x10}, 0x4) 01:57:21 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x127c) 01:57:21 executing program 0: shmat(0x0, &(0x7f0000ff9000/0x6000)=nil, 0x4000) sigaltstack(&(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0)) [ 681.777104][ T5499] device veth327 entered promiscuous mode 01:57:21 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) syz_mount_image$romfs(&(0x7f00000002c0)='romfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x80000, &(0x7f0000000480)) 01:57:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:21 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'bind'}}}]}) 01:57:21 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x42b51ed0734b430b, 0x0) 01:57:22 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x1261) 01:57:22 executing program 0: pipe(&(0x7f0000000040)) mremap(&(0x7f0000560000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000049a000/0x3000)=nil) 01:57:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x0, 0xc00}, 0x40) [ 682.004396][ T5524] tmpfs: Bad value for 'mpol' [ 682.011763][ T5524] tmpfs: Bad value for 'mpol' 01:57:22 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x58030000, &(0x7f0000000300), 0x0, &(0x7f0000000380)) [ 682.104836][ T5526] device veth329 entered promiscuous mode 01:57:22 executing program 1: madvise(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x2) 01:57:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x0, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x5}, 0x40) 01:57:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5}, 0x40) 01:57:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:22 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x127b) 01:57:22 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x1145006, &(0x7f0000000380)) 01:57:22 executing program 1: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xffffffffffffffff, 0x0) 01:57:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x1263) [ 682.402250][ T5553] device veth331 entered promiscuous mode 01:57:22 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40020143, 0x0) 01:57:22 executing program 1: setresuid(0xee01, 0xee01, 0xee01) pipe(&(0x7f00000033c0)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, r0}, 0x68) 01:57:22 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x127e) 01:57:23 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:57:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000006800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0) 01:57:23 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, &(0x7f00000015c0)=ANY=[]) 01:57:23 executing program 1: setresuid(0xee01, 0xee01, 0xee01) pipe(&(0x7f00000033c0)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, r0}, 0x68) 01:57:23 executing program 2: r0 = socket(0xa, 0x3, 0x9) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:57:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x0, 0x7, 0x2, 0x1}, 0x40) 01:57:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x401870cb) 01:57:23 executing program 1: setresuid(0xee01, 0xee01, 0xee01) pipe(&(0x7f00000033c0)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, r0}, 0x68) 01:57:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c03) [ 683.325867][ T5595] device veth333 entered promiscuous mode 01:57:23 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) 01:57:23 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:57:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:23 executing program 1: setresuid(0xee01, 0xee01, 0xee01) pipe(&(0x7f00000033c0)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, r0}, 0x68) 01:57:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x40081271) 01:57:23 executing program 2: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x46, 0x1008, 0xffffffffffffffff, 0x0) 01:57:23 executing program 3: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x31, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) 01:57:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x40101283) [ 683.688633][ T5620] device veth335 entered promiscuous mode 01:57:23 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x808, &(0x7f00000000c0)=ANY=[]) 01:57:23 executing program 4: r0 = fanotify_init(0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x0, 0x0) fanotify_mark(r0, 0x46, 0x1008, r1, &(0x7f0000000240)='./file0\x00') 01:57:23 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6769643dac"]) 01:57:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:23 executing program 3: syz_mount_image$tmpfs(&(0x7f00000015c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004c80)={[{@mpol={'mpol', 0x3d, {'default', '=relative'}}}]}) 01:57:23 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_auto='xino=auto'}]}) 01:57:24 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) r0 = syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=ANY=[]) pipe(0x0) getdents64(r0, &(0x7f0000000180)=""/246, 0xf6) 01:57:24 executing program 4: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) [ 683.962528][ T5646] tmpfs: Bad value for 'gid' [ 683.971497][ T5644] device veth337 entered promiscuous mode [ 684.004304][ T5646] tmpfs: Bad value for 'gid' [ 684.012368][ T5651] tmpfs: Bad value for 'mpol' 01:57:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 684.048770][ T5651] tmpfs: Bad value for 'mpol' 01:57:24 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x15}, {}]}) 01:57:24 executing program 3: mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8001, &(0x7f0000000000)=0x1cef, 0x9, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 01:57:24 executing program 4: clock_nanosleep(0x7, 0x0, &(0x7f0000000000)={0x77359400}, 0x0) 01:57:24 executing program 1: shmat(0x0, &(0x7f0000ff9000/0x6000)=nil, 0x4000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x300, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0xa6031afbd6b65697) [ 684.253733][ T5664] __nla_validate_parse: 12 callbacks suppressed [ 684.253752][ T5664] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 684.277830][ T5666] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 01:57:24 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x1278) 01:57:24 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x80081270) [ 684.355768][ T5669] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x80081272) 01:57:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={0x0}}, 0x0) [ 684.426283][ T5669] device veth339 entered promiscuous mode 01:57:24 executing program 2: pipe(&(0x7f00000033c0)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0)='E', 0x1, r0}, 0x68) 01:57:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:24 executing program 3: r0 = fanotify_init(0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x0, 0x0) fanotify_mark(r0, 0x46, 0x1008, r1, 0x0) 01:57:24 executing program 2: madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xe) pipe(&(0x7f00000033c0)) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x300, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 01:57:24 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) syz_mount_image$romfs(&(0x7f00000000c0)='romfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, &(0x7f0000000640)=ANY=[]) 01:57:24 executing program 1: mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) [ 684.631513][ T5694] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 684.688499][ T5698] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 684.792652][ T5698] device veth341 entered promiscuous mode 01:57:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x1, 0x0, 0x2}, 0x40) 01:57:25 executing program 3: r0 = fanotify_init(0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x0, 0x0) fanotify_mark(r0, 0x46, 0x1008, r1, 0x0) 01:57:25 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 01:57:25 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x42b51ed0734b030b, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x5450) 01:57:25 executing program 1: shmat(0x0, &(0x7f0000ff9000/0x6000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 01:57:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:25 executing program 3: r0 = fanotify_init(0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x0, 0x0) fanotify_mark(r0, 0x46, 0x1008, r1, 0x0) 01:57:25 executing program 0: perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 685.281547][ T5727] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:25 executing program 4: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x40070, 0xffffffffffffffff, 0x0) 01:57:25 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0/../file0\x00', 0x0, 0x0) 01:57:25 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4a81) ioctl$LOOP_SET_CAPACITY(r0, 0x4c00) [ 685.344105][ T5731] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:25 executing