402c3b61b2876b2af9d422e4c6e3f0b947a9e480297998d8cc0cd616fa52dcb1d5075434e6da975fe3e15e12712f0c2c3d3afbb9fc5b5e943844ee520ab35e48190f27cbc6c8688b9cc62b8f7da2e2f2ccd15aca0710d9e3f2720ae228d", 0x92}, {&(0x7f0000000340)="a41df610975411753b5caca37e04baaa4c7815529e03dc0ed32281a49e79c2b18211b95a026cf44164b07dda119119516954c6aa002ceed4d8c21437a28a61ef7fc3db47e04e0f8c7d308d24d66ef3eda076da1ad5efcf0dff22771ec110e0fbd0746febb21a207a8239", 0x6a}, {&(0x7f00000003c0)="a97c6f2056bf62a3999bfb074136ee5e55b69ea97a7da2a53de5a9fcb9b731163dbae13eb7f8645e76e4bea4ff4422b28a06e90377cfb270c867441fac5571e16b8566fc27c73a9e1897f7c6b5109a52b8992b9c2015d60ec6cb9b1787097ca1456b584580e0cd68f283b30b5af35ccbf5d585917a4a3bc2003d98b328be813d4b54cdaefaa205333601fa94307f5a0550d197a965018a594952aa8bf3469b41f5f5c7349d3a51cfa9a2fb2d465dede8933a25d6821dba295b3d1da1563fa50b25aab3ad2c73237290ae81191dbcdb618d936b184e248f81bdc5700dc76cd2c45555cb6655ee2b87700901e6d526", 0xee}, {&(0x7f00000004c0)="9e146c22c01169bd335f50437ca3d89ea38477e8c8d0c515f655887a20f029afecfa6a3b81ff23e08a11a95ef4e3e365b2b3c0ba1fcfa84d9a53874be79ada8430daa8e804bfe71b902cbbce7615d268", 0x50}, {&(0x7f0000000540)="1319cbeb9ce969985a19eb8b61efe9ba7ad300393cae2ff4597e68276e100cc802f142a10e5aaa35c4449d034c359bce98186534cfd372b1f5e12da8b5e24296d2747c7b9877c2d46bbd", 0x4a}], 0x5, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70, 0x20000005}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000880)="755e1446cc0681d1e81b1c9a4f26963142ca3db9575a06055432824300564f31e6822b12b563d4bd95966d445531779c01001db7da1883146fbd08cd71d1508202daafb729904e32ec3825b2645640bafecce50c166ca347ab089507d10f407adc769ad438b5712b48dcbede0dba8746a4968087b75664edf65adbbd2e7353c6fc", 0x81}], 0x1, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000940)="ba6585e544e2dc966e2add9e1b85b4eb7e59a0b4e413ddac534d5dd0a6333c816c4bc8765fee81ed9a81690431346557c61d44549b7ef7b33c046a3965b32fe88820cde4e3adab52ea2a08b5362ebe5535482f1c15abf6deac632c1ae7da2762c6824e48dfeeca88e0d8582bef4b06f39724ae352f2295128abb8060383349d26daa3b9eba51636d5dc076f340c74efd520954b55aec3b7077c2e0b5c015ae19a473c0673ff082c32a40905aebc310bc8765c7897026b9c0edaa08d80ea6e2ddf310946c98e21679d3cbd6c5d7c837dc3f098ac4e2db619ee6c338d4b881023c4bc1790057", 0xe5}, {&(0x7f0000000a40)="14650f2b427192ce74a6154ce41bda3ea24b87d1df0b98d65c5886e3926c454846e90ae9fc3e7ce9f8d33170812e4b75f0881569000a6e6f665259d9f19343d206d1b6853fb74005845d8e6a84b999b7b2de1f6c5067d034f0de8379236ef1a8a81d3212ef47f6c6bbfd9c487c5a6f7fbea8da0702268550bb4b14ab02fb4a33a12951c62ccc265e542e1c722fb501417543c421380191436b83cca979d704a621f82b5e0a8f411e648f8dabb15913cff5d4ab50e3e702f4273be9ffb1a46720438c5ae94579772fdd940a5d873cdd1480143ae699abbef91aeeeb4722566a1652", 0xe1}, {&(0x7f0000000b40)}], 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00"/20, @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0x90}}, {{&(0x7f0000000e40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000ec0)="39064469635ea85625cfa2c1eccf607fa7ba823e5c5ca1eb341873d4333b6ccd72fb85daea07c0761c44a16db975a36cc31378b5160e45d073e80054c03f106bd968ec5fe160ca3dc71df6ecdda63ff856e23e1eabbd497fdfe425fe9db79ff3b416c9e72d7e57c4923df1edb1980e3584c2deb5a8b3df0ab1c90db3dfbfd8b6ca0d764781cbdde1d8720ccc926151673924b520301c666c9c4bae2291b74dba", 0xa0}, {&(0x7f0000000f80)="f880b6809091bd98f8eb2a592bdf3608e5c6f6f239ae52209128e6ec46ab91bd3b3ee0f284dad00675cdd1fb3e3cfb8f1489b03925bc712bfa252f08e61421102f60b91c5502e8bb54dcdfe1eb161fca4a4eadb54309cee62b6b1198ea1dab0a959f3ffbcecb995b3173812193169c5edcfaa6ef265314a774d53b041222df4f4854", 0x82}, {&(0x7f0000001040)="1beb547fcd9a6441b7b8e5d2f01d2ac20f6bdb327d4cec88872050ce0e86848b2f285a27", 0x24}], 0x3, &(0x7f0000001100)=[@rights={{0x20, 0x1, 0x1, [r9, r10, 0xffffffffffffffff, r12]}}], 0x20, 0x40}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001140)="f7097352ce9a7430a8c1b4869794c6c3079e180af097c2b4963ad2b68a006d556dc0d9daf283d41723eae0f3049fdea8977ac493c720c8d343b7174a36d0d93adc2274fe29163c2270123c7e5ff02599c74eb6c3d00e552639d13abf10b600ca167e5a877f2d394fa420ac6e29554c012621c3484b92555b9de1981f804f36dd292cb098f19b1a45b38634cf9aeacba341859bce5ab52d03ace31b47c63b1f2e0aa85f3b1a61246efe2ab246c522806a482aa3ed27841e0699ef962cccd76bb3764acdb0f52eec18df121fc9a2df278f860d0e5fa80a081d40642b8ee026581640e2db6405d715c154a31619c90d9ffb", 0xf0}], 0x1, &(0x7f0000001280)=[@cred={{0x1c, 0x1, 0x2, {r14, r15, r17}}}], 