Warning: Permanently added '10.128.0.31' (ECDSA) to the list of known hosts. 2020/10/03 18:11:17 fuzzer started 2020/10/03 18:11:18 dialing manager at 10.128.0.105:33091 2020/10/03 18:11:18 syscalls: 3308 2020/10/03 18:11:18 code coverage: enabled 2020/10/03 18:11:18 comparison tracing: enabled 2020/10/03 18:11:18 extra coverage: extra coverage is not supported by the kernel 2020/10/03 18:11:18 setuid sandbox: enabled 2020/10/03 18:11:18 namespace sandbox: enabled 2020/10/03 18:11:18 Android sandbox: enabled 2020/10/03 18:11:18 fault injection: enabled 2020/10/03 18:11:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/03 18:11:18 net packet injection: enabled 2020/10/03 18:11:18 net device setup: enabled 2020/10/03 18:11:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/03 18:11:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/03 18:11:18 USB emulation: /dev/raw-gadget does not exist 2020/10/03 18:11:18 hci packet injection: enabled 2020/10/03 18:11:18 wifi device emulation: enabled 18:13:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r1, &(0x7f0000000400)="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", 0x200, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x114, 0x2710, 0xffffffffffffffff, &(0x7f0000000380)) syzkaller login: [ 142.149764] audit: type=1400 audit(1601748780.226:8): avc: denied { execmem } for pid=6496 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:13:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 18:13:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @private}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/136, 0x88}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000001b80)=ANY=[@ANYBLOB="00f3c30709b3d2cd027ef1045b58a45dfa73dee6a382f2954bd13278d63a421dd43cd841124a10fd4bd7481d3c798a01ce782d09fd70e69624562a083018a38de147643bd1927a8608184641b28e4ae2c560e81194341e9b3ee0c562ccdfc266c7054742ddbcac5541099bff74773a8931f89eab9dc7364c9126ec2ff27da59f02ef97984f81829a923279209458b3df454ecf71549edfbf880efba4b2f4889b34fa315b92be37a5e098b19c9c70c2fbf16d82dcabae959e3215b7e5e6d55e7d"], 0xc3, 0x3) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3ff, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x7}, 0x0, 0x1f, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/partitions\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[]) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 18:13:00 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7a}]}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x14e, &(0x7f0000000340)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dbea7410b363de4fb357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399ef71d1fa7b32513f49d5135aea235f80005999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a80deedf485234af0e7317f1ec9f9a795c21f38b00907bac0a7553cf257c7f2b6761d38c7be026ab7601499ace6b596af053ecd3f4738f312c82f1c9930396d803653e90472423a51130c61d2cac3dc70e7e7c155da4872299dd03fde08224da7b068258e6b613b28a00a4"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 18:13:00 executing program 4: r0 = socket(0xa, 0x3, 0x3) setsockopt$inet_udp_int(r0, 0x29, 0x2b, 0x0, 0x0) 18:13:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) [ 143.406439] IPVS: ftp: loaded support on port[0] = 21 [ 143.571711] chnl_net:caif_netlink_parms(): no params data found [ 143.590357] IPVS: ftp: loaded support on port[0] = 21 [ 143.710490] IPVS: ftp: loaded support on port[0] = 21 [ 143.836628] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.845003] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.863883] device bridge_slave_0 entered promiscuous mode [ 143.886409] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.893953] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.901010] device bridge_slave_1 entered promiscuous mode [ 143.916027] chnl_net:caif_netlink_parms(): no params data found [ 143.967804] IPVS: ftp: loaded support on port[0] = 21 [ 143.992149] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.048918] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.096364] IPVS: ftp: loaded support on port[0] = 21 [ 144.199905] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 144.218404] team0: Port device team_slave_0 added [ 144.244067] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 144.251724] team0: Port device team_slave_1 added [ 144.287791] IPVS: ftp: loaded support on port[0] = 21 [ 144.296808] chnl_net:caif_netlink_parms(): no params data found [ 144.355564] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.361927] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.370755] device bridge_slave_0 entered promiscuous mode [ 144.378884] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.385801] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.393433] device bridge_slave_1 entered promiscuous mode [ 144.400625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.407134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.432474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.447998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.454643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.480972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.492259] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 144.538881] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 144.576899] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.588037] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.633886] device hsr_slave_0 entered promiscuous mode [ 144.639914] device hsr_slave_1 entered promiscuous mode [ 144.646379] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 144.654431] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 144.731101] chnl_net:caif_netlink_parms(): no params data found [ 144.745879] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 144.754453] team0: Port device team_slave_0 added [ 144.806177] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 144.814595] team0: Port device team_slave_1 added [ 144.907837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.914162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.940454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.953211] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.959571] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.968305] device bridge_slave_0 entered promiscuous mode [ 144.997517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.007480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.034229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.050191] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 145.057999] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.064756] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.071737] device bridge_slave_1 entered promiscuous mode [ 145.108864] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 145.117749] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 145.150233] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 145.165659] chnl_net:caif_netlink_parms(): no params data found [ 145.202437] device hsr_slave_0 entered promiscuous mode [ 145.209781] device hsr_slave_1 entered promiscuous mode [ 145.263419] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 145.270397] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.279011] team0: Port device team_slave_0 added [ 145.286090] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.293891] team0: Port device team_slave_1 added [ 145.318807] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 145.378702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.385654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.404440] Bluetooth: hci0: command 0x0409 tx timeout [ 145.412513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.427461] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.434177] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.441642] device bridge_slave_0 entered promiscuous mode [ 145.448724] chnl_net:caif_netlink_parms(): no params data found [ 145.463457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.469700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.495328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.508599] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 145.517593] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.524081] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.531064] device bridge_slave_1 entered promiscuous mode [ 145.549554] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 145.564214] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 145.570499] Bluetooth: hci1: command 0x0409 tx timeout [ 145.630458] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 145.671374] device hsr_slave_0 entered promiscuous mode [ 145.677677] device hsr_slave_1 entered promiscuous mode [ 145.686024] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 145.717759] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 145.724703] Bluetooth: hci2: command 0x0409 tx timeout [ 145.731379] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 145.778050] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.786508] team0: Port device team_slave_0 added [ 145.834812] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.842301] team0: Port device team_slave_1 added [ 145.855991] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.862387] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.869940] device bridge_slave_0 entered promiscuous mode [ 145.883402] Bluetooth: hci3: command 0x0409 tx timeout [ 145.900775] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.907249] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.915775] device bridge_slave_0 entered promiscuous mode [ 145.929339] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.936323] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.943784] device bridge_slave_1 entered promiscuous mode [ 145.969863] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 145.977952] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.985981] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.995827] device bridge_slave_1 entered promiscuous mode [ 146.002743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.009885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.036356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.044764] Bluetooth: hci4: command 0x0409 tx timeout [ 146.049042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.058665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.083956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.105652] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 146.120975] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.131294] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 146.181662] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 146.203067] Bluetooth: hci5: command 0x0409 tx timeout [ 146.207794] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 146.216580] team0: Port device team_slave_0 added [ 146.222426] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 146.230363] team0: Port device team_slave_1 added [ 146.237322] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 146.265153] device hsr_slave_0 entered promiscuous mode [ 146.271174] device hsr_slave_1 entered promiscuous mode [ 146.303788] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 146.311566] team0: Port device team_slave_0 added [ 146.327742] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 146.336591] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 146.346047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.352314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.378224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.390428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.397720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.423841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.435326] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 146.443825] team0: Port device team_slave_1 added [ 146.459866] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 146.479455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.486101] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.525478] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 146.531911] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 