program 3: r0 = fanotify_init(0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x0, 0x0) fanotify_mark(r0, 0x46, 0x1008, r1, 0x0) 01:57:25 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @void}}}]}) 01:57:25 executing program 4: mremap(&(0x7f0000ff9000/0x4000)=nil, 0x300, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x2) [ 685.464381][ T5731] device veth343 entered promiscuous mode 01:57:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:25 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) linkat(r0, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000300)='./file0/file1\x00', 0x0) 01:57:25 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 01:57:25 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) mknodat$null(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x103) name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440)={0xc, 0x0, "22afa455"}, &(0x7f0000000140), 0x0) 01:57:25 executing program 3: munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) [ 685.657997][ T5764] tmpfs: Bad value for 'mpol' [ 685.680851][ T5766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 685.681187][ T5764] tmpfs: Bad value for 'mpol' 01:57:25 executing program 4: munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 01:57:25 executing program 3: prctl$PR_SET_MM_MAP(0x2f, 0x4, 0x0, 0x0) [ 685.743183][ T5773] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:25 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x6000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 01:57:25 executing program 0: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x210a02) [ 685.828885][ T5773] device veth345 entered promiscuous mode 01:57:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9}, 0x40) [ 685.870931][ T3232] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.877371][ T3232] ieee802154 phy1 wpan1: encryption failed: -22 01:57:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:26 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x74000000, &(0x7f0000000300), 0x0, &(0x7f0000000380)) 01:57:26 executing program 3: mbind(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8001, &(0x7f0000000000)=0x1cef, 0x9, 0x0) mlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000) 01:57:26 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c08) 01:57:26 executing program 4: mprotect(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0) 01:57:26 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @void}}, 0x33}]}) [ 686.037997][ T5795] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:26 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000dfff000000000000000000000079870800fc"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 686.114817][ T5803] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 686.168119][ T5808] tmpfs: Bad value for 'mpol' 01:57:26 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x3032, &(0x7f0000000100)=ANY=[]) [ 686.189618][ T5803] device veth347 entered promiscuous mode [ 686.194380][ T5808] tmpfs: Bad value for 'mpol' 01:57:26 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1600c0, 0x0) 01:57:26 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @void}}, 0x33}]}) 01:57:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:26 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) syz_mount_image$romfs(&(0x7f0000000480)='romfs\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x150053, &(0x7f0000000700)) 01:57:26 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) mknodat$null(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x103) name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440)={0x81, 0x0, "22afa45593200761229adb45bd3c922b5277c4ecf78bb1b3be23dd395834d33b76a747ac4c9e34dba0af7691f5beb1dbdfcd4fe94113f111e2f8bcade43710484a1adca435732efc09439d0757908d08c3338e131d4b5c77af3c331407b29e89510b7227e691bdbc7bcb94bdef4941e54656d60b53629d7d6f"}, 0x0, 0x0) [ 686.413077][ T5825] tmpfs: Bad value for 'mpol' [ 686.521662][ T5826] device veth349 entered promiscuous mode 01:57:27 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 01:57:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4a81) ioctl$LOOP_SET_CAPACITY(r0, 0x127f) 01:57:27 executing program 3: mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000001cef, 0xaa4, 0x0) 01:57:27 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @void}}, 0x33}]}) 01:57:27 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000100)=@raw=[@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:57:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 687.113672][ T5854] tmpfs: Bad value for 'mpol' 01:57:27 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000140)='tmpfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000240)) [ 687.164748][ T5855] device veth351 entered promiscuous mode 01:57:27 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @void}}, 0x33}]}) 01:57:27 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x15, 0x0, 0x3f}, {}, {}, {}]}) 01:57:27 executing program 4: r0 = socket(0xa, 0x3, 0x9) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={0x0}}, 0x0) 01:57:27 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x125d) 01:57:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 687.337878][ T5874] tmpfs: Bad value for 'mpol' 01:57:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x2}, 0x40) 01:57:27 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) select(0x40, &(0x7f00000000c0)={0x3}, 0x0, 0x0, 0x0) 01:57:27 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) mknodat$null(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x103) name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440)={0xc, 0x0, "22afa455"}, &(0x7f0000000140), 0x1400) 01:57:27 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0xc0ed0000, &(0x7f00000015c0)) 01:57:27 executing program 4: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004c80)) fork() sched_getparam(0x0, &(0x7f0000004c40)) [ 687.472007][ T5880] device veth353 entered promiscuous mode 01:57:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:27 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000180)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0) 01:57:27 executing program 0: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:57:27 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0xc2100, 0x0) getdents64(r0, &(0x7f00000002c0)=""/146, 0x92) 01:57:27 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:57:27 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x42b51ed0734b030b, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x40081271) [ 687.761152][ T5905] device veth355 entered promiscuous mode 01:57:27 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/mnt\x00') 01:57:27 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4a81) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 01:57:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:27 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0xc000, 0x0) 01:57:28 executing program 1: perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x600, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd93d}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:57:28 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)) r0 = open$dir(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000007c0)=""/36, 0x24) 01:57:28 executing program 2: munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 01:57:28 executing program 4: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000), 0x401, 0x0) 01:57:28 executing program 3: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000040)=""/102) [ 688.110649][ T5934] device veth357 entered promiscuous mode 01:57:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:28 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 01:57:28 executing program 2: pipe(&(0x7f00000033c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="95"], &(0x7f0000000040)='GPL\x00', 0x5, 0xf2, &(0x7f0000000080)=""/242, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0), 0x10}, 0x78) 01:57:28 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) 01:57:28 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)) r0 = open$dir(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000007c0)=""/36, 0x24) 01:57:28 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x401870cc) 01:57:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4a81) ioctl$LOOP_SET_CAPACITY(r0, 0x4c02) 01:57:28 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) mknodat$null(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x103) name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) 01:57:28 executing program 4: mbind(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8001, &(0x7f0000000000)=0x1cef, 0x9, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) [ 