0x20, 0x4000081}}], 0x5, 0x20000000) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) (rerun: 64) sendmsg$unix(r1, &(0x7f0000000940)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000180)="44e81ee10061a1ca60fb85e18cb87be691c9103d942e61f8ba44432ff98f880a34209732011ebcf94b3aabbcff418d5be54b9bab96ee3cfa86eeaba37f244236bb7026cd3a6006fac2e0231ac979dea47f55097ae258b8a5a418f297106f09831c0b5459e6e073a148ab726b6a6b94616c412edbed26478a06c228f2983156d8866bb458e7792053c1605a5a525f057bdc97c416", 0x94}, {&(0x7f0000000240)="9869e36b2a0923eb7134a38014a4ed83b5", 0x11}, {&(0x7f0000000280)="3ec2be96f52f2f3fecd3744530ccb9ccdbe3bc352d52660e394a57d4f26e70a9ac43", 0x22}, {&(0x7f00000002c0)="3bd587dd0b5461b90abf160a9d6e40540d437dc89c3b1fe714224dbb0ebcd3dc70dd14c5a56d44ce4ee2ac4c5110470c73615f519881f63fc8ebe94abba6376a77e288d7404e01d7bb4c393451d7342500632508f0bb1070b117d63049435a9bbd7f2e57710d40be0f4f0516b01b5a74b4f7a2266d9fb9c98b3785", 0x7b}, {&(0x7f0000000340)="ea7805c793f164d17ab9b73c", 0xc}, {&(0x7f0000000380)="048876590565fee3c923aa63708d3a59f11ca157de1397f8606791b8a436d875d4cf0fad994dd942462a74f24b2b9c546d7e67325de16d45359cbde518bfe0bc949c7dfb6fa10dd8b22d1bf3d03e92c0112873856e840db8788d250b0917265a90477d41a54496d9e301ca23b267715fb54bf4a1a285f3a10451e8ccc3050ef391f6e619eeac57fa590a701ac51e6baef32e6993f34a37d15edc517b009942abf34046ee596c2d04dee1993ed7eb0b36b5d6", 0xb2}, {&(0x7f0000000440)="b58eabd41ba64401334854eebbe6b4a66ff89526c62d37fc78e8031c2fa07e0b79aae69a810b9bd2e1e8aad616bbd13c864e26387916cd83c514f6cee063c97eb42324b2f7dbf9d7501aa78aa12f6124a99452069bdbb43d1d4cc82eea1a3f6a42f92c45c2deeea6a087c9e2fb50c2ef1014b5b45ab3cc6460361a0330b55a4844e4c87f41b0629deeabc197a43ad7592b1bce4c305e9e083289599b391bd304ea83669157d233e5684e01ca94457fdac86aed2c19d5d17e748291eef2b4be708032bc", 0xc3}, {&(0x7f0000000540)="8c4ba500a3b58e", 0x7}], 0x8, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r4, r3, r3, r1, r2, r3]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r15, r18}}}], 0xe0}, 0x4) [ 950.470516][ T27] audit: type=1326 audit(1697456843.296:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17641 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:47:23 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000040), &(0x7f00000001c0)=0x4) [ 950.591828][T17651] batadv0: entered promiscuous mode [ 950.680922][T17651] batadv_slave_0: entered promiscuous mode [ 950.687761][T17651] batadv_slave_0: left promiscuous mode [ 950.800679][T17651] batadv0: left promiscuous mode 11:47:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000001c0)={0x1, 0x84, "cc07cde52e71c47c387f536c6f92b4350779f54110a6f996b5a2a859c55365e9cb86e822c07b95fb09a176dacfd6e1227f63e25e035c4f9da1a084e6224e6459d44e7deb09883bf2c63e903b07f9815aaab0a671af04f904ac1ad6e1089fe672820ebd11a62f8636a90db264e22ec4d730475c5da5af9732f0f32d7aef6a514124647ec3"}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv6_getnexthop={0x48, 0x6a, 0x417, 0x70bd2d, 0x25dfdbfe, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r4}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_ID={0x8}]}, 0x48}}, 0x4000) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000003c0)=""/135) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11:47:23 executing program 5: pipe2(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) [ 950.974317][T17650] batadv0: entered promiscuous mode [ 951.054533][T17650] batadv_slave_0: entered promiscuous mode [ 951.062691][T17650] batadv_slave_0: left promiscuous mode [ 951.090092][T17650] batadv0: left promiscuous mode 11:47:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x36e, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 951.169315][ T1214] ieee802154 phy0 wpan0: encryption failed: -22 [ 951.176156][ T1214] ieee802154 phy1 wpan1: encryption failed: -22 11:47:24 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x25000000) 11:47:24 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x852, 0x0) 11:47:24 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xa, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x371, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:24 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, 0x0, 0x0) [ 951.645559][ T27] audit: type=1326 audit(1697456844.446:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17668 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:47:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) (async) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000001c0)={0x1, 