146.545702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.551961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.580163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.612703] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 146.621551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.629198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.655239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.681019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.689064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.725708] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.736217] device hsr_slave_0 entered promiscuous mode [ 146.741842] device hsr_slave_1 entered promiscuous mode [ 146.749323] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 146.757353] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 146.790587] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 146.799598] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 146.805840] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.847766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.858231] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.899354] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 146.906111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.916053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.924729] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.931173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.938457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.947364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.955220] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.961584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.977172] device hsr_slave_0 entered promiscuous mode [ 146.983281] device hsr_slave_1 entered promiscuous mode [ 146.989595] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 147.001659] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 147.015927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 147.026280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.033781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.057456] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 147.070507] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 147.081365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.097349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 147.126270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.135608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.190542] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.199517] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 147.239563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.250520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.262182] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 147.285986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.298283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.320514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.330182] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 147.353556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.361203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.386818] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 147.404663] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 147.410683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.428287] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 147.442047] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 147.449552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.457306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.469945] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 147.483305] Bluetooth: hci0: command 0x041b tx timeout [ 147.490743] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 147.498111] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.517270] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 147.525814] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 147.537361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.554295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.561058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.577774] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 147.595345] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 147.607134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.616478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.627308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.636804] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.643180] Bluetooth: hci1: command 0x041b tx timeout [ 147.648469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.658955] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 147.675857] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 147.688932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.696760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.705602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.714180] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.720519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.728094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.735398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.745526] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 147.758918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.769560] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 147.777321] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.791705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.803420] Bluetooth: hci2: command 0x041b tx timeout [ 147.810669] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 147.832288] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 147.844498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.855053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.864083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.871859] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.878283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.886292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.898393] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 147.909412] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 147.921493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 147.934257] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 147.946155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.954374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.961923] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.962932] Bluetooth: hci3: command 0x041b tx timeout [ 147.968337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.980785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.988599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.999811] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 148.012440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.025583] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 148.033179] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 148.040630] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 148.049913] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.057442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.065710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.074159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.081041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.088575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.097009] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.108228] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.120330] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 148.123299] Bluetooth: hci4: command 0x041b tx timeout [ 148.139311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.148341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.156501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.169071] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.187269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 148.196190] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 148.202262] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.209594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.218936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.227045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.237713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.247669] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 148.258274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 148.271540] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 148.278195] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.284501] Bluetooth: hci5: command 0x041b tx timeout [ 148.289188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 148.304265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.311961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.320471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.329258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.337263] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.343696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.353828] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 148.361042] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 148.367851] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 148.376539] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 148.387653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 148.396439] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 148.405202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.412384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.419899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.427104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.435871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.443870] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.450208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.457180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.465116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.473671] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.483896] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 148.489963] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.498021] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 148.508406] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 148.517101] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 148.523460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.531582] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 148.542247] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 148.549750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.558662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.567625] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.574023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.580818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.588817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.596734] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.603165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.609980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.618128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.625971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.633793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.641479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.648802] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.655949] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.665919] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.681258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 148.705456] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.713764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.721576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.732428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.740610] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.747005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.754472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.765734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.775325] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 148.787103] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.797812] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 