688.520007][ T5965] device veth359 entered promiscuous mode 01:57:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:28 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x2000040, &(0x7f0000000380)) 01:57:28 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)) r0 = open$dir(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000007c0)=""/36, 0x24) 01:57:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x1268) 01:57:28 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4a81) ioctl$LOOP_SET_CAPACITY(r0, 0x127d) 01:57:28 executing program 1: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4a81) 01:57:28 executing program 2: mremap(&(0x7f0000ff9000/0x4000)=nil, 0x300, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 01:57:28 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)) r0 = open$dir(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000007c0)=""/36, 0x24) [ 688.853161][ T5998] device veth361 entered promiscuous mode 01:57:28 executing program 3: shmat(0x0, &(0x7f0000ff9000/0x6000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x3ff, 0x0) sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) 01:57:28 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:57:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:29 executing program 1: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4a81) 01:57:29 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10132, 0xffffffffffffffff, 0x8000000) [ 689.118198][ T6018] device veth363 entered promiscuous mode 01:57:29 executing program 3: mremap(&(0x7f0000ff9000/0x4000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 01:57:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002700)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002800)={0x0, 0x2, &(0x7f0000000040)=@raw=[@btf_id], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:57:29 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0xee00, 0x0, 0x0) 01:57:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:29 executing program 1: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4a81) 01:57:29 executing program 2: perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:57:29 executing program 3: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000003600), 0x0, 0x0) [ 689.334567][ T6039] __nla_validate_parse: 15 callbacks suppressed [ 689.334588][ T6039] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:29 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x140) [ 689.394910][ T6039] device veth365 entered promiscuous mode 01:57:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f0, &(0x7f0000004580)={'tunl0\x00', &(0x7f0000004700)=ANY=[]}) 01:57:29 executing program 1: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4a81) 01:57:29 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) futimesat(r0, 0x0, &(0x7f0000000240)) 01:57:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:29 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x42b51ed0734b030b, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 01:57:29 executing program 1: perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:57:29 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 01:57:29 executing program 2: pipe(&(0x7f00000033c0)) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) [ 689.752194][ T6075] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x0, 0x7, 0x2}, 0x40) 01:57:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x700000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r1, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC], 0x100000530) 01:57:29 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xf, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) [ 689.844115][ T6075] device veth367 entered promiscuous mode 01:57:29 executing program 4: mbind(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8001, &(0x7f0000000000)=0x1cef, 0x9, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 01:57:29 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x2e, 0x6, 0x0, {0x0, 0x0, 0x5, 0x0, '^}\\$%'}}, 0x2e) 01:57:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:30 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) 01:57:30 executing program 0: r0 = inotify_init1(0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:57:30 executing program 4: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x9}, &(0x7f00000000c0)={0x77359400}, 0x0) [ 690.072491][ T6102] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:30 executing program 0: capset(&(0x7f0000001700)={0x20071026, 0xffffffffffffffff}, 0x0) 01:57:30 executing program 2: syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x0) [ 690.183502][ T6102] device veth369 entered promiscuous mode 01:57:30 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0) 01:57:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 690.395236][ T6126] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 690.434507][ T6126] device veth371 entered promiscuous mode 01:57:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x700000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r1, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC], 0x100000530) 01:57:30 executing program 4: uname(&(0x7f0000000180)=""/102397) 01:57:30 executing program 1: bpf$OBJ_PIN_MAP(0x3, 0x0, 0x0) 01:57:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000580)={0x28, 0x4, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_CHAIN_TYPE={0x0, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS]}, 0x28}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 01:57:30 executing program 2: bpf$OBJ_PIN_MAP(0xb, 0x0, 0x0) 01:57:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 690.914056][ T6143] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 01:57:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x700000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r1, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC], 0x100000530) [ 690.975125][ T6147] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 01:57:31 executing program 2: clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) pselect6(0x40, &(0x7f00000003c0), 0x0, 0x0, &(0x7f00000004c0)={0x0, r0+60000000}, &(0x7f0000000540)={&(0x7f0000000500), 0x8}) [ 691.103912][ T6147] device veth373 entered promiscuous mode 01:57:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 691.239047][ T3049] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 691.417997][ T6172] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 691.463371][ T6172] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:31 executing program 2: clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) pselect6(0x40, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)={0x7c}, &(0x7f00000004c0)={0x0, r0+60000000}, &(0x7f0000000540)={&(0x7f0000000500)={[0x1]}, 0x8}) [ 691.593986][ T6172] device veth375 entered promiscuous mode 01:57:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 691.759448][ T3049] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 691.797859][ T3049] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 01:57:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x700000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r1, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC], 0x100000530) 01:57:31 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 691.870864][ T3049] usb 1-1: Product: syz [ 691.889656][ T6183] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 691.908268][ T3049] usb 1-1: Manufacturer: syz 01:57:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 691.959777][ T6185] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 691.984479][ T3049] usb 1-1: SerialNumber: syz [ 692.040286][ T3049] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 692.121143][ T6185] device veth377 entered promiscuous mode [ 692.688920][ T3049] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 692.893693][ T7] usb 1-1: USB disconnect, device number 11 [ 693.788745][ T3049] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 693.796292][ T3049] ath9k_htc: Failed to initialize the device [ 693.806180][ T7] usb 1-1: ath9k_htc: USB layer deinitialized 01:57:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x40) 01:57:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x700000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r1, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC], 0x100000530) 01:57:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:33 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x1) 01:57:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 01:57:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x700000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r1, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC], 0x100000530) 01:57:34 executing program 2: time(&(0x7f00000002c0)) 01:57:34 executing program 0: pselect6(0x0, 0x0, 0x0, &(0x7f0000000440), &(0x7f00000004c0), 0x0) [ 694.167339][ T6234] device veth379 entered promiscuous mode 01:57:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 01:57:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:34 executing program 2: bpf$OBJ_PIN_MAP(0x1a, 0x0, 0x0) [ 694.461300][ T6250] __nla_validate_parse: 3 callbacks suppressed [ 694.461320][ T6250] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000005440)=[{{&(0x7f00000034c0)=@nl, 0x80, &(0x7f0000003740)=[{0x0}, {0x0}, {0x0}], 0x3}}], 0x1, 0x0, 0x0) [ 694.552809][ T6255] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 694.648338][ T6255] device veth381 entered promiscuous mode 01:57:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 01:57:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x700000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r1, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC], 0x100000530) 01:57:34 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x0, 0x0) 01:57:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:34 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x0, 0x0) 01:57:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) 01:57:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 695.024307][ T6274] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:35 executing program 3: socketpair(0x2, 0x0, 0x801, &(0x7f0000000400)) [ 695.073485][ T6274] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:35 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x8e, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x2, 0x1, 0x1f, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "99c7d2"}, {0x5, 0x24, 0x0, 0x37}, {0xd, 0x24, 0xf, 0x1, 0xefa, 0x2, 0x2, 0x40}, {0x6, 0x24, 0x1a, 0x9, 0x20}, [@mdlm={0x15, 0x24, 0x12, 0x400}, @mbim_extended={0x8, 0x24, 0x1c, 0x81, 0x7, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x62, 0xb, 0x35}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x208, 0x7f, 0x2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xbb, 0x1, 0xff}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x80, 0x3, 0x2, 0x20, 0xf9}, 0x1f4, &(0x7f00000003c0)={0x5, 0xf, 0x1f4, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xde, "29c99ff7890ab9ab550eccf441eed4b9"}, @generic={0x102, 0x10, 0x4, "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"}, @generic={0xc4, 0x10, 0xb, "c79035d3cfaed577c3a94f697247e8d2d2e74bb702e03c998efa62cc0b733d91994f409ace3b8887e722120ce7a1a404fb58af14386a5417af776ede2d82bf5b2b2128354aa79f1a618186d42a4eda4a7060e9e3a9012bd62dac86beb58b99c96b77567b3c826430135f9d35a57721820d35265f28bcb956fa044f8fe432839d115a0c3876135cb330424f04b581908d06586dd4bfe0e66656fcb4537fe668c7085ba1b36a3b2daafa8ca588b6b080bd069dce6c0a572a5fbf4c6aaf6d003d93cf"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x9, 0x80, 0x7, 0x3d}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0xc, 0x1}]}, 0x9, [{0x6d, &(0x7f0000000180)=@string={0x6d, 0x3, "4ff8a1b800fcab408672b6a43acd9fb799457d028f5930229e959641ec7486eaf0a5f16d8286360b0536fe09bac691532b3b72d18c8764e216df57de1a9fdf703c2ec4f7a69d4223ff6dbe4363201c5779be9cb26099f3e9424f79626a6ac9655afac205afd937a9fa6659"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3c0a}}, {0xf3, &(0x7f0000000fc0)=ANY=[@ANYBLOB="f3030ec4ff98e4f919b01c8ff18e7bc6fe44dc03037c5b0597d8f87585d8843cd8f381130779e454dca92f25c64348d2c0e6c48bea057a521812f284ef4251cfb93b770594edde86772dc352dd34f22a101eb6617fcdf12bdfd234ec8fbf1cacea63922c7614b93e71f872a7dc7ab3052431935e3112d74a962b2bed00cd79b8caad143f83ccade508ae5c809347fb61d7cebd23e489c2af875d54c5a797ba2d9b5fdf789003f44cff48e6dd1fae559067f444f8f5d7cffa7adb38b04ea3116ed9ad5f285e62b02149f3ffe5bd79ebfbaeedf7ee1762f396e1cde3e1dfabb6ecf5ff5acb038eadb2dd95c2201e0af370820f6e6baceb9ee3d5"]}, {0xf7, &(0x7f00000006c0)=@string={0xf7, 0x3, "457a088f16d137f4c92565bd1c76d8f6f72270132249e0b6a02e37b06803933ca82de887e3093ef234dd725fc25ea87c2dcd22a0149f3906c3ad1ecff76fea443ec05331509c71f5587f9c4f25b371f1a9934f74e91f55b16cefe0ee2617fa14acd755800c342ef6799f02e8e51cde4b381849474943f05ffcee1813bc031b11ab45b8538e43d1b0ba77b07ac7f91b33eb4996661b73c8065d5363c5bf40d34bb474b8b4aaf30647cb863bbd617758382d0942337f5da471aa51245e0678ba6dd844ab0354e63db5a7e6b77de6bda655bbadd9b3f7b14a1ee5fc138e664f2af9e233d6768e0208da16dd283ace32da8064b6e8a03f"}}, {0x28, &(0x7f0000000280)=@string={0x28, 0x3, "807c4d5c659b0c83cab3320d00422d8b575c9c434129afc8003e9b1c0736fe84ecf71048b14a"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40e}}, {0xce, &(0x7f0000000880)=@string={0xce, 0x3, "1620a53158344fcb2baae376fc3697fd8eb63c1d452f8e66158a56efb2682d17e8345169ac4aed998ada4b03ca50a35f818ecd6af993812d106e7cad77017bb3df860a1014c5c966470f87fa2c3a55a3056541217623318dce20ce80c9537d0b3c8da158f7bbda6b7e97d71592977e039b7f414b3346dece85a96d438241d558f8b29dc64b7878c795e89c1d176681e8bb8a53a2380b62f6d2f39c0a8ed53d7d9a73bfb62c664beb887e08ec61e63b45e890be073c81e79ba281716914cbf93b965b143433a73fb369bd8a63"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x2409}}]}) [ 695.212288][ T6274] device veth383 entered promiscuous mode 01:57:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:35 executing program 3: bpf$OBJ_PIN_MAP(0x9, 0x0, 0x0) [ 695.367643][ T6298] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 695.380686][ T6298] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 695.453998][ T6298] device veth385 entered promiscuous mode [ 695.608690][ T9625] usb 3-1: new high-speed USB device number 61 using dummy_hcd 01:57:35 executing program 0: sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x0, 0x0, 0x25dfdbff, {0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000000901010000000000feff0000000000040002000800064000000000"], 0x20}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 01:57:35 executing program 3: socketpair(0x2, 0xa, 0x801, &(0x7f0000000400)) [ 695.880992][ T9625] usb 3-1: Using ep0 maxpacket: 16 01:57:35 executing program 3: bpf$OBJ_PIN_MAP(0x1c, 0x0, 0x0) 01:57:35 executing program 1: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x9}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3cc]}, 0x8}) 01:57:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 01:57:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:36 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000002880)={0x0, 0x0, @start={0x0, 0x0, "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", "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"}, [0xfffffffffffffff9, 0x7f, 0x5a4c, 0x4, 0x7, 0x20000000, 0x5, 0x9, 0x8, 0x6d, 0xfe59, 0x0, 0xfffffffffffffff9, 0x4, 0x101, 0x0, 0x7, 0x9, 0x3f, 0xf396, 0xe6f, 0x100000000, 0x3ff, 0x7, 0x3ff, 0x2, 0x5, 0x80, 0x9, 0x40, 0xffffffff00000000, 0x7, 0x2, 0x16, 0x9b, 0x60, 0x800, 0x3, 0x4, 0x5ec, 0x10000, 0x94e, 0x9, 0x3ff, 0x1f, 0x8001, 0xf7c, 0x3, 0xffffffff, 0x7, 0x0, 0x10000, 0x3, 0x81]}) [ 696.055321][ T6329] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:36 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/full\x00', 0x50541, 0x0) 01:57:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 696.098901][ T9625] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 98, changing to 10 [ 696.111495][ T34] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 696.116285][ T6329] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 696.138965][ T9625] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 520 [ 696.162083][ T9625] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 696.224693][ T6329] device veth387 entered promiscuous mode [ 696.396673][ T9625] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 696.412608][ T9625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.432490][ T9625] usb 3-1: Product: 㰊 [ 696.436807][ T9625] usb 3-1: Manufacturer: ⠉ [ 696.449646][ T9625] usb 3-1: SerialNumber: 쐎飿理뀙輜軱왻䓾Ϝ簃՛痸㲄ᎁ礇哤꧜┯䏆퉈评ת剺መ蓲䋯콑㮹շ蛞⵷勃㓝⫲Ḑ憶쵿⯱틟뾏개揪Ⲓᑶ㺹ꝲ竜ֳㄤ库ሱ䫗⮖촀롹귊㼔첃금聜䞓懻컗⎽觤꿂嶇암鞧ⶺ徛磟ΐ䳴䣿긟違ퟵ𢡊뀸ꍎ渑귙⡟扞↰禽ﯫ戗雳췡ꯟ￵쭚踃늭闝⃂ਞ烳ྂ [ 696.720313][ T34] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 696.735711][ T34] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.750269][ T34] usb 1-1: Product: syz [ 696.755773][ T34] usb 1-1: Manufacturer: syz [ 696.766076][ T34] usb 1-1: SerialNumber: syz [ 696.838762][ T9625] cdc_ncm 3-1:1.0: bind() failure [ 696.845519][ T34] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 696.878675][ T9625] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 696.915861][ T9625] cdc_ncm 3-1:1.1: bind() failure [ 696.952384][ T9625] usb 3-1: USB disconnect, device number 61 [ 697.548838][ T9625] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 697.618532][ T34] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 697.798357][ T9625] usb 3-1: Using ep0 maxpacket: 16 [ 697.822085][ T7] usb 1-1: USB disconnect, device number 12 [ 697.999111][ T9625] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 98, changing to 10 [ 698.011753][ T9625] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 520 [ 698.023216][ T9625] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 698.218579][ T9625] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 698.228823][ T9625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.237105][ T9625] usb 3-1: Product: 㰊 [ 698.242015][ T9625] usb 3-1: Manufacturer: ⠉ 01:57:38 executing program 2: bpf$OBJ_PIN_MAP(0x5, 0x0, 0x0) 01:57:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 01:57:38 executing program 1: bpf$OBJ_PIN_MAP(0x4, 0x0, 0x0) [ 698.246929][ T9625] usb 3-1: SerialNumber: 쐎飿理뀙輜軱왻䓾Ϝ簃՛痸㲄ᎁ礇哤꧜┯䏆퉈评ת剺መ蓲䋯콑㮹շ蛞⵷勃㓝⫲Ḑ憶쵿⯱틟뾏개揪Ⲓᑶ㺹ꝲ竜ֳㄤ库ሱ䫗⮖촀롹귊㼔첃금聜䞓懻컗⎽觤꿂嶇암鞧ⶺ徛磟ΐ䳴䣿긟違ퟵ𢡊뀸ꍎ渑귙⡟扞↰禽ﯫ戗雳췡ꯟ￵쭚踃늭闝⃂ਞ烳ྂ 01:57:38 executing program 0: memfd_create(&(0x7f0000000300)='\x00', 0x3) 01:57:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:38 executing program 3: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x9}, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={[0x3cc]}, 0x8}) 01:57:38 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @rumble}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) [ 698.416553][ T9625] usb 3-1: can't set config #1, error -71 [ 698.444431][ T9625] usb 3-1: USB disconnect, device number 62 01:57:38 executing program 2: socketpair(0x2, 0xa, 0x0, &(0x7f0000000400)) 01:57:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 698.502060][ T6403] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:38 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x8d, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x2, 0x1, 0x1f, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "99c7"}, {0x5, 0x24, 0x0, 0x37}, {0xd, 0x24, 0xf, 0x1, 0xefa, 0x2, 0x2, 0x40}, {0x6, 0x24, 0x1a, 0x9, 0x20}, [@mdlm={0x15, 0x24, 0x12, 0x400}, @mbim_extended={0x8, 0x24, 0x1c, 0x81, 0x7, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x62, 0xb, 0x35}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x208, 0x7f, 0x2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xbb, 0x1, 0xff}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x80, 0x3, 0x2, 0x20, 0xf9}, 0x1f4, &(0x7f00000003c0)={0x5, 0xf, 0x1f4, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xde, "29c99ff7890ab9ab550eccf441eed4b9"}, @generic={0x102, 0x10, 0x4, "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"}, @generic={0xc4, 0x10, 0xb, "c79035d3cfaed577c3a94f697247e8d2d2e74bb702e03c998efa62cc0b733d91994f409ace3b8887e722120ce7a1a404fb58af14386a5417af776ede2d82bf5b2b2128354aa79f1a618186d42a4eda4a7060e9e3a9012bd62dac86beb58b99c96b77567b3c826430135f9d35a57721820d35265f28bcb956fa044f8fe432839d115a0c3876135cb330424f04b581908d06586dd4bfe0e66656fcb4537fe668c7085ba1b36a3b2daafa8ca588b6b080bd069dce6c0a572a5fbf4c6aaf6d003d93cf"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x9, 0x80, 0x7, 0x3d}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0xc, 0x1}]}, 0x9, [{0x6d, &(0x7f0000000180)=@string={0x6d, 0x3, "4ff8a1b800fcab408672b6a43acd9fb799457d028f5930229e959641ec7486eaf0a5f16d8286360b0536fe09bac691532b3b72d18c8764e216df57de1a9fdf703c2ec4f7a69d4223ff6dbe4363201c5779be9cb26099f3e9424f79626a6ac9655afac205afd937a9fa6659"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3c0a}}, {0xf3, &(0x7f0000000fc0)=ANY=[@ANYBLOB="f3030ec4ff98e4f919b01c8ff18e7bc6fe44dc03037c5b0597d8f87585d8843cd8f381130779e454dca92f25c64348d2c0e6c48bea057a521812f284ef4251cfb93b770594edde86772dc352dd34f22a101eb6617fcdf12bdfd234ec8fbf1cacea63922c7614b93e71f872a7dc7ab3052431935e3112d74a962b2bed00cd79b8caad143f83ccade508ae5c809347fb61d7cebd23e489c2af875d54c5a797ba2d9b5fdf789003f44cff48e6dd1fae559067f444f8f5d7cffa7adb38b04ea3116ed9ad5f285e62b02149f3ffe5bd79ebfbaeedf7ee1762f396e1cde3e1dfabb6ecf5ff5acb038eadb2dd95c2201e0af370820f6e6baceb9ee3d5"]}, {0xf7, &(0x7f00000006c0)=@string={0xf7, 0x3, "457a088f16d137f4c92565bd1c76d8f6f72270132249e0b6a02e37b06803933ca82de887e3093ef234dd725fc25ea87c2dcd22a0149f3906c3ad1ecff76fea443ec05331509c71f5587f9c4f25b371f1a9934f74e91f55b16cefe0ee2617fa14acd755800c342ef6799f02e8e51cde4b381849474943f05ffcee1813bc031b11ab45b8538e43d1b0ba77b07ac7f91b33eb4996661b73c8065d5363c5bf40d34bb474b8b4aaf30647cb863bbd617758382d0942337f5da471aa51245e0678ba6dd844ab0354e63db5a7e6b77de6bda655bbadd9b3f7b14a1ee5fc138e664f2af9e233d6768e0208da16dd283ace32da8064b6e8a03f"}}, {0x28, &(0x7f0000000280)=@string={0x28, 0x3, "807c4d5c659b0c83cab3320d00422d8b575c9c434129afc8003e9b1c0736fe84ecf71048b14a"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40e}}, {0xce, &(0x7f0000000880)=@string={0xce, 0x3, "1620a53158344fcb2baae376fc3697fd8eb63c1d452f8e66158a56efb2682d17e8345169ac4aed998ada4b03ca50a35f818ecd6af993812d106e7cad77017bb3df860a1014c5c966470f87fa2c3a55a3056541217623318dce20ce80c9537d0b3c8da158f7bbda6b7e97d71592977e039b7f414b3346dece85a96d438241d558f8b29dc64b7878c795e89c1d176681e8bb8a53a2380b62f6d2f39c0a8ed53d7d9a73bfb62c664beb887e08ec61e63b45e890be073c81e79ba281716914cbf93b965b143433a73fb369bd8a63"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x2409}}]}) [ 698.572696][ T6408] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000003d80)={0x0, 0x0, &(0x7f0000003d40)={&(0x7f0000003c40)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7f}]}, 0x1c}}, 0x0) [ 698.636169][ T6408] device veth389 entered promiscuous mode 01:57:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000003d80)={0x0, 0x0, &(0x7f0000003d40)={&(0x7f0000003c40)={0x24, 0x3, 0x1, 0x101, 0x0, 0x0, {0x3}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8}]}, 0x24}}, 0x0) [ 698.678882][ T34] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 698.692164][ T34] ath9k_htc: Failed to initialize the device [ 698.721376][ T7] usb 1-1: ath9k_htc: USB layer deinitialized 01:57:38 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x0) 01:57:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 01:57:38 executing program 1: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000800)='/dev/urandom\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 01:57:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000003d80)={0x0, 0x0, &(0x7f0000003d40)={&(0x7f0000003c40)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x3}, [@CTA_MARK_MASK={0x8}]}, 0x1c}}, 0x0) [ 699.021524][ T6437] device veth391 entered promiscuous mode [ 699.038215][ T9625] usb 4-1: new high-speed USB device number 10 using dummy_hcd 01:57:39 executing program 1: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) 01:57:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 01:57:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000003d80)={0x0, 0x0, &(0x7f0000003d40)={&(0x7f0000003c40)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x3}, [@CTA_MARK={0x8}]}, 0x1c}}, 0x0) [ 699.276086][ T6460] device veth393 entered promiscuous mode [ 699.346724][ T9625] usb 4-1: Using ep0 maxpacket: 16 [ 699.608510][ T9625] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 98, changing to 10 [ 699.634409][ T9625] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 520 [ 699.656854][ T9625] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 699.858759][ T9625] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 699.878304][ T9625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.886551][ T9625] usb 4-1: Product: 㰊 [ 699.893541][ T9625] usb 4-1: Manufacturer: ⠉ [ 699.899824][ T9625] usb 4-1: SerialNumber: 쐎飿理뀙輜軱왻䓾Ϝ簃՛痸㲄ᎁ礇哤꧜┯䏆퉈评ת剺መ蓲䋯콑㮹շ蛞⵷勃㓝⫲Ḑ憶쵿⯱틟뾏개揪Ⲓᑶ㺹ꝲ竜ֳㄤ库ሱ䫗⮖촀롹귊㼔첃금聜䞓懻컗⎽觤꿂嶇암鞧ⶺ徛磟ΐ䳴䣿긟違ퟵ𢡊뀸ꍎ渑귙⡟扞↰禽ﯫ戗雳췡ꯟ￵쭚踃늭闝⃂ਞ烳ྂ [ 700.400779][ T9625] cdc_ncm 4-1:1.0: bind() failure [ 700.409862][ T9625] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 700.417256][ T9625] cdc_ncm 4-1:1.1: bind() failure [ 700.427820][ T9625] usb 4-1: USB disconnect, device number 10 [ 701.108230][ T9625] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 701.378050][ T9625] usb 4-1: Using ep0 maxpacket: 16 [ 701.648267][ T9625] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 98, changing to 10 [ 701.660445][ T9625] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 520 [ 701.671847][ T9625] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 01:57:41 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) 01:57:41 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 01:57:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 01:57:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 01:57:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:41 executing program 2: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x9}, 0x0, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) [ 701.768372][ T9625] usb 4-1: string descriptor 0 read error: -71 [ 701.780704][ T9625] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 701.836723][ T9625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.844111][ T6521] __nla_validate_parse: 4 callbacks