0x84, "cc07cde52e71c47c387f536c6f92b4350779f54110a6f996b5a2a859c55365e9cb86e822c07b95fb09a176dacfd6e1227f63e25e035c4f9da1a084e6224e6459d44e7deb09883bf2c63e903b07f9815aaab0a671af04f904ac1ad6e1089fe672820ebd11a62f8636a90db264e22ec4d730475c5da5af9732f0f32d7aef6a514124647ec3"}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv6_getnexthop={0x48, 0x6a, 0x417, 0x70bd2d, 0x25dfdbfe, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r4}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_ID={0x8}]}, 0x48}}, 0x4000) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000003c0)=""/135) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 951.765425][T17674] batadv0: entered promiscuous mode 11:47:24 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x20a5, &(0x7f0000000040)=[{0x6, 0x20, 0x7f, 0x8}, {0x80, 0x2, 0x8, 0x101}, {0x7fff, 0x6e, 0x3, 0x3ff}, {0xdd, 0x9, 0x4a, 0x1}, {0xa476, 0x20, 0x0, 0x7}, {0x1, 0x2, 0x6e, 0x7fffffff}]}) open(0x0, 0x0, 0x0) [ 951.811818][T17674] batadv_slave_0: entered promiscuous mode [ 951.818621][T17674] batadv_slave_0: left promiscuous mode [ 951.847824][T17674] batadv0: left promiscuous mode [ 951.945344][T17675] batadv0: entered promiscuous mode 11:47:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x7a39}, 0x0, 0x0) close(r1) [ 952.056043][T17675] batadv_slave_0: entered promiscuous mode [ 952.064724][T17675] batadv_slave_0: left promiscuous mode [ 952.084912][ T27] audit: type=1326 audit(1697456844.906:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17680 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 952.155659][T17675] batadv0: left promiscuous mode 11:47:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x3b8, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:25 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0) [ 952.429250][T17691] batadv0: entered promiscuous mode 11:47:25 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x40000000) [ 952.498253][T17691] batadv_slave_0: entered promiscuous mode [ 952.505392][T17691] batadv_slave_0: left promiscuous mode [ 952.535665][T17691] batadv0: left promiscuous mode 11:47:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) (async) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000001c0)={0x1, 0x84, "cc07cde52e71c47c387f536c6f92b4350779f54110a6f996b5a2a859c55365e9cb86e822c07b95fb09a176dacfd6e1227f63e25e035c4f9da1a084e6224e6459d44e7deb09883bf2c63e903b07f9815aaab0a671af04f904ac1ad6e1089fe672820ebd11a62f8636a90db264e22ec4d730475c5da5af9732f0f32d7aef6a514124647ec3"}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv6_getnexthop={0x48, 0x6a, 0x417, 0x70bd2d, 0x25dfdbfe, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r4}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_ID={0x8}]}, 0x48}}, 0x4000) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000003c0)=""/135) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11:47:25 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xb, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa) [ 952.730011][ T27] audit: type=1326 audit(1697456845.556:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17694 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 952.821413][T17699] batadv0: entered promiscuous mode [ 952.849874][T17699] batadv_slave_0: entered promiscuous mode [ 952.860661][T17699] batadv_slave_0: left promiscuous mode 11:47:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x500, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 952.920769][T17699] batadv0: left promiscuous mode 11:47:25 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x20a5, &(0x7f0000000040)=[{0x6, 0x20, 0x7f, 0x8}, {0x80, 0x2, 0x8, 0x101}, {0x7fff, 0x6e, 0x3, 0x3ff}, {0xdd, 0x9, 0x4a, 0x1}, {0xa476, 0x20, 0x0, 0x7}, {0x1, 0x2, 0x6e, 0x7fffffff}]}) (async, rerun: 32) open(0x0, 0x0, 0x0) 11:47:25 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000040)) [ 953.204230][T17707] batadv0: entered promiscuous mode 11:47:26 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xc, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 953.232666][ T27] audit: type=1326 audit(1697456846.036:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17708 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f77d067cae9 code=0x0 11:47:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_io_uring_setup(0xfc1, &(0x7f00000001c0)={0x0, 