148.808351] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.819478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.827705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.835530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.844633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.852368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.860272] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.866678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.873824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.882022] device veth0_vlan entered promiscuous mode [ 148.894077] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.904122] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 148.919790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 148.928458] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 148.942407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.951012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.959283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.967313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.975355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.983069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.990567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.999172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.007248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.017907] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 149.027627] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 149.039332] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 149.049887] device veth1_vlan entered promiscuous mode [ 149.059762] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 149.066545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.074172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.081973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.090497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.100506] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 149.111494] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 149.121098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.129516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.138852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.146226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.155750] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 149.164906] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 149.173963] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 149.202425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.212168] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.220415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.228866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.237599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.247301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.259589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.267745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.278973] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 149.290385] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 149.299962] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 149.312199] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 149.320685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.329084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.336808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.344624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.352000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.358805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.368420] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 149.381572] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 149.391670] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 149.408088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.416480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.426152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.434268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.441753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.454410] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 149.460436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.472160] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 149.494032] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 149.501987] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 149.508681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.518040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.526855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.536899] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 149.547886] device veth0_macvtap entered promiscuous mode [ 149.556248] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 149.565097] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 149.573144] Bluetooth: hci0: command 0x040f tx timeout [ 149.584153] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 149.599291] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 149.610567] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 149.622500] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 149.629703] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.641981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.651260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.660091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.668301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.676321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.684386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.694683] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 149.700709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.711822] device veth1_macvtap entered promiscuous mode [ 149.718483] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 149.726322] Bluetooth: hci1: command 0x040f tx timeout [ 149.733299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.746007] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 149.753903] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 149.772238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.796376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.809227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.817003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.823923] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.835446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.854071] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 149.864338] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 149.883600] Bluetooth: hci2: command 0x040f tx timeout [ 149.891749] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 149.914486] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 149.922160] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 149.937979] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 149.947865] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 149.963742] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 149.971171] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 149.984935] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 149.997331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.007081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.015521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.024022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.036539] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 150.043693] Bluetooth: hci3: command 0x040f tx timeout [ 150.050391] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 150.057350] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 150.065860] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 150.076330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.083520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.096234] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 150.111530] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 150.119489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.130860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.140540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.148761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.156503] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.164824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.173937] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.180987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.190177] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 150.202103] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 150.209630] Bluetooth: hci4: command 0x040f tx timeout [ 150.223065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.231156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.239362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.247276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.255562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.264862] device veth0_vlan entered promiscuous mode [ 150.270683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.281393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.290414] device veth0_vlan entered promiscuous mode [ 150.304610] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 150.311726] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 150.319218] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 150.331175] device veth1_vlan entered promiscuous mode [ 150.337432] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 150.359153] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 150.366162] Bluetooth: hci5: command 0x040f tx timeout [ 150.370203] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 150.379037] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 150.395316] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 150.402086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.415247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.422707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.434067] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 150.445742] device veth1_vlan entered promiscuous mode [ 150.451999] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 150.465730] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 150.478346] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 150.487461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.496576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.504840] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.511858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.521134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.528965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.537112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.544862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.554128] device veth0_vlan entered promiscuous mode [ 150.561274] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 150.570469] device veth0_vlan entered promiscuous mode [ 150.580790] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 150.639153] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 150.651405] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 150.667615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.679100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.689440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.698710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.707059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.718300] device veth1_vlan entered promiscuous mode [ 150.725591] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 150.733023] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.749499] device veth1_vlan entered promiscuous mode [ 150.759675] device veth0_macvtap entered promiscuous mode [ 150.776934] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 150.796152] device veth1_macvtap entered promiscuous mode [ 150.822445] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 150.838943] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 150.847318] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 150.856139] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 150.865576] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 