suppressed [ 701.844133][ T6521] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:41 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) 01:57:41 executing program 1: bpf$OBJ_PIN_MAP(0xe, 0x0, 0x0) [ 701.918627][ T9625] usb 4-1: can't set config #1, error -71 [ 701.920825][ T6524] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 701.964406][ T9625] usb 4-1: USB disconnect, device number 11 01:57:42 executing program 3: bpf$OBJ_PIN_MAP(0x21, 0x0, 0x0) [ 702.035616][ T6524] device veth395 entered promiscuous mode 01:57:42 executing program 1: pselect6(0x40, &(0x7f00000003c0), &(0x7f0000000400), 0x0, 0x0, 0x0) 01:57:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 01:57:42 executing program 0: bpf$OBJ_PIN_MAP(0x17, 0x0, 0x0) 01:57:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 01:57:42 executing program 3: bpf$OBJ_PIN_MAP(0x19, 0x0, 0x0) 01:57:42 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x100000001, 0x0) [ 702.320831][ T6552] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:42 executing program 3: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) [ 702.387391][ T6552] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:42 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={[0x1]}, 0x8}) [ 702.496165][ T6552] device veth397 entered promiscuous mode 01:57:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 01:57:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 702.671087][ T6577] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 702.753300][ T6584] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:43 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x42000, 0x0) 01:57:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 01:57:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 01:57:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 703.289998][ T6611] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 703.385701][ T6617] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:43 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x18000, 0x0) 01:57:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 01:57:43 executing program 3: bpf$OBJ_PIN_MAP(0x23, 0x0, 0x0) 01:57:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) 01:57:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 01:57:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:43 executing program 1: ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='!*\x00', 0x0, 0xffffffffffffffff) 01:57:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) 01:57:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 703.744203][ T6640] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:43 executing program 0: bpf$OBJ_PIN_MAP(0x6, 0x0, 0x10) 01:57:43 executing program 1: syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x2, 0x0) 01:57:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 703.889175][ T6644] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)=@buf={0x50, &(0x7f0000000100)="44bc84857e2ecf86a03e8933e4758497b5dcfc9092041981b137af439297d6b1f3885357b0b02be6c9638bb65d456c5df66f7d4bf6ae6bb959dc94ce1384f5ee5635b692d34d241ab9d53e377ebdf998"}) 01:57:44 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001700)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000001740)) 01:57:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 01:57:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:44 executing program 1: socket$netlink(0x10, 0x3, 0xe) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 01:57:44 executing program 3: memfd_create(&(0x7f0000000280)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x4) 01:57:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 01:57:44 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000002880)={0x0, 0x0, @start={0x0, 0x0, "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", "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"}}) 01:57:44 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) 01:57:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 01:57:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 01:57:44 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001700)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000001740)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000080)=0x1) 01:57:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 01:57:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:44 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0x5421, &(0x7f0000002880)={0x0, 0x0, @start={0x0, 0x0, "6aad1eefeb35ef8c1d45c9bc61a2ab87d0904bf53e2384196cd385fcc475cc55e1c3313a797d4646a58eb7df9c215736268af8963c80d502b65c6ac5a6b6f5bcbeb907bdcf4a27a84690e0d7f1b7f9d126bda076d80d08267c502fab2855edd45799c95592d3476989246bb2ad6651b1605b51533610208558b6fca5e8576b845754bf6c452c84c510f1c6171579da4b85fc3f1c566cc18968b603a643d50f62f00c6ad6ad19ea6efecae9cfd81b543f36159a5c8d6104614d60203444b53a2382dea90913d7a86baf0c178b16852ef06cd295772a82daee7cc52d92ba208df434946f04b15c21da250e93787f172d03e38dd439fad2cc58af2af3e8452f91a08aaa7e7876d2b34e28a1ffae3cd8470d5d42a9228b9e47f1d1e20f45300bde046dadb286777696aa1f1c58f0c23409f7f3ffe9459dd45ffaa25f7d50e55f0c5861f3a9d0dba7df4b7059eedc2c238903590c7594ac511fe1b1705cb45e1baf975a5755fff95da72d2ce4c3c382c06426f8e2438ad8224f33a89d6dee98ae583e84faddc77f5f4610a7b4f5ac7663e8f48ed06067f609b79ac2feb1ca5cfc9496b6e07dad632a95fbc4694e1bb132789e48fa9c1fd37e82c54fba566af86607d000e42df69eb1de7235b9ff58db1e7322f6e799424b2b797b59b8f65de465fe0062af652792d9119b35bb01b40b4aa5834eac34c123cf102f082503b2599f6574314729181b4465e06ad1aa41dcedea6d7afb2a73ba539b3dcf3661e4b6cf6e7f6f6d6e543b487b3d604729e031aef08cf51ec65aab968f5bd93e56a54634554d1c1f0fa174383d6402b52b5327ac936b1c9f44726f31f6b30dd9eb3cb923b5f3b178fc60c99cde3c277a2cbd560aa28027a54c93237e761400b1e087384e1645ea2a1dbc071f68f4c15f7d0a0fefe47ec97c901a485562fd6d12799c626c1fa6ad958e2fb21db1fd2aa3d6a38255cdbb53565755bb6c50124cf31477719f06cf38124f2ff21ae70be9bb6d03d04a18682b52386307bf373729325fe8b046a3cb76b653df6fcff1896c20d00bd7beb084fca2cbbb9353627a513861458a1aac9690b983e2da0d3e0ffaf1f5dbcdadde9b89cba4b7791fa5b3408b05eef717106c4c24053e4b63bf4b49e7c1776ae5bfda5104e599d71636f8028dd9e300bfa22521652277b6cd71b46a6cb7d5bd733838dbf1590a734190ed8ef69e7083b94d1d169a17ba4423801e540d872814013013365b9a87ff118db01f37c05dc9350e102ed92cc409b928953059a1a2bc42460a44d36fba9167190b533fb0626a1c484671724d6cc127a0d2565befa5c0eb7079b322293a81d2ff636e875834be31ec2712a85651b3639a7df610b79637d5c6feb27b9d2751414e8fa857a905b129889c620919b8c34ecfdeeb1fded64b983a319cd71e49e8266ab3881eea2c086c556764", "e5294f27e3a054137702b9f5902dd856605cd38eca505ced42d57dde80b7c242695892da6c40e4e10d6a3a0753e566506ac5de18033f44a5dc68e52289b72b7772e9b26cb40342e42da643f1d255264647c6fd79da6e1f107422e869800409754ed921fbbe38377b5e6d26c719410ed20ee0604f55b6f23ef783809f80a5afd6cf7a4eeef74817f10bb9c1042ef433d75a991501d486ffe8d61290622a5475e4f3cecb1bc07f92d70ffd8764e5b6e5bd9eb7dbaeab4297a9c975df21f2af83f3d65f0f27de9a45ae3e61b114cd5f3c79cf29779a2ed698f0e54e1bb029cf38a447ba3610ef2561b9f596a75219f323620d254b3cf164bc41426a3ee8c72a06d1679a2394575fc16c82d527a9bdbcd00b9c363b9c1bf818c6b27dd2f207df5ccb714868bc4937542d375a3da930b91bc901a090bc0dcc299427b036b0bea7c4d61f5b4e4b38d34b1c648dece2c55572bfcbd56404a51549ccffd93cd3aa5637015385d5f76bcf4aedbd53be723424bc8394f38c6287c4272f926fd973eb1e7f5935cd2baa36162d5c23b75ed2a4663e87ec0673517bd02b18b0aedfe369516beaa5cb4e806e8b5bbc5b0f4a6b53845ee92583bc5a115ef015915c1a9efefc7129e01ed630bb336aacaaf988157c8c378205640f2e5e9ef80ee44d71dfeefa234633f8bfa7f3d07855322b586084998ac90c60c589509f88cbd53ddc19c4675fe48aaef8a297e00a7c2cb2e4f20bf16487a367fe921caf94809e6efd3a52140d836f36b332acd38f4f9b787c846da507ae0cc0d81014f23c0556c0f79fb34a71de17d17e7bdbeba2742c62e2d288dcf0adfd890fd76a22005388b9f4515d158458e81bfd47a4fa28c0cfb9cfcc0183ac985e26139f48c8bd8cc23b313f29f66725db27cef9a36ba63599cc762d58526eea1e14e52fea7bbc0ac409dae889d0ddb1709f732755bdb559bef39fb1399097b2b1a24528ee8e9bd0df4478cb705df9acc2477f7b9349d94e83b82333df0dcf800a416d2be6ae71612f2b9909bb2c6306fd53520776769003c8a551a0d421d27edf48fa932ef2b84f67c28e83b4fa7d7d98d87c8609e37697c85da1c1cfa924fd9c655da3e42f8ad3f10bd4d6a18ee43be7b28edd2c615ed3e15082cb9a8e8dddade6d0e20845c4749eb729a553a6494e6842d1c73676ab329cfd121093d6ac7f04630d70e0972ce5df6b4aa9fc8eae5848211e66372c8f8229af63b20d2d21208f24b71940bcc0db3ea1abd6ac5e4e1ee0c6e35dd79cf6f4e600e562f844c068c66be3dbc5ccffcde5d07d34d41d288e466d601d0336972098b1eb9f3dfc8fa986d4a3183d9e8ab533fbc74a087092eb38869ab1f8387b58239eb6acef2ce08ea04eaa0640ba786cbd5d2b0f525f66044d36eca342140a95198dfd3d6ff9b3500d71a5ced8a28f41b2a789bbf23f0c774a"}}) 01:57:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 01:57:44 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001700)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, 0x0) 