0xd1d3, 0x400, 0x2, 0x230}, &(0x7f0000000040), &(0x7f00000000c0)) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 953.303909][T17707] batadv_slave_0: entered promiscuous mode [ 953.313508][T17707] batadv_slave_0: left promiscuous mode 11:47:26 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @val, {@ipv6}}, 0x0) [ 953.431145][T17707] batadv0: left promiscuous mode [ 953.548795][T17714] batadv0: entered promiscuous mode 11:47:26 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x40020000) [ 953.620683][T17714] batadv_slave_0: entered promiscuous mode [ 953.627479][T17714] batadv_slave_0: left promiscuous mode 11:47:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x5d6, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) select(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x7fff}, 0x0, 0x0) select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x1}, &(0x7f0000000100)={0x9}, 0x0) [ 953.759829][T17714] batadv0: left promiscuous mode [ 953.955044][ T27] audit: type=1326 audit(1697456846.756:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17721 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:47:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0xfc1, &(0x7f00000001c0)={0x0, 0xd1d3, 0x400, 0x2, 0x230}, &(0x7f0000000040), &(0x7f00000000c0)) (async) r1 = syz_io_uring_setup(0xfc1, &(0x7f00000001c0)={0x0, 0xd1d3, 0x400, 0x2, 0x230}, &(0x7f0000000040), &(0x7f00000000c0)) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r2) (async) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 954.011015][T17726] batadv0: entered promiscuous mode 11:47:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000040), 0x4) [ 954.033678][T17726] batadv_slave_0: entered promiscuous mode [ 954.041173][T17726] batadv_slave_0: left promiscuous mode [ 954.110784][T17726] batadv0: left promiscuous mode 11:47:27 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x20a5, &(0x7f0000000040)=[{0x6, 0x20, 0x7f, 0x8}, {0x80, 0x2, 0x8, 0x101}, {0x7fff, 0x6e, 0x3, 0x3ff}, {0xdd, 0x9, 0x4a, 0x1}, {0xa476, 0x20, 0x0, 0x7}, {0x1, 0x2, 0x6e, 0x7fffffff}]}) open(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x20a5, &(0x7f0000000040)=[{0x6, 0x20, 0x7f, 0x8}, {0x80, 0x2, 0x8, 0x101}, {0x7fff, 0x6e, 0x3, 0x3ff}, {0xdd, 0x9, 0x4a, 0x1}, {0xa476, 0x20, 0x0, 0x7}, {0x1, 0x2, 0x6e, 0x7fffffff}]}) (async) open(0x0, 0x0, 0x0) (async) 11:47:27 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xd, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x600, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r0, 0x2}], 0x1, 0x0) close(r1) [ 954.479612][ T27] audit: type=1326 audit(1697456847.296:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17733 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 954.553748][T17736] batadv0: entered promiscuous mode [ 954.616006][ T27] audit: type=1326 audit(1697456847.436:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17733 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 954.650106][T17736] batadv_slave_0: entered promiscuous mode [ 954.657705][T17736] batadv_slave_0: left promiscuous mode [ 954.676207][T17736] batadv0: left promiscuous mode 11:47:27 executing program 5: pipe2(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}, 0x0) 11:47:27 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x48000000) 11:47:27 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_io_uring_setup(0xfc1, &(0x7f00000001c0)={0x0, 0xd1d3, 0x400, 0x2, 0x230}, &(0x7f0000000040), &(0x7f00000000c0)) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000240)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 954.928196][T17742] batadv0: entered promiscuous mode 11:47:27 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) close(r0) accept$inet(r0, 0x0, 0x0) [ 955.034440][T17742] batadv_slave_0: entered promiscuous mode [ 955.041714][T17742] batadv_slave_0: left promiscuous mode 11:47:27 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xe, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 955.068948][ T27] audit: type=1326 audit(1697456847.886:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17745 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 955.102478][T17742] batadv0: left promiscuous mode [ 955.320588][T17756] batadv0: entered promiscuous mode 11:47:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 