150.877831] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 150.888082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.896079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.904204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.911520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.920701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.927990] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.939929] device veth0_macvtap entered promiscuous mode [ 150.947698] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 150.963028] device veth1_macvtap entered promiscuous mode [ 150.969565] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 150.979470] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 150.990186] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 151.002380] device veth0_vlan entered promiscuous mode [ 151.013752] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 151.023857] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 151.038166] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 151.064335] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 151.082614] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 151.090388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.098137] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.108978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.117180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.127024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.134934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.142737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.153379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.163907] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 151.170822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.178945] device veth0_macvtap entered promiscuous mode [ 151.185974] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 151.193203] device veth1_vlan entered promiscuous mode [ 151.199775] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 151.207695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.217774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.226957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.237883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.248649] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 151.256054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.265752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.279057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.291160] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 151.299856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.307085] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.315719] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.323724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.331451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.340525] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.348877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.356968] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.365044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.375289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.385907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.395111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.405964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.417410] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 151.425048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.434204] device veth1_macvtap entered promiscuous mode [ 151.440663] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 151.455482] device veth0_macvtap entered promiscuous mode [ 151.462038] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 151.485305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.492617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.509582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.518413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.534401] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 151.561306] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 151.589858] device veth1_macvtap entered promiscuous mode [ 151.596627] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 151.621430] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 151.631484] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 151.643702] Bluetooth: hci0: command 0x0419 tx timeout [ 151.651841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 151.666903] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 151.674771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.686606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.692267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.702043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.703779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.720494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.731445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.742023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.752359] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 151.759534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.769538] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 151.782335] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 151.802693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 151.823841] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.831746] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.839661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.847829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.855970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.864008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.871632] Bluetooth: hci1: command 0x0419 tx timeout [ 151.875551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.889699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.899671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.910166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.919745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.929942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.940623] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 151.948159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.960592] device veth0_macvtap entered promiscuous mode [ 151.963726] Bluetooth: hci2: command 0x0419 tx timeout [ 151.976572] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 152.007913] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.020897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.033711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.054498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.064457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.076709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.086970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.096941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.107270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.116987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.123291] Bluetooth: hci3: command 0x0419 tx timeout [ 152.128251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.142195] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 152.149422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.157957] device veth1_macvtap entered promiscuous mode [ 152.172469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.187354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.198927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.215284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.224931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.234728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.244185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.254003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.263182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.273251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.283614] Bluetooth: hci4: command 0x0419 tx timeout [ 152.283747] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 152.296333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.304999] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 152.317925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 152.330571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.343525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.363823] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 152.364895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.413218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.413558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.434346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.444807] Bluetooth: hci5: command 0x0419 tx timeout [ 152.450192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.460236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.469564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.479373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.488556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.498636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.507826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.517603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.529091] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 152.536893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.548931] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.563657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.571582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.582570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.604603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.629555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.649599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.659637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.670830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.680436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.691262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.702023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.712911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 18:13:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r1, &(0x7f0000000400)="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", 0x200, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x114, 0x2710, 0xffffffffffffffff, &(0x7f0000000380)) [ 152.724069] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 152.730938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.775316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.786001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:13:11 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000240)={[{@fat=@dmask={'dmask'}}]}) [ 153.000904] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 153.029172] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 153.030290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 18:13:11 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x2000000000000011, 0x2, r0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r2, &(0x7f00000004c0)=ANY=[], 0x131) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r5) r6 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 153.101483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.197066] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 153.206675] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.255600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.263558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.272614] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 153.290003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.306439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.316990] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.351447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.505842] audit: type=1800 audit(1601748791.586:9): pid=7921 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.0" name="file1" dev="sda1" ino=15743 res=0 [ 153.527827] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready 18:13:11 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000005c0)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x20, &(0x7f0000000440)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 153.550728] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 