01:57:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 01:57:44 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={@private0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x101, 0x8}) 01:57:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 704.878001][ T9497] usb 2-1: new high-speed USB device number 10 using dummy_hcd 01:57:45 executing program 0: getrusage(0x0, &(0x7f0000000000)) waitid(0x761a42ec7d5eea2a, 0x0, &(0x7f00000000c0), 0x8, 0x0) [ 705.397986][ T9497] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 705.408204][ T9497] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.417387][ T9497] usb 2-1: Product: syz [ 705.424392][ T9497] usb 2-1: Manufacturer: syz [ 705.430100][ T9497] usb 2-1: SerialNumber: syz [ 705.468714][ T9497] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 706.067932][ T9497] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 706.285673][ T8998] usb 2-1: USB disconnect, device number 10 [ 707.147698][ T9497] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 707.155472][ T9497] ath9k_htc: Failed to initialize the device [ 707.163854][ T8998] usb 2-1: ath9k_htc: USB layer deinitialized 01:57:47 executing program 1: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000240), 0x8) clock_gettime(0x0, &(0x7f0000000100)) 01:57:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 01:57:47 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) 01:57:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 01:57:47 executing program 0: io_pgetevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) 01:57:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 707.533827][ T8998] usb 2-1: new high-speed USB device number 11 using dummy_hcd 01:57:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 707.638599][ T6809] __nla_validate_parse: 6 callbacks suppressed [ 707.638619][ T6809] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:47 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x80805, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000440)={0xfeffffff, {0x4c}, 0x0, {}, 0xfffffffe, 0x0, 0x0, 0x19, "408b0301dcb8a402cc02a52532785aec11a63f6832927e2a8932b66ca63aa002e00751470e814ab516c15286fd20420448480002000007000000004800", "b89b67ed7f1d20d113f405d53b1b4549a3fcb55be159afa1c02188b895618eab"}) 01:57:47 executing program 3: bpf$OBJ_PIN_MAP(0xf, 0x0, 0x0) [ 707.719753][ T6813] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 01:57:47 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0) 01:57:47 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 01:57:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:48 executing program 3: clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) pselect6(0x40, &(0x7f00000003c0), 0x0, &(0x7f0000000440)={0x7c}, &(0x7f00000004c0)={0x0, r0+60000000}, &(0x7f0000000540)={&(0x7f0000000500), 0x8}) [ 707.913039][ T6833] loop0: detected capacity change from 0 to 1028 01:57:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 01:57:48 executing program 3: socketpair(0x2, 0x0, 0x0, &(0x7f0000000400)) [ 708.006300][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 708.036105][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 01:57:48 executing program 1: openat$audio(0xffffffffffffff9c, &(0x7f0000001700)='/dev/audio\x00', 0x0, 0x0) [ 708.057948][ T6846] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 708.077525][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 708.088999][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 708.132667][ T6853] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 708.150129][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 708.161507][ C1] Buffer I/O error on dev loop0, logical block 0, async page read 01:57:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 01:57:48 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 708.214557][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 708.225733][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 708.255582][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 708.267706][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 708.276711][ C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 708.289119][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 708.312849][ C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 708.324136][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 708.351188][ C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 708.362430][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 708.396509][ C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 708.407857][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 708.416559][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 708.426252][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 708.440401][ T6839] ldm_validate_partition_table(): Disk read failed. [ 708.457648][ T6839] Dev loop0: unable to read RDB block 0 [ 708.471888][ T6839] loop0: unable to read partition table [ 708.501857][ T6839] loop_reread_partitions: partition scan of loop0 (@ܸ%2xZ?h2~*2l:QGJR BHH) failed (rc=-5) 01:57:48 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x80805, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000440)={0xfeffffff, {0x4c}, 0x0, {}, 0xfffffffe, 0x0, 0x0, 0x19, "408b0301dcb8a402cc02a52532785aec11a63f6832927e2a8932b66ca63aa002e00751470e814ab516c15286fd20420448480002000007000000004800", "b89b67ed7f1d20d113f405d53b1b4549a3fcb55be159afa1c02188b895618eab"}) 01:57:48 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0x40047452, 0x0) 01:57:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001780)='/dev/uinput\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) 01:57:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 01:57:48 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 01:57:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 708.659088][ T8398] ================================================================== [ 708.667819][ T8398] BUG: KASAN: use-after-free in disk_part_iter_next+0x1e3/0x4a0 [ 708.675680][ T8398] Read of size 8 at addr ffff8880191850a8 by task syz-executor.0/8398 [ 708.684013][ T8398] [ 708.686466][ T8398] CPU: 1 PID: 8398 Comm: syz-executor.0 Not tainted 5.12.0-rc4-syzkaller #0 [ 708.694233][ T6886] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:48 executing program 1: bpf$OBJ_PIN_MAP(0x6, 0x0, 0x7800) [ 708.695687][ T8398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 708.695740][ T8398] Call Trace: [ 708.695749][ T8398] dump_stack+0x176/0x24e [ 708.723480][ T8398] print_address_description+0x5f/0x3a0 [ 708.729162][ T8398] kasan_report+0x15c/0x200 [ 708.733906][ T8398] ? disk_part_iter_next+0x1e3/0x4a0 [ 708.739431][ T8398] disk_part_iter_next+0x1e3/0x4a0 [ 708.744592][ T8398] blk_drop_partitions+0xab/0x250 [ 708.749767][ T8398] bdev_disk_changed+0x128/0x3c0 [ 708.754999][ T8398] __loop_clr_fd+0x7a8/0xa20 [ 708.759919][ T8398] lo_ioctl+0x103d/0x20b0 [ 708.764439][ T8398] ? rcu_lock_release+0x5/0x20 [ 708.769243][ T8398] ? tomoyo_path_number_perm+0x586/0x6a0 [ 708.775030][ T8398] ? blkdev_common_ioctl+0xee0/0x1bf0 [ 708.777554][ T6888] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 708.780428][ T8398] ? memset+0x1f/0x40 [ 708.780454][ T8398] ? lo_release+0x1f0/0x1f0 [ 708.780479][ T8398] blkdev_ioctl+0x2e1/0x600 [ 708.803038][ T8398] block_ioctl+0xae/0xf0 [ 708.807403][ T8398] ? blkdev_iopoll+0xf0/0xf0 [ 708.812028][ T8398] __se_sys_ioctl+0xfb/0x170 [ 708.816660][ T8398] do_syscall_64+0x2d/0x70 [ 708.821253][ T8398] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 708.827288][ T8398] RIP: 0033:0x466217 [ 708.831550][ T8398] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 01:57:48 executing program 1: bpf$OBJ_PIN_MAP(0x1e, 0x0, 0x0) [ 708.852229][ T8398] RSP: 002b:00007ffc518abb78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 708.860851][ T8398] RAX: ffffffffffffffda RBX: 00007ffc518abc10 RCX: 0000000000466217 [ 708.868863][ T8398] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 708.877216][ T8398] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffc518aba10 [ 708.885235][ T8398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 708.893335][ T8398] R13: 00000000000acfe1 R14: 0000000000000000 R15: 00007ffc518abc50 [ 708.902225][ T8398] [ 708.904564][ T8398] Allocated by task 6134: 01:57:48 executing program 1: bpf$OBJ_PIN_MAP(0x1b, 0x0, 0x0) [ 708.908912][ T8398] __kasan_slab_alloc+0x8f/0xc0 [ 708.913877][ T8398] kmem_cache_alloc+0x1c3/0x350 [ 708.918760][ T8398] bdev_alloc_inode+0x17/0x80 [ 708.923682][ T8398] new_inode_pseudo+0x61/0x220 [ 708.928495][ T8398] new_inode+0x25/0x1d0 [ 708.932672][ T8398] bdev_alloc+0x20/0x290 [ 708.936934][ T8398] add_partition+0x13c/0x790 [ 708.941755][ T8398] bdev_add_partition+0x1a8/0x1f0 [ 708.946978][ T8398] blkpg_do_ioctl+0x29d/0x300 [ 708.952383][ T8398] blkdev_ioctl+0x36d/0x600 [ 708.957098][ T8398] block_ioctl+0xae/0xf0 [ 708.961751][ T8398] __se_sys_ioctl+0xfb/0x170 [ 708.966458][ T8398] do_syscall_64+0x2d/0x70 [ 708.972786][ T8398] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 708.978710][ T8398] [ 708.981052][ T8398] Freed by task 9486: [ 708.985145][ T8398] kasan_set_track+0x3d/0x70 [ 708.990291][ T8398] kasan_set_free_info+0x1f/0x40 [ 708.995429][ T8398] ____kasan_slab_free+0x100/0x140 [ 709.000649][ T8398] slab_free_freelist_hook+0x171/0x270 [ 709.006211][ T8398] kmem_cache_free+0x85/0x170 01:57:49 executing program 1: openat$cachefiles(0xffffffffffffff9c, 0x0, 0x200801, 0x0) [ 709.010918][ T8398] rcu_core+0x858/0x1360 [ 709.015364][ T8398] __do_softirq+0x318/0x714 [ 709.020137][ T8398] [ 709.022476][ T8398] Last potentially related work creation: [ 709.028593][ T8398] kasan_save_stack+0x27/0x50 [ 709.033819][ T8398] kasan_record_aux_stack+0xee/0x120 [ 709.039667][ T8398] call_rcu+0x130/0x8e0 [ 709.043926][ T8398] disk_part_iter_next+0x61/0x4a0 [ 709.049064][ T8398] blk_drop_partitions+0x1c5/0x250 [ 709.054208][ T8398] bdev_disk_changed+0x128/0x3c0 01:57:49 executing program 1: fspick(0xffffffffffffff9c, 0x0, 0x0) [ 709.059433][ T8398] loop_set_status+0xa2a/0xd00 [ 709.064312][ T8398] lo_ioctl+0xb56/0x20b0 [ 709.068579][ T8398] blkdev_ioctl+0x2e1/0x600 [ 709.073195][ T8398] block_ioctl+0xae/0xf0 [ 709.077461][ T8398] __se_sys_ioctl+0xfb/0x170 [ 709.082543][ T8398] do_syscall_64+0x2d/0x70 [ 709.087292][ T8398] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 709.093385][ T8398] [ 709.095729][ T8398] The buggy address belongs to the object at ffff888019185080 [ 709.095729][ T8398] which belongs to the cache bdev_cache of size 2792 [ 709.110156][ T8398] The buggy address is located 40 bytes inside of [ 709.110156][ T8398] 2792-byte region [ffff888019185080, ffff888019185b68) [ 709.123951][ T8398] The buggy address belongs to the page: [ 709.129955][ T8398] page:ffffea0000646000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x19180 [ 709.140389][ T8398] head:ffffea0000646000 order:3 compound_mapcount:0 compound_pincount:0 [ 709.148912][ T8398] flags: 0xfff00000010200(slab|head) 01:57:49 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x8e, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x2, 0x1, 0x1f, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "99c7d2"}, {0x5, 0x24, 0x0, 0x37}, {0xd, 0x24, 0xf, 0x1, 0xefa, 0x2, 0x2, 0x40}, {0x6, 0x24, 0x1a, 0x9, 0x20}, [@mdlm={0x15, 0x24, 0x12, 0x400}, @mbim_extended={0x8, 0x24, 0x1c, 0x81, 0x7, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x62, 0xb, 0x35}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x208, 0x7f, 0x2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xbb, 0x1, 0xff}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x80, 0x3, 0x2, 0x20, 0xf9}, 0x1f4, &(0x7f00000003c0)={0x5, 0xf, 0x1f4, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xde, "29c99ff7890ab9ab550eccf441eed4b9"}, @generic={0x102, 0x10, 0x4, "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"}, @generic={0xc4, 0x10, 0xb, "c79035d3cfaed577c3a94f697247e8d2d2e74bb702e03c998efa62cc0b733d91994f409ace3b8887e722120ce7a1a404fb58af14386a5417af776ede2d82bf5b2b2128354aa79f1a618186d42a4eda4a7060e9e3a9012bd62dac86beb58b99c96b77567b3c826430135f9d35a57721820d35265f28bcb956fa044f8fe432839d115a0c3876135cb330424f04b581908d06586dd4bfe0e66656fcb4537fe668c7085ba1b36a3b2daafa8ca588b6b080bd069dce6c0a572a5fbf4c6aaf6d003d93cf"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x9, 0x80, 0x7, 0x3d}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0xc, 0x1}]}, 0x9, [{0x6d, &(0x7f0000000180)=@string={0x6d, 0x3, "4ff8a1b800fcab408672b6a43acd9fb799457d028f5930229e959641ec7486eaf0a5f16d8286360b0536fe09bac691532b3b72d18c8764e216df57de1a9fdf703c2ec4f7a69d4223ff6dbe4363201c5779be9cb26099f3e9424f79626a6ac9655afac205afd937a9fa6659"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3c0a}}, {0xf3, &(0x7f0000000fc0)=ANY=[@ANYBLOB="f3030ec4ff98e4f919b01c8ff18e7bc6fe44dc03037c5b0597d8f87585d8843cd8f381130779e454dca92f25c64348d2c0e6c48bea057a521812f284ef4251cfb93b770594edde86772dc352dd34f22a101eb6617fcdf12bdfd234ec8fbf1cacea63922c7614b93e71f872a7dc7ab3052431935e3112d74a962b2bed00cd79b8caad143f83ccade508ae5c809347fb61d7cebd23e489c2af875d54c5a797ba2d9b5fdf789003f44cff48e6dd1fae559067f444f8f5d7cffa7adb38b04ea3116ed9ad5f285e62b02149f3ffe5bd79ebfbaeedf7ee1762f396e1cde3e1dfabb6ecf5ff5acb038eadb2dd95c2201e0af370820f6e6baceb9ee3d5"]}, {0xf7, &(0x7f00000006c0)=@string={0xf7, 0x3, "457a088f16d137f4c92565bd1c76d8f6f72270132249e0b6a02e37b06803933ca82de887e3093ef234dd725fc25ea87c2dcd22a0149f3906c3ad1ecff76fea443ec05331509c71f5587f9c4f25b371f1a9934f74e91f55b16cefe0ee2617fa14acd755800c342ef6799f02e8e51cde4b381849474943f05ffcee1813bc031b11ab45b8538e43d1b0ba77b07ac7f91b33eb4996661b73c8065d5363c5bf40d34bb474b8b4aaf30647cb863bbd617758382d0942337f5da471aa51245e0678ba6dd844ab0354e63db5a7e6b77de6bda655bbadd9b3f7b14a1ee5fc138e664f2af9e233d6768e0208da16dd283ace32da8064b6e8a03f"}}, {0x28, &(0x7f0000000280)=@string={0x28, 0x3, "807c4d5c659b0c83cab3320d00422d8b575c9c434129afc8003e9b1c0736fe84ecf71048b14a"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40e}}, {0xce, &(0x7f0000000880)=@string={0xce, 0x3, "1620a53158344fcb2baae376fc3697fd8eb63c1d452f8e66158a56efb2682d17e8345169ac4aed998ada4b03ca50a35f818ecd6af993812d106e7cad77017bb3df860a1014c5c966470f87fa2c3a55a3056541217623318dce20ce80c9537d0b3c8da158f7bbda6b7e97d71592977e039b7f414b3346dece85a96d438241d558f8b29dc64b7878c795e89c1d176681e8bb8a53a2380b62f6d2f39c0a8ed53d7d9a73bfb62c664beb887e08ec61e63b45e890be073c81e79ba281716914cbf93b965b143433a73fb369bd8a63"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x2409}}]}) [ 709.154337][ T8398] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff8880109bdc80 [ 709.163031][ T8398] raw: 0000000000000000 00000000800b000b 00000001ffffffff 0000000000000000 [ 709.171962][ T8398] page dumped because: kasan: bad access detected [ 709.178490][ T8398] [ 709.180889][ T8398] Memory state around the buggy address: [ 709.186818][ T8398] ffff888019184f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 709.195180][ T8398] ffff888019185000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 709.203721][ T8398] >ffff888019185080: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 709.212299][ T8398] ^ [ 709.217850][ T8398] ffff888019185100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 709.225932][ T8398] ffff888019185180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 709.234100][ T8398] ================================================================== [ 709.243229][ T8398] Disabling lock debugging due to kernel taint [ 709.318596][ T8398] Kernel panic - not syncing: panic_on_warn set ... [ 709.325774][ T8398] CPU: 1 PID: 8398 Comm: syz-executor.0 Tainted: G B 5.12.0-rc4-syzkaller #0 [ 709.336043][ T8398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 709.346346][ T8398] Call Trace: [ 709.349638][ T8398] dump_stack+0x176/0x24e [ 709.353985][ T8398] panic+0x291/0x800 [ 709.358054][ T8398] ? preempt_schedule_thunk+0x16/0x18 [ 709.363613][ T8398] ? trace_hardirqs_on+0x30/0x80 [ 709.369087][ T8398] kasan_report+0x1ff/0x200 [ 709.374255][ T8398] ? disk_part_iter_next+0x1e3/0x4a0 [ 709.379737][ T8398] disk_part_iter_next+0x1e3/0x4a0 [ 709.385114][ T8398] blk_drop_partitions+0xab/0x250 [ 709.390336][ T8398] bdev_disk_changed+0x128/0x3c0 [ 709.395384][ T8398] __loop_clr_fd+0x7a8/0xa20 [ 709.400007][ T8398] lo_ioctl+0x103d/0x20b0 [ 709.404713][ T8398] ? rcu_lock_release+0x5/0x20 [ 709.409762][ T8398] ? tomoyo_path_number_perm+0x586/0x6a0 [ 709.415593][ T8398] ? blkdev_common_ioctl+0xee0/0x1bf0 [ 709.421043][ T8398] ? memset+0x1f/0x40 [ 709.425157][ T8398] ? lo_release+0x1f0/0x1f0 [ 709.429775][ T8398] blkdev_ioctl+0x2e1/0x600 [ 709.434384][ T8398] block_ioctl+0xae/0xf0 [ 709.438645][ T8398] ? blkdev_iopoll+0xf0/0xf0 [ 709.443333][ T8398] __se_sys_ioctl+0xfb/0x170 [ 709.448032][ T8398] do_syscall_64+0x2d/0x70 [ 709.452464][ T8398] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 709.458592][ T8398] RIP: 0033:0x466217 [ 709.462579][ T8398] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 709.482998][ T8398] RSP: 002b:00007ffc518abb78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 709.491696][ T8398] RAX: ffffffffffffffda RBX: 00007ffc518abc10 RCX: 0000000000466217 [ 709.500616][ T8398] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 709.508778][ T8398] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffc518aba10 [ 709.517024][ T8398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 709.525226][ T8398] R13: 00000000000acfe1 R14: 0000000000000000 R15: 00007ffc518abc50 [ 709.534830][ T8398] Kernel Offset: disabled [ 709.539326][ T8398] Rebooting in 86400 seconds..