955.380865][T17756] batadv_slave_0: entered promiscuous mode [ 955.387679][T17756] batadv_slave_0: left promiscuous mode 11:47:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0) getdents(r0, 0x0, 0x0) 11:47:28 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) r1 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r1, 0x3}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e24, @remote}}, 0x0, 0x0, 0x0, 0x0, "4322019c63959aedb5b6f356385f8f7f19ec7dc3d5f3bb0221dd3b920497d6d1e889871d1656b9abca1c9543e4eaa8cd2068acee4f340ff046710c241b74bfc91b939ce31a304dfcfb57743ab6f5aea5"}, 0xd8) open(0x0, 0x0, 0x0) [ 955.447044][T17756] batadv0: left promiscuous mode 11:47:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="640f23a46764c18400807667f3f20f0fd41d670f797b00c4e245b6faea00100000a700c4c2790f6a41c4c279221166baa00066b8002066ef66baf80cb82d61c682ef66bafc0cb06bee", 0x49}], 0x1, 0x40, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 955.639141][T17759] batadv0: entered promiscuous mode 11:47:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, 0x0, 0xffffffffffffffce) [ 955.693664][T17759] batadv_slave_0: entered promiscuous mode [ 955.700622][T17759] batadv_slave_0: left promiscuous mode [ 955.704093][ T27] audit: type=1326 audit(1697456848.506:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 11:47:28 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xf, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 955.782626][T17759] batadv0: left promiscuous mode 11:47:28 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x4c000000) 11:47:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) [ 956.056025][T17771] batadv0: entered promiscuous mode 11:47:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x900, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 956.135855][T17771] batadv_slave_0: entered promiscuous mode [ 956.142763][T17771] batadv_slave_0: left promiscuous mode [ 956.178559][ T27] audit: type=1326 audit(1697456848.966:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17772 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 956.215107][T17771] batadv0: left promiscuous mode 11:47:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="640f23a46764c18400807667f3f20f0fd41d670f797b00c4e245b6faea00100000a700c4c2790f6a41c4c279221166baa00066b8002066ef66baf80cb82d61c682ef66bafc0cb06bee", 0x49}], 0x1, 0x40, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="640f23a46764c18400807667f3f20f0fd41d670f797b00c4e245b6faea00100000a700c4c2790f6a41c4c279221166baa00066b8002066ef66baf80cb82d61c682ef66bafc0cb06bee", 0x49}], 0x1, 0x40, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 11:47:29 executing program 5: setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x7}}, 0x0) [ 956.426175][T17777] batadv0: entered promiscuous mode 11:47:29 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) r1 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r1, 0x3}) (async) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e24, @remote}}, 0x0, 0x0, 0x0, 0x0, "4322019c63959aedb5b6f356385f8f7f19ec7dc3d5f3bb0221dd3b920497d6d1e889871d1656b9abca1c9543e4eaa8cd2068acee4f340ff046710c241b74bfc91b939ce31a304dfcfb57743ab6f5aea5"}, 0xd8) (async) open(0x0, 0x0, 0x0) [ 956.497762][T17777] batadv_slave_0: entered promiscuous mode [ 956.505235][T17777] batadv_slave_0: left promiscuous mode 11:47:29 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x10, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 956.635736][T17777] batadv0: left promiscuous mode 11:47:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0) r0 = geteuid() lchown(&(0x7f0000000440)='./file0\x00', r0, 0x0) [ 956.811103][T17790] batadv0: entered promiscuous mode [ 956.825885][ T27] audit: type=1326 audit(1697456849.616:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17787 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 956.876073][T17790] batadv_slave_0: entered promiscuous mode [ 956.883095][T17790] batadv_slave_0: left promiscuous mode 11:47:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xa00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 956.955861][T17790] batadv0: left promiscuous mode 11:47:29 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x68000000) 11:47:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x80, &(0x7f0000000040), 0x4) 