153.583707] hrtimer: interrupt took 27507 ns [ 153.583916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.599956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.623742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.631946] audit: type=1400 audit(1601748791.706:10): avc: denied { sys_admin } for pid=7945 comm="syz-executor.2" capability=21 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1 [ 153.641474] IPVS: ftp: loaded support on port[0] = 21 [ 153.662835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.711635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.733648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 18:13:11 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x0, 0xf5f8647de6a03b4e}, 0x4) 18:13:12 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) 18:13:12 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 157.246056] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.253043] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.002098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.339074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.097070] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 165.129418] syz-executor.0 (7989) used greatest stack depth: 23376 bytes left [ 165.193217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.200353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.226411] Bluetooth: hci6: Frame reassembly failed (-84) [ 165.226549] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 165.252317] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 165.273339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.334833] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 165.338835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.380105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.411124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.427813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.468066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.485500] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.513077] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 165.520058] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 165.528330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.537342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.555817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.556073] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.570559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.593401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 167.242847] Bluetooth: hci6: command 0x1003 tx timeout [ 167.248499] Bluetooth: hci6: sending frame failed (-49) [ 169.323257] Bluetooth: hci6: command 0x1001 tx timeout [ 169.330347] Bluetooth: hci6: sending frame failed (-49) [ 171.402857] Bluetooth: hci6: command 0x1009 tx timeout 18:13:33 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') preadv(r1, &(0x7f00000017c0), 0x1a1, 0x0, 0x0) 18:13:33 executing program 2: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'iso8859-7'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 18:13:33 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000005c0)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x20, &(0x7f0000000440)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:13:33 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x2, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, &(0x7f0000000400)="f0", 0x0}, 0x20) 18:13:33 executing program 4: syz_mount_image$xfs(&(0x7f0000002580)='xfs\x00', &(0x7f00000025c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002980), 0x4, &(0x7f0000004a40)={[{@allocsize={'allocsize', 0x3d, [0x74]}}]}) 18:13:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:33 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 18:13:33 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x30, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_VLAN={0x6}]}, 0x30}}, 0x0) 18:13:33 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0x0, 0x0) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/46, 0x2e}], 0x1) 18:13:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:33 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000180)=""/189) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f00000003c0)=""/124, 0x7c}], 0x3}, 0x83}, {{&(0x7f0000000480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)=""/166, 0xa6}, {&(0x7f00000005c0)=""/85, 0x55}], 0x2, &(0x7f0000000680)=""/140, 0x8c}, 0x9}, {{&(0x7f0000000740)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000880)=""/82, 0x52}, {&(0x7f0000000900)=""/158, 0x9e}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/223, 0xdf}, {&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/96, 0x60}, {&(0x7f0000001c40)=""/70, 0x46}], 0x7, &(0x7f0000002d00)=""/38, 0x26}, 0x40}], 0x3, 0x20, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) fstat(r2, &(0x7f0000001e40)) [ 175.576330] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! 18:13:33 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0x0, 0x0) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/46, 0x2e}], 0x1) 18:13:33 executing program 3: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1008], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x6, &(0x7f00000003c0)=""/79, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xc0ffffff00000000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x32, @remote, 0x4e24, 0x4, 'fo\x00', 0x39, 0xfffffff7, 0x7a}, 0x2c) 18:13:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x2, 0x2, 0x2, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r2}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) dup2(r5, r0) 18:13:33 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8, 0x43fb, 0x0, 0x1}, 0x40) bpf$MAP_CREATE(0x4, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) 18:13:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x16) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x203f, 0x0) 18:13:33 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000180)=""/189) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f00000003c0)=""/124, 0x7c}], 0x3}, 0x83}, {{&(0x7f0000000480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)=""/166, 0xa6}, {&(0x7f00000005c0)=""/85, 0x55}], 0x2, &(0x7f0000000680)=""/140, 0x8c}, 0x9}, {{&(0x7f0000000740)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000880)=""/82, 0x52}, {&(0x7f0000000900)=""/158, 0x9e}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/223, 0xdf}, {&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/96, 0x60}, {&(0x7f0000001c40)=""/70, 0x46}], 0x7, &(0x7f0000002d00)=""/38, 0x26}, 0x40}], 0x3, 0x20, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) fstat(r2, &(0x7f0000001e40)) 18:13:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) [ 175.876432] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:13:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ab553fec", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x200000, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x3f00}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/53, 0x33ff0}], 0x1}}], 0x8000000000002fe, 0x0, 0x0) 18:13:34 executing program 1: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000203030a00000000000000000000000009000200007a8cb4020000000800010001"], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 18:13:34 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x8}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) write$FUSE_STATFS(r1, &(0x7f00000020c0)={0x60}, 0x12000) 18:13:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendfile(r1, r0, 0x0, 0x1000206) 18:13:34 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x103002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) r1 = memfd_create(&(0x7f00000001c0)='^\x92\x88jo\x98Y+\xe1k\xf2\xc6\x12\xd8\x98c:d\xc2q\xd9Xk\xbd\x80K\xd4W\xdf&\xdb\xc5\xbc\xb3\\\xf9\xd3\xce\xe3\x81\x97\xee\xff\xa9b\x02\xb5@\x82\x05\xa1O#\x89\xb0\xe1\xe0\xa0#\f\xfa-\xbe\xba\xb3\r\\\x99\xe1|3\xb1\x86\x96Zg\r|/\x9c\xf7@y\xf8c2\xe7\'\xec\ag\x94\x9f\xa0\xcf\xca\xfbz\xd0g8', 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000000)="01", 0x1}], 0x1, 0x81003, 0x0) r2 = dup2(r0, r0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000080)=""/208, 0xd0}], 0x2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x102002700) 18:13:34 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000180)=""/189) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f00000003c0)=""/124, 0x7c}], 0x3}, 0x83}, {{&(0x7f0000000480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)=""/166, 0xa6}, {&(0x7f00000005c0)=""/85, 0x55}], 0x2, &(0x7f0000000680)=""/140, 0x8c}, 0x9}, {{&(0x7f0000000740)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000880)=""/82, 0x52}, {&(0x7f0000000900)=""/158, 0x9e}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/223, 0xdf}, {&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/96, 0x60}, {&(0x7f0000001c40)=""/70, 0x46}], 0x7, &(0x7f0000002d00)=""/38, 0x26}, 0x40}], 0x3, 0x20, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) fstat(r2, &(0x7f0000001e40)) 18:13:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendfile(r1, r0, 0x0, 0x1000206) 18:13:34 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000180)=""/189) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f00000003c0)=""/124, 0x7c}], 0x3}, 0x83}, {{&(0x7f0000000480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)=""/166, 0xa6}, {&(0x7f00000005c0)=""/85, 0x55}], 0x2, &(0x7f0000000680)=""/140, 0x8c}, 0x9}, {{&(0x7f0000000740)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000880)=""/82, 0x52}, {&(0x7f0000000900)=""/158, 0x9e}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/223, 0xdf}, {&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/96, 0x60}, {&(0x7f0000001c40)=""/70, 0x46}], 0x7, &(0x7f0000002d00)=""/38, 0x26}, 0x40}], 0x3, 0x20, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) fstat(r2, &(0x7f0000001e40)) 18:13:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendfile(r1, r0, 0x0, 0x1000206) 18:13:34 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000180)=""/189) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f00000003c0)=""/124, 0x7c}], 0x3}, 0x83}, {{&(0x7f0000000480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)=""/166, 0xa6}, {&(0x7f00000005c0)=""/85, 0x55}], 0x2, &(0x7f0000000680)=""/140, 0x8c}, 0x9}, {{&(0x7f0000000740)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000880)=""/82, 0x52}, {&(0x7f0000000900)=""/158, 0x9e}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/223, 0xdf}, {&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/96, 0x60}, {&(0x7f0000001c40)=""/70, 0x46}], 0x7, &(0x7f0000002d00)=""/38, 0x26}, 0x40}], 0x3, 0x20, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) 18:13:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:34 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000003c0)=@raw=[@initr0, @exit], &(0x7f0000000440)='syzkaller\x00', 0x10001, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x78) 18:13:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000000)={0x5}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="40007100af126ab97400101404f013e324d918db21c0c9"], 0x40}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:13:35 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000180)=""/189) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f00000003c0)=""/124, 0x7c}], 0x3}, 0x83}, {{&(0x7f0000000480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)=""/166, 0xa6}, {&(0x7f00000005c0)=""/85, 0x55}], 0x2, &(0x7f0000000680)=""/140, 0x8c}, 0x9}, {{&(0x7f0000000740)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000880)=""/82, 0x52}, {&(0x7f0000000900)=""/158, 0x9e}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/223, 0xdf}, {&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/96, 0x60}, {&(0x7f0000001c40)=""/70, 0x46}], 0x7, &(0x7f0000002d00)=""/38, 0x26}, 0x40}], 0x3, 0x20, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) 18:13:35 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x51, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 18:13:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:35 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r1, r0, 0x0) 18:13:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}]}}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 176.971348] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 18:13:35 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000180)=""/189) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f00000003c0)=""/124, 0x7c}], 0x3}, 0x83}, {{&(0x7f0000000480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)=""/166, 0xa6}, {&(0x7f00000005c0)=""/85, 0x55}], 0x2, &(0x7f0000000680)=""/140, 0x8c}, 0x9}, {{&(0x7f0000000740)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000880)=""/82, 0x52}, {&(0x7f0000000900)=""/158, 0x9e}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/223, 0xdf}, {&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/96, 0x60}, {&(0x7f0000001c40)=""/70, 0x46}], 0x7, &(0x7f0000002d00)=""/38, 0x26}, 0x40}], 0x3, 0x20, 0x0) [ 177.096561] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:13:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r2, r0, 0x0, 0x7fffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x4000000) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) [ 177.179387] ================================================================================ [ 177.188161] UBSAN: Undefined behaviour in net/sched/cls_tcindex.c:238:29 [ 177.195012] shift exponent 511 is too large for 32-bit type 'int' [ 177.201251] CPU: 1 PID: 8237 Comm: syz-executor.1 Not tainted 4.19.149-syzkaller #0 [ 177.209041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.218395] Call Trace: [ 177.220993] dump_stack+0x22c/0x33e [ 177.224635] ubsan_epilogue+0xe/0x3a 18:13:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setfsgid(0xee01) [ 177.228375] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 177.234537] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 177.239394] tcindex_set_parms.cold+0x170/0x22f [ 177.244086] ? tcindex_classify+0x500/0x500 [ 177.248419] ? kasan_kmalloc+0x139/0x160 [ 177.252496] ? netlink_rcv_skb+0x160/0x440 [ 177.256741] ? netlink_unicast+0x4d5/0x690 [ 177.260982] ? netlink_sendmsg+0x717/0xcc0 [ 177.265225] ? sock_sendmsg+0xc7/0x130 [ 177.269130] ? validate_nla+0x2c6/0x970 [ 177.273122] tcindex_change+0x220/0x2f3 [ 177.277115] ? tcindex_set_parms+0x2260/0x2260 [ 177.281716] ? tcindex_lookup+0x98/0x420 [ 177.285791] ? tcindex_set_parms+0x2260/0x2260 [ 177.290385] tc_new_tfilter+0xb38/0x1570 [ 177.294486] ? tcf_chain_tp_remove+0x2e0/0x2e0 [ 177.299082] ? selinux_inode_copy_up+0x180/0x180 [ 177.303852] ? rcu_read_lock_sched_held+0x174/0x1e0 [ 177.308872] ? rtnetlink_rcv_msg+0x443/0xc10 [ 177.313291] ? ww_mutex_unlock+0x2f0/0x2f0 [ 177.317549] ? tcf_chain_tp_remove+0x2e0/0x2e0 [ 177.322139] rtnetlink_rcv_msg+0x498/0xc10 [ 177.326386] ? rtnl_get_link+0x270/0x270 [ 177.330453] ? memcpy+0x35/0x50 [ 177.333742] ? netdev_pick_tx+0x350/0x350 [ 177.337894] ? __copy_skb_header+0x414/0x500 [ 177.342316] ? kfree_skbmem+0x140/0x140 [ 177.346345] netlink_rcv_skb+0x160/0x440 [ 177.350421] ? rtnl_get_link+0x270/0x270 [ 177.354502] ? netlink_ack+0xae0/0xae0 [ 177.358412] netlink_unicast+0x4d5/0x690 [ 177.362495] ? netlink_sendskb+0x110/0x110 [ 177.366747] netlink_sendmsg+0x717/0xcc0 [ 177.370845] ? nlmsg_notify+0x1a0/0x1a0 [ 177.374825] ? __sock_recv_ts_and_drops+0x540/0x540 [ 177.379854] ? nlmsg_notify+0x1a0/0x1a0 [ 177.383839] sock_sendmsg+0xc7/0x130 [ 177.387563] ___sys_sendmsg+0x3b3/0x8f0 [ 177.391577] ? copy_msghdr_from_user+0x440/0x440 [ 177.396340] ? find_held_lock+0x2d/0x110 [ 177.400410] ? __fget+0x386/0x570 [ 177.403876] ? lock_downgrade+0x750/0x750 [ 177.408033] ? check_preemption_disabled+0x41/0x2b0 [ 177.413063] ? __fget+0x3ad/0x570 [ 177.416526] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 177.420769] ? mark_held_locks+0xf0/0xf0 [ 177.424838] ? do_futex+0x163/0x1c60 [ 177.428563] ? __fget_light+0x1d1/0x230 [ 177.432547] __sys_sendmmsg+0x195/0x470 [ 177.436535] ? __ia32_sys_sendmsg+0x220/0x220 [ 177.441036] ? lock_downgrade+0x750/0x750 [ 177.445198] ? __might_fault+0x192/0x1d0 [ 177.449268] ? _copy_to_user+0xb8/0x100 [ 177.453253] ? put_timespec64+0xcb/0x120 [ 177.457319] ? jiffies_to_timeval+0xb0/0xb0 [ 177.461646] ? ktime_get_ts64+0x2d3/0x420 [ 177.465807] ? __se_sys_clock_gettime+0x15a/0x250 [ 177.470658] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 177.476032] __x64_sys_sendmmsg+0x99/0x100 [ 177.480273] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 177.484863] do_syscall_64+0xf9/0x670 [ 177.488683] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 177.493875] RIP: 0033:0x45de89 [ 177.497074] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 177.516092] RSP: 002b:00007f723d863c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 177.523803] RAX: ffffffffffffffda RBX: 0000000000027f40 RCX: 000000000045de89 18:13:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:35 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0xaa002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000280)=0x1000) r1 = openat$audio1(0xffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0) write$binfmt_elf32(r0, 0x0, 0x20000318) [ 177.531099] RDX: 04924924924926d3 RSI: 0000000020000200 RDI: 0000000000000008 [ 177.538372] RBP: 000000000118bf68 R08: 0000000000000000 R09: 0000000000000000 [ 177.545646] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 177.552917] R13: 00007ffe830699af R14: 00007f723d8649c0 R15: 000000000118bf2c [ 177.560203] ================================================================================ 18:13:35 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000180)=""/189) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f00000003c0)=""/124, 0x7c}], 0x3}, 0x83}, {{&(0x7f0000000480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)=""/166, 0xa6}, {&(0x7f00000005c0)=""/85, 0x55}], 0x2, &(0x7f0000000680)=""/140, 0x8c}, 0x9}, {{&(0x7f0000000740)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000880)=""/82, 0x52}, {&(0x7f0000000900)=""/158, 0x9e}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/223, 0xdf}, {&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/96, 0x60}, {&(0x7f0000001c40)=""/70, 0x46}], 0x7, &(0x7f0000002d00)=""/38, 0x26}, 0x40}], 0x3, 0x20, 0x0) 18:13:35 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000180)=""/189) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 18:13:35 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x275a, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)="8fe763d5b96c9f139d68a7c05b666c01ac91cc15eb4af97b3eac1f38215c32ebfce68e9af231d8adb8b98ab9fe11dd656a180a5871c67b993176a5b5bfe311fa29f3ee2dc13c6d8f45441fd4f3f53d91b9a7db233d5fec3e3b6c5cb507113934a74e34a187215879b266ac736eaddb76101fd94badecc8650ee9b033ce41bb8a8484377c63156dd5f558453fa357cb3bddb91f21c68abdb45c6f5a3bae893ebd35ac9c576e4f0c39477e4aaafe5d9193067d9d89b24abaf08b669b76279dcc599e582596bf2f903059f89023bd0e3da5395a248e8efeb7f25d64e7019037dd2ebf3e016f7441402c0d7ff7da3fde20d8d6c1ed77393038fce41a8429b8758acab9a9849c154a66bd872975bc60edd679b550f1c6de293a7c2c55b39eb77c346d437fde691a11cdd97272375e207699e7c03dd7dfce729da1e6387e2a114db537ff124f3e68dd4cdb4d2c2cfca2ea0d79d861ca802d9605f844f36142564dad03da8e5889dde77d8d81b65899800115ecba7ba03a101dad35ed9fed67ca8e7b446ec62fc0d0cf3bafef811e235043873e4123f07313d628cb814c57058c14230f1abaaf3d7b1bce35a35097ebc2c84d4fee660cf2170ed12c7b3c6ee027d6c0344fe902e40d921007161ea6fcc786bd3d16b7e9daafcafb313117d08447042482807161d458a78d5e17f30d65dd4aea1a9a1389c4dc093be9c76edac6d3c0f4d36330af2e489aba705865c002319df6706dc7f04fc1b66b23bb1b0bca17ddc0bf3af617c938bf7c78bf534cf0807ce8cb1111d3a29f2b8b6893d8d1acffcca3aa425da19510708385b0e49c99685e45ed0d8c2ce33fa6410ac5897c6cb85ec79c603b3683eccda9a261ebb3bda9c34f5a94a7a344d3d663bc3aa0ee7af6b3ed12d34815936be9cb65ee7858eb79a7f4e65c781ea1864b686d259437de07623db0312f51b2af81666d0fa1204bfacaa6ddb7f6deed9c67590aa2ff059efcfbfdf49e230893137087849327afdd8d034dd1542834b0d1d6f81ef1c651743d831042c24e334def1c9ff08a765673db1240013ba092285f155beace722ebcef1b0820c6366bf813e94382681119d9236454fa5100ba6178038b45d6f3dce89ffdf794c9925eb07f52e6c51c4c3fc9d95482f91a5e85a6c8efb2dadda654dd285eaba809138148e4df5798e78ab3108b1fa4796c2fd5dbc6486d679f340e550ff228fe969128412ea563c9333a46dc598ed77ded520214ad2749d6f815896a39de3192d97311bd56a1b0d62e71ff0ff0909aae50aa28e405088bb19e6da269392fdff3f9acb7877ed327b69a5291d9c814db1612fbb07f48b57aaa6071e37798a8cd806b1080bcd41af5dac1fa9985a012e8b8703f5d19b1c1a57523808f7a6c0947bb9784e8047f0d85e79f0feaa2b7c5c15266b2c1472418e8213ce17ce388fe225bbcebde0e432d4bfe3a665df1853c6bf686d2288206e516bebed7f240b0e499a3e454e5c7f4880ba2647cefa36e5d3b0e4bb36d0d7b7a8317ddecd086cefdd6036a7b33dd4d554ec9cdeb0b3127137845bc93d75d511fc91e07c25086d17ff308a91c5d1e7680b8c5cd60363ff3066395c687e1eaf79ac91fe53f055dba1a4d1273051b3bd32aa0092945060ae721a942a3ad16b0e8e10a43aeff1efedc943bdc0cf1403855888e3b953a070bc77e1cec7f258ff72dc0dded4017bf493790b03b51487f9c4cf258db96142e8d3be80362270f54539337d62f7bb0748f398d24bb0085d2c9037c2793ed7b6c092260f0a334b6256f50e87bab7cd6eef104f576f281b76471c88a85f8c25d2d77ad2edcda529ad87b759d38edfe3f045aed8331091a8f663cf38d69a9e66eb58043fdb5edcb1804b69eeca6fc69b5f12d267fa0fd5c7f005d2a1a6b0d8e3460ac980ffe12a4fda392f2a8401d3bfca7fa4d2f333f7c278beb4794a23230209b74eb257a4508637ed62102c68fb9a948d63cea9b2d282438603cdd5fe56c2409dfb23d136871f8abe32a86047daf7e222e6892cab35524f5fa904079f1ce6110a91e800da70ce1cc0680c2ef2d6fa49016feef7db27ea866be9d9189112886f418d80f0d9e8e545c2dc496c850f0207f676b6c7adcd638cdabf4430e04a17bbf6520d33b7566286ad8d18e2dc50090e4a6380253e950ec3da442779f16fd0eb0b705df0b88ee3236ad264335e669a5d4c6207baf47ead257ad956b77f9e898c5a46cd53ba14978a917fe98038d2a75e9218a8bb94c71b41d83c323d4460c5457a9f2e8d206b01dc72475133ba8ef0b17e8aabb6abafe820be7c03da77a8398ee2d37b826ba12a5aa92d05d53610a22614b5984c85f99ed2b725f2da42a0ca94db73478f8e7e09631b3dbbff53cd23daad7dc89407ee3a4d5f839794fd268bbaf4a42e1d886462d82471a595f81b41fe8e1291188b7c46a0042873988bd8da5e3831d618543395f925e5867b16e512de4ae32262180a3a98f3057649ff296f62a668914af1d8aece9b68cfe87bc04c07a9bf95bb04766a661bf605fc9c3ff089bac2454eed30fe0e36a642064df2dbc57e847b61b5dd06ece82a07e1eccfa97320fae23ddd7573f25eae56b9bf3a95c28fe3291913b271b41ac93252cf008977f0b817a2eed0297236e6c3ecf511dfa455c9f68da54be158e90affb0bfe051c82c4178695bc55d6fd8184f92ba6ba88f2dbb069c2404a78e29d203a0739d0bfa2a4490e7294789da4ca5f06290ee0fed77337d4765466e1f35ccd46cd837132e943e6db9ce47c8636c7a179978ace10b6fd7a762154add218cadcbc8c90a15094d306a456911b424121454dc84266d67b206db88fae6771c0cf3bb84d1e935b0d97eb468e92784f8dbab65ce24e70b92593f953c704427fe779f606f0551e1569981c0702bd2933ade182508d3868901e999ca1076d7c769e81fcee328c6621d530f75454a9b12d9b931868cf0fec7aff9e7c2800b40f24ea1a2ef3703c6e69c248d26d06f76491f3133ac1ea2d80ed3db70dd5647fda403c66e50b55cd5fceb14b3cabf1c986f5c3b5d3e5e175a4dae2a33fc7ce808eac8493ecfcf2133e7f2d5fb1eb0b0cb9f390e03623c732afb9e12c2f025be449952167ed334d366237a7ca5b09db26722d05696f09efbd8f881b94fe51969a67876ef70549f41b23bd3dedb6a13033fa5864e8272f1d96b2029ced58cf03ef7e47b4a04ee977d4ebb38db098659f6f4499259b8f31f51f5b3d32ea212cc571374e48c733062e4a0a20036874d1d90e32c5c701d35687a57406f693a9a4bec7272976341a0a0d1bde4b133cfa21e541cd0ed4f6e8ad5d84ba4bcf085619d4f853405ef3f7b85b650617e088b22b468aa0f8db7719b5af75fce804bca383b56d9ec55154730385ea351b99620cfca9735fbdaba1874aeb8289b7b6f9025709c13755786333f1b1dc0dd7ea91c61d9e26c0b49769fe87ef9c70677e5ff142273228fa9f24056213d0c92ec563a75ef05e7c6c038da6bc846b31a8944732365d993c01beb5647a08f4da124c331b940eec716508f2f031efaea31699ee5779e27bacdcf684232f69ed5555a7e5fbcb637b8d231114a678f857d2c227c4840eba065137f5f3e25cb46651458019c5bd1141f86e15ea41cb90fd5bc01e7ede962687e04a8fa3be5fe628f509dafc380036da09684bbb82e34c74f1596b81f48acf4cb38dde10ae35cbf0dfc7e3bb4fe4ac4d48e1fb154fda07cb1f2baad9dc7a30890a8772d17d0a0ace8a668020c3a640dfa04ca7d3a5003ced7a54b43604136a25eafd3fa78fb9d752a45fe7ae4d5701baefd3e891cc03019d560d7566b9c7d1ae4aabcfc55c6fc45e0532af50cdf83a8bc41b0dd9e6ef9093bd06e5d2380cdeca9eb8d3e999fb8ae439e3f4d0f22300e38fffb6919a46f0accebcb58cfae9159d98f5f8f5eee3442e2ed1764ad962859b6e3dbc2ca7ea6118a73782d7e757b0ac11ae8bff47f3af5a8f7a8c83ce5f352c3456a164fdd11944ee6cd97f6b5c5778c966651b3336e7b4ba99aed41f0fc920df4432b7d2dcf6992a91f633cc3cefb522be099aa5f9b738287f0904e794f913e5d8296d41a354272e12b204e