11:47:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="640f23a46764c18400807667f3f20f0fd41d670f797b00c4e245b6faea00100000a700c4c2790f6a41c4c279221166baa00066b8002066ef66baf80cb82d61c682ef66bafc0cb06bee", 0x49}], 0x1, 0x40, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="640f23a46764c18400807667f3f20f0fd41d670f797b00c4e245b6faea00100000a700c4c2790f6a41c4c279221166baa00066b8002066ef66baf80cb82d61c682ef66bafc0cb06bee", 0x49}], 0x1, 0x40, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) [ 957.263790][T17797] batadv0: entered promiscuous mode [ 957.284743][T17797] batadv_slave_0: entered promiscuous mode [ 957.291710][T17797] batadv_slave_0: left promiscuous mode [ 957.301354][T17797] batadv0: left promiscuous mode [ 957.322270][ T27] audit: type=1326 audit(1697456850.096:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17796 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:47:30 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x11, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto(r0, &(0x7f0000000080)="ae4fc4bf295f7ace440c2539dbc2d8e5b046be71f97c797f15220de3a0e1a22398a2afe64c03d8f05f4d051778b2a5c0fa36ac4f4dfded6dfe39d37f43e2c0bdf63457e607c0e722330ba378ab6a7932900f38fa4d675be55a3716eeaa014237454045c7e0a2941573864443bf92503886e14cb0ece2bb285fe19a568246d96b3d6b4fcd6a5a39e4c7b838bbc8dd810268", 0x91, 0x0, 0x0, 0x0) 11:47:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xb00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 957.649457][T17810] batadv0: entered promiscuous mode 11:47:30 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) r1 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r1, 0x3}) (async) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e24, @remote}}, 0x0, 0x0, 0x0, 0x0, "4322019c63959aedb5b6f356385f8f7f19ec7dc3d5f3bb0221dd3b920497d6d1e889871d1656b9abca1c9543e4eaa8cd2068acee4f340ff046710c241b74bfc91b939ce31a304dfcfb57743ab6f5aea5"}, 0xd8) (async) open(0x0, 0x0, 0x0) [ 957.701940][T17810] batadv_slave_0: entered promiscuous mode [ 957.708715][T17810] batadv_slave_0: left promiscuous mode [ 957.749739][T17810] batadv0: left promiscuous mode 11:47:30 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 11:47:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7fff}}, './file0\x00'}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 957.951407][ T27] audit: type=1326 audit(1697456850.786:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17814 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 957.968655][T17813] batadv0: entered promiscuous mode [ 958.065391][T17813] batadv_slave_0: entered promiscuous mode [ 958.072338][T17813] batadv_slave_0: left promiscuous mode 11:47:31 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000080), 0x8) [ 958.127961][T17813] batadv0: left promiscuous mode 11:47:31 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x6c000000) 11:47:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x12, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7fff}}, './file0\x00'}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11:47:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xc00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 958.444831][T17827] batadv0: entered promiscuous mode [ 958.461835][ T27] audit: type=1326 audit(1697456851.246:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17825 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:47:31 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x88) [ 958.506229][T17827] batadv_slave_0: entered promiscuous mode [ 958.513170][T17827] batadv_slave_0: left promiscuous mode [ 958.579445][T17827] batadv0: left promiscuous mode 11:47:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7fff}}, './file0\x00'}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 958.681341][T17831] batadv0: entered promiscuous mode [ 958.705045][T17831] batadv_slave_0: entered promiscuous mode [ 958.712831][T17831] batadv_slave_0: left promiscuous mode 11:47:31 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x1d, 0x0, 0x40}, {0x0, 0x1}, {0x6, 0x0, 0x0, 0x6}, {0x6, 0x84, 0x5, 0x7}, {0x401, 0x4, 0x1, 0xfffffffa}]}) open(0x0, 0x0, 0x0) 11:47:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000000380)) [ 958.823852][T17831] batadv0: left promiscuous mode 11:47:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x22, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000001c0)="660f38820cb815000f00d00f3281111f42baf80c6698d2fbcc9666efbafc0cee660f3a14f30066b94a0300000f32660f3880b90500baf80c66b89cefc48f66efbafc0cb8f1ffefbaf80c66b8f386e98f6613bafc0cec", 