71455e49b90a92f1b7d2411ec22941fabb688624ed189462804af7fd581fa2ac5826d68081681c2ddb21c1a398e90af57e9553734bef42854ed3d929d74683dc8215055fb4dc6e049276907b536952792005271a72522e87a0ce5c0470aee52d38365d851167080dd6bdac5af5768f2cfe1803d8849595a34847e149befdcf628fce537380762ea834b22fe83b84e7ca9980fd551305ef77cdd7fb495ad31678d0095ad950d61c28fbbba2a476c9a2936d7b52c19153c31bccc5ee00324c1bfba2bf9722df20c05df05c6f3563b9ff5147948c9ded258554c23e58aca5387054e018a76fcd5c956e63bca4ceed276f2ff30b87cd833d2b0129d518afa4f438e12a19a4a4bdbcb0cc9f609a66dae2c77c1f9564e52b17aebfaac7a80d10aa173b5d13d68acde7547a50f2ca588b07d322afc5c76d154d203a52a270d74a40f8539273508c512cea35d20dd1c59802fb721756e9837f66215ba50f388335f1072a2c3895df919f79ff385da6f27c72bb2f814620524f9e915811a59541a648d6c0539076a3bc7f0e8130bd62273839e294d29b6d40b21982eed84e9780bf81f07437a475a8021f5bb66403c85e745fdfe5fc78c5ac9a2e747b21f4f78312c3fd23514a153e4ecffd52d46b198c3f7f4b4e3ba0f8871e483a64cd0b194b00bc79ade2916e1bed6c746399151135c419e6067d39cf8b3b90270404754718371a95e49afdcc92b63331aa3c1f8e10487d312ee48cecfa1ed3fc8dde33af813472e97d419721fb5b8ccae21e160351980dec0827ff11daddf9547239ca857377fe44a6e1ab17e34daee77fd5d624f8c7ea8f619333b1be1ee7f0f47b2480b2f0c8517cb77590929e1257d93df62dfabc77fbc282b26d72f835f20a4a304b0f021f2f134657d6b1ca5bcc7c89d3493e2aa13e5565a713b282fef45d6519d7496dbc0664b9d7fb222d101e256568b9eafa120b20796ecee80a30970c74c01838fd697d182c59fde703a23c5b38ce5fed0991f0eb4b551299d3d47335aac5a4c889fed1cb0c9f2478fd4ce07f16ece354dff887133eefe68111dcd4324b845e7c08da82b61fd813206157b912bfb719bdd1d9bdf35fedcf6df6895efe702a2fb05c6478d3de7bafcc1adf31fcea3d79033b33c42101ce250f10d0e19d1066c2b89a0852cc10df6eef376357b83ede8972aae71e37a269789b2078a01144fe75d9fd00cbb98b37e87f6acfb49055159b5ba5b84471122c6abbaa3cc202a0d5f34ea4c3a348d6694d3b5a4ca052fd1498d606e531ded91dc4ebfefa962f2efaba938f22f4d0d8c63374df6d24d66b36ef7f5c693e2dbb936b7a984e6bb3249dfbefec013c37591f3e6077843fdf5a2bb284bbb8890e6e5cbc4d85a4fa4df0de1ff625e062448bb208cf18e265a3e31cececf26c83b46679dfd692802bc8bdbe6d92e6d06cbec7a497f8906d83484603d2d2cbe8c08f3ee574bd4ee5c2eb17b74a2c81df0d0f3d752c0e3de3dc335989b65f3f97b2b484c702ce045543fef8038889cfb4d1b6b27fda126b85447aa231ac96c2701ed005e06a9a8f5e776c3d75f6b08d30cba9357f0c3ede5212ec20c30ece572e2fb04668220743675d82d3f496cfce9f2586083417b638752ee028a4378b4c90cbdb47f8341b24beceea1d829800d44b8c2379f1011", 0x1000}, {&(0x7f0000000140)="a6bf543f3727e1e8498148a74426cd0619ffaebf9d037ade5e5a34c35f98cf02799a94298a857d7c3cee9b69226a6799e7a0fa52ac493dacbcf66350e86a9422184214a0c3aa76435d7fbaf648bce0d4fcacdca565a9908c13d9c61ac0cf6a0a5913167995", 0x65}, {&(0x7f0000002400)="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", 0x21c}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000001280), 0x4) 18:13:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) [ 177.810373] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:13:36 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000180)=""/189) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 18:13:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}]}}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:13:36 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) [ 177.998780] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.067810] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program [ 178.112439] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program 18:13:36 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r0 = creat(&(0x7f0000000380)='./file1\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r2 = memfd_create(&(0x7f00000003c0)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xfbmZ\x84~\x9e\xf6\xb7\xc0\x8ac\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vn\xe0\x8d\x8a\xf2g\xeb\xa2q\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xab\xecoB\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4{\xdd~\xe5\xbf\xc0]l\xf7\x00'/151, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) 18:13:36 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000180)=""/189) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 18:13:36 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0xaa002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000280)=0x1000) r1 = openat$audio1(0xffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0) write$binfmt_elf32(r0, 0x0, 0x20000318) 18:13:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}]}}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:13:36 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:36 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000180)=""/189) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) [ 178.409847] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.430600] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program 18:13:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:36 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}]}}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:13:36 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 18:13:36 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) [ 178.615552] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program [ 178.638615] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.698985] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program 18:13:37 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000880)=ANY=[@ANYBLOB='S'], 0x191) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)='bond0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c480200020000de010300000000e4ff064b3f013a00fb48a16700008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900010000000b0000db000004da3600"}, 0x80, 0x0}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x457d10) 18:13:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) 18:13:37 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 18:13:37 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}]}}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:13:37 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) [ 179.358525] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program [ 179.390202] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:13:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}]}}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:13:37 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 18:13:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r0, 0x0, 0x0) 18:13:37 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x5c1, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:13:37 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) [ 179.558985] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 179.615315] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program 18:13:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES16, @ANYRES64, @ANYBLOB="34f68de25c0d0a87ea4ffd17092e4087cbcd6b9fa7aeecc41559362232e645187f14869847d71cc476fb73c67b6c4bc3741b3ed8e0ed7e8d0b45fcdeaaa405aeb5b315644d32ea5a2ada9fc603fb668dfe1e3389908eabfbd43faaaae25663d724f200160e864e0100000000000000438a47815f9b58e2161c4fadc758daab16cd6000000000005638475a1aba88017518cc7ff68302e387f2ca25aaf58b695d4a8332e885d587d7d5bfdd2e7c90e67459849e496fb39860a382c35a9ef18ea449e1e0a809f61dec62d003d1b5fa9d8be01b7934f284def4b5ef61ece43b5a895c4e2efa417a52a6bd7af879f0a9ad920a0d52008ac0a62e0000000000000000fd36dda11fbdadc7ac488a63f0b80777c1e32f9651f6737e18d40c52c10cd017bbb13f8ebad86756ff150d5a271a1d3ee776de692671c7a413a8a860bacac10ee9358ae6fb5bf6e1752b659887f66c5702524e4800f76ff3ff1547c31ae62eb108c6eb45c3e179ca3e5a831b716a7f79b4fd234ace3c6c107a6148eee54260f51357d0bd71fc4618147625a4978469849e221be9a9055491ccb95c1fe4ee050d52dd189acaae91ca6e47ef01997b6b6d512380e5c8f386fa86c833bdde91eb251edc73766c2279579df39720f7f7799b50617e9f5d56b084e5c8bcb98cfcf389c529a456018fffac718d4cbbb5b74dcaf177a639c0cfdeaef6419f731e60"], 0x5}, 0x1, 0x0, 0x0, 0xc040}, 0x8880) dup(r1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x442d}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5, 0x9}, @IFLA_MACSEC_ES={0x5}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) 18:13:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}]}}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:13:37 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) [ 179.710918] kvm [8406]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 179.762536] kvm [8406]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000060 [ 179.779398] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 179.791638] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program [ 179.800382] kvm [8406]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000001a 18:13:37 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 18:13:37 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) [ 179.821001] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 179.858860] kvm [8406]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000001a 18:13:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}]}}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 179.899482] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 179.924814] kvm [8406]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000001a 18:13:38 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 18:13:38 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) [ 179.960525] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program [ 179.978123] kvm [8406]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000001a [ 179.995980] kvm [8406]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000001a [ 180.021145] kvm [8406]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000057 [ 180.041987] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.047581] kvm [8406]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000057 [ 180.055696] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program [ 180.116632] kvm [8406]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000057 18:13:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x2, 0xffffff}]}}, &(0x7f0000004600)=""/206, 0x26, 0xce, 0x8}, 0x20) 18:13:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES16, @ANYRES64, @ANYBLOB="34f68de25c0d0a87ea4ffd17092e4087cbcd6b9fa7aeecc41559362232e645187f14869847d71cc476fb73c67b6c4bc3741b3ed8e0ed7e8d0b45fcdeaaa405aeb5b315644d32ea5a2ada9fc603fb668dfe1e3389908eabfbd43faaaae25663d724f200160e864e0100000000000000438a47815f9b58e2161c4fadc758daab16cd6000000000005638475a1aba88017518cc7ff68302e387f2ca25aaf58b695d4a8332e885d587d7d5bfdd2e7c90e67459849e496fb39860a382c35a9ef18ea449e1e0a809f61dec62d003d1b5fa9d8be01b7934f284def4b5ef61ece43b5a895c4e2efa417a52a6bd7af879f0a9ad920a0d52008ac0a62e0000000000000000fd36dda11fbdadc7ac488a63f0b80777c1e32f9651f6737e18d40c52c10cd017bbb13f8ebad86756ff150d5a271a1d3ee776de692671c7a413a8a860bacac10ee9358ae6fb5bf6e1752b659887f66c5702524e4800f76ff3ff1547c31ae62eb108c6eb45c3e179ca3e5a831b716a7f79b4fd234ace3c6c107a6148eee54260f51357d0bd71fc4618147625a4978469849e221be9a9055491ccb95c1fe4ee050d52dd189acaae91ca6e47ef01997b6b6d512380e5c8f386fa86c833bdde91eb251edc73766c2279579df39720f7f7799b50617e9f5d56b084e5c8bcb98cfcf389c529a456018fffac718d4cbbb5b74dcaf177a639c0cfdeaef6419f731e60"], 0x5}, 0x1, 0x0, 0x0, 0xc040}, 0x8880) dup(r1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x442d}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5, 0x9}, @IFLA_MACSEC_ES={0x5}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) 18:13:38 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:38 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 18:13:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}]}}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 180.226179] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.267944] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 18:13:38 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:38 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 18:13:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}]}}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:13:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:38 executing program 3: mq_open(&(0x7f0000000040)='#\x00', 0x40, 0x0, &(0x7f0000000080)={0x33, 0xfffffffffffffffc, 0x3f, 0x1}) 18:13:38 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:38 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000580)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) 18:13:38 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 18:13:38 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:38 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}]}}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:13:38 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 18:13:38 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:38 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a6788a341cca555fedbbb04304123cdac302132fe0231368b2264f9c504c9f1f65515b0e1a38d8665522be18bd10a48b043ccc426ed0746d25dfd88d06d7535f7866907dc6751dfb265a0e3ccae658700010000000000007578f4c35235138d5521f9453559c35da860e8efbc6b2b2a3e3173d5661cfeec79c66c54c370ddf3d7f71b44c4a99ebbd14c90a107104e9df479"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) mq_unlink(0x0) 18:13:38 executing program 2: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 18:13:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @pic={0xb8, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 18:13:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}]}}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:13:38 executing program 2: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 18:13:38 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:38 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/config\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x700, 0x0) 18:13:38 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:38 executing program 2: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 18:13:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/config\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x700, 0x0) 18:13:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}]}}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:13:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:39 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000002c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x7, 0x4403e871, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 18:13:39 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 18:13:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/config\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x700, 0x0) 18:13:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}]}}]}, 0x3c}}, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:13:39 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:39 executing program 4: futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:39 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 18:13:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}]}}]}, 0x3c}}, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:13:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:39 executing program 4: futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}]}, 0x34}}, 0x0) 18:13:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000002c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x7, 0x4403e871, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 18:13:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 18:13:40 executing program 4: futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}]}}]}, 0x3c}}, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:13:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2, 0x3, 0x100000001) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x79) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r2, &(0x7f0000000600)="06c5", 0x2, 0x8002, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 182.498478] nla_parse: 6 callbacks suppressed [ 182.498488] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:13:40 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000d3c000/0x2000)=nil}) 18:13:40 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:40 executing program 2: syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 18:13:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:13:40 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) [ 182.717700] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:13:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000002c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x7, 0x4403e871, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 18:13:41 executing program 2: syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 18:13:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:41 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:13:41 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x2c, r3, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x2c}}, 0x0) [ 183.753458] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 183.785387] futex_atomic_op_inuser: 12 callbacks suppressed [ 183.785397] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program 18:13:41 executing program 0: unshare(0x600) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x3c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000400014004000000", 0x58}], 0x1) 18:13:41 executing program 2: syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 18:13:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:13:42 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0xaffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, 0x0) [ 183.953794] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:13:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000002c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x7, 0x4403e871, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 18:13:42 executing program 0: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x21890}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r0 = socket$kcm(0xa, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f00000001c0)="f1998f012ac32d14f552a50a6732356240e868c5f8033990eaa729f94ba1fed94c206f2dae554fb90448", 0x2a}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000140)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x35a, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xfffffdef) 18:13:42 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0xaffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:42 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}]}}]}, 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:13:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, 0x0) 18:13:42 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0xaffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) [ 184.668076] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:13:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, 0x0) 18:13:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:42 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}]}}]}, 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:13:42 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb54600004000000000000fb982c1e9400e693146cea484a415c76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227ffff000000000000f07a72c2918451ebdcf4cef809606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1083a30369d8b8588d72ec29c48b45ef4adf634be763289d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468972089b302d7bf6023cdcedb5e0125ebbcebdde510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719230e60b0eea24492a660580800dbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa504cea9542e62d7f69667e3ddcd567b3aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532af9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b3014dca11de6a5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326efa31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9f476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc22941330000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b6c4a000000002b435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad897ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2633398631c7771429d120000de3241bf4a00fcffffffffffffffe09fec2271fe01589646efd1cf870cd7bb2366fde4a59429738fcc917a57f94f6c453cea793cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c108285e71b5565b1768fb4021428ce970275d5bc8955778567bc79e13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ecbbc55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d1d4b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b6eae30bd75c9e666a054de2f4d92d6bd72ee2c9fdc75aaaf1e76003b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3e90e5c708ce65cd6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a745226973385833c0313fa07cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e089b862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27de8f2a4ebb04b0c485b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e600263d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f9a3296f739bc1863153d3b41019645466ac96e0d4b3bb49faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df74cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868c6da7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c000000000000000000000000009bff5348dd9639a9f34b5f92b7646000e3053358f55cb9f97c269eaf7327c32ab116a34be5bdb568f3a31d7722ad5c74d62f946b23dbfb2f718a171d498d748c4974a6297f6806b6daec2da13e65f39d8e1178fa23739ccf8e64c84f7ac413394218b1350b314ccea485891bb72d66279757733aaf335073f0e376ece7cd7a3efbf14dd8326ec72849e390dcfba6d569bcad71a04987fb7d"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="e3d0e9020000f8000000001900d3", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 184.896049] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.986805] [ 184.991001] ********************************************************** [ 185.010368] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 185.027571] ** ** [ 185.050696] ** trace_printk() being used. Allocating extra memory. ** [ 185.071932] ** ** [ 185.087456] ** This means that this is a DEBUG kernel and it is ** [ 185.102572] ** unsafe for production use. ** [ 185.110337] ** ** [ 185.130683] ** If you see this message and you are not debugging ** [ 185.145621] ** the kernel, report this immediately to your vendor! ** [ 185.162007] ** ** [ 185.177451] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 185.192360] ********************************************************** 18:13:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000002c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x7, 0x4403e871, 0xffffffffffffffff, 0x0) 18:13:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000800)}) 18:13:43 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:43 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}]}}]}, 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:13:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0xb, 0x0, &(0x7f0000000400)) 18:13:43 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000800)}) [ 185.616481] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:13:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x5, 0x0, 0x1000000, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) 18:13:43 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}]}}]}, 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:13:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000800)}) [ 185.771972] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program 18:13:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000002c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x7, 0x4403e871, 0xffffffffffffffff, 0x0) 18:13:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 18:13:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x70, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x1005, &(0x7f0000002340)=""/4101}, &(0x7f00000002c0)="94e5febe5aff", 0x0, 0x0, 0x0, 0x0, 0x0}) 18:13:44 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) 18:13:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}]}}]}, 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:13:44 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0}) 18:13:44 executing program 4: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xaffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x1}], "", [[]]}, 0x158) [ 186.356785] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program 18:13:44 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0}) 18:13:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(