0x56}], 0x1, 0x2, &(0x7f00000000c0)=[@cstype3={0x5, 0x1ff}, @cstype0={0x4, 0xe}], 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:47:31 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x1d, 0x0, 0x40}, {0x0, 0x1}, {0x6, 0x0, 0x0, 0x6}, {0x6, 0x84, 0x5, 0x7}, {0x401, 0x4, 0x1, 0xfffffffa}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x1d, 0x0, 0x40}, {0x0, 0x1}, {0x6, 0x0, 0x0, 0x6}, {0x6, 0x84, 0x5, 0x7}, {0x401, 0x4, 0x1, 0xfffffffa}]}) open(0x0, 0x0, 0x0) 11:47:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xd00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:32 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x74000000) 11:47:32 executing program 5: memfd_create(&(0x7f0000000000)='/dev/full\x00', 0x4) [ 959.372480][T17850] batadv0: entered promiscuous mode 11:47:32 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x1d, 0x0, 0x40}, {0x0, 0x1}, {0x6, 0x0, 0x0, 0x6}, {0x6, 0x84, 0x5, 0x7}, {0x401, 0x4, 0x1, 0xfffffffa}]}) open(0x0, 0x0, 0x0) [ 959.462111][T17850] batadv_slave_0: entered promiscuous mode [ 959.468910][T17850] batadv_slave_0: left promiscuous mode [ 959.549312][T17850] batadv0: left promiscuous mode [ 959.567470][ T27] audit: type=1326 audit(1697456852.396:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17852 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:47:32 executing program 5: syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x10d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x8}}]}}}]}}]}}, 0x0) 11:47:32 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) open(0x0, 0x0, 0x0) [ 959.821774][T17849] batadv0: entered promiscuous mode [ 959.889601][T17849] batadv_slave_0: entered promiscuous mode [ 959.896633][T17849] batadv_slave_0: left promiscuous mode [ 959.943148][T17849] batadv0: left promiscuous mode 11:47:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xe00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 960.087385][ T27] audit: type=1326 audit(1697456852.916:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17860 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 11:47:33 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) (async) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000001c0)="660f38820cb815000f00d00f3281111f42baf80c6698d2fbcc9666efbafc0cee660f3a14f30066b94a0300000f32660f3880b90500baf80c66b89cefc48f66efbafc0cb8f1ffefbaf80c66b8f386e98f6613bafc0cec", 0x56}], 0x1, 0x2, &(0x7f00000000c0)=[@cstype3={0x5, 0x1ff}, @cstype0={0x4, 0xe}], 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 960.132391][ T33] usb 6-1: new full-speed USB device number 5 using dummy_hcd 11:47:33 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x24, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 960.294053][T17863] batadv0: entered promiscuous mode [ 960.339903][T17863] batadv_slave_0: entered promiscuous mode [ 960.347273][T17863] batadv_slave_0: left promiscuous mode 11:47:33 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x7a000000) [ 960.415832][T17863] batadv0: left promiscuous mode 11:47:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r4 = openat$cgroup_ro(r3, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000001c0)="660f38820cb815000f00d00f3281111f42baf80c6698d2fbcc9666efbafc0cee660f3a14f30066b94a0300000f32660f3880b90500baf80c66b89cefc48f66efbafc0cb8f1ffefbaf80c66b8f386e98f6613bafc0cec", 0x56}], 0x1, 0x2, &(0x7f00000000c0)=[@cstype3={0x5, 0x1ff}, @cstype0={0x4, 0xe}], 0x2) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 960.580941][T17870] batadv0: entered promiscuous mode [ 960.581486][ T33] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 960.645583][T17870] batadv_slave_0: entered promiscuous mode [ 960.653188][T17870] batadv_slave_0: left promiscuous mode [ 960.667654][T17870] batadv0: left promiscuous mode 11:47:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xf00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 960.689341][ T27] audit: type=1326 audit(1697456853.496:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17871 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 960.851738][ T33] usb 6-1: New USB device found, idVendor=056a, idProduct=010d, bcdDevice= 0.40 [ 960.861436][ T33] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.869669][ T33] usb 6-1: Product: syz [ 960.874313][ T33] usb 6-1: Manufacturer: syz [ 960.879125][ T33] usb 6-1: SerialNumber: syz 11:47:33 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) open(0x0, 0x0, 0x0) 11:47:33 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 961.032069][ T33] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 961.062232][T17880] batadv0: entered promiscuous mode [ 961.153755][T17880] batadv_slave_0: entered promiscuous mode [ 961.160826][T17880] batadv_slave_0: left promiscuous mode 11:47:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x6da041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000001c0)="660f388292bb00b8e3098ec866b9800000c00f326635000100000f30653e3e65f30f090fbd2166b9130300000f32af0f00900010d97f570f20d86635080000000f22d8", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = signalfd4(r2, &(0x7f0000000000)={[0x1]}, 0x8, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000316000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000240)="f2f02803bad00466b8b600000066ef0fc6e96d0f20c06635000000200f22c0f866b8e8821fb20f23c80f21f86635080090000f23f8f40f20d86635080000000f22d8660f3882b40e00660f3882830000", 0x50}], 0x1, 0x9, &(0x7f0000000300)=[@cstype0={0x4, 0x5}, @cstype3={0x5, 0x2}], 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000000040)={0x2, r2, 0x1}) [ 961.238693][ T33] usb 6-1: USB disconnect, device number 5 [ 961.264244][T17880] batadv0: left promiscuous mode [ 961.282684][ T27] audit: type=1326 audit(1697456854.046:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17881 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 961.421387][T17884] batadv0: entered promiscuous mode 11:47:34 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x7fc00000) [ 961.498149][T17884] batadv_slave_0: entered promiscuous mode [ 961.505500][T17884] batadv_slave_0: left promiscuous mode [ 961.564460][T17884] batadv0: left promiscuous mode [ 961.745173][ T27] audit: type=1326 audit(1697456854.566:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17889 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:47:34 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x62a, 0x5110, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x31, 0x0}) 11:47:34 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x107c, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x6da041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000001c0)="660f388292bb00b8e3098ec866b9800000c00f326635000100000f30653e3e65f30f090fbd2166b9130300000f32af0f00900010d97f570f20d86635080000000f22d8", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = signalfd4(r2, &(0x7f0000000000)={[0x1]}, 0x8, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000316000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000240)="f2f02803bad00466b8b600000066ef0fc6e96d0f20c06635000000200f22c0f866b8e8821fb20f23c80f21f86635080090000f23f8f40f20d86635080000000f22d8660f3882b40e00660f3882830000", 0x50}], 0x1, 0x9, &(0x7f0000000300)=[@cstype0={0x4, 0x5}, @cstype3={0x5, 0x2}], 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000000040)={0x2, r2, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x6da041, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000001c0)="660f388292bb00b8e3098ec866b9800000c00f326635000100000f30653e3e65f30f090fbd2166b9130300000f32af0f00900010d97f570f20d86635080000000f22d8", 0x43}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) signalfd4(r2, &(0x7f0000000000)={[0x1]}, 0x8, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000316000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000240)="f2f02803bad00466b8b600000066ef0fc6e96d0f20c06635000000200f22c0f866b8e8821fb20f23c80f21f86635080090000f23f8f40f20d86635080000000f22d8660f3882b40e00660f3882830000", 0x50}], 0x1, 0x9, &(0x7f0000000300)=[@cstype0={0x4, 0x5}, @cstype3={0x5, 0x2}], 0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000000040)={0x2, r2, 0x1}) (async) 11:47:34 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2f, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:34 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) open(0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async) open(0x0, 0x0, 0x0) (async) [ 962.054473][T17894] batadv0: entered promiscuous mode [ 962.118562][T17894] batadv_slave_0: entered promiscuous mode [ 962.125565][T17894] batadv_slave_0: left promiscuous mode [ 962.191662][T17894] batadv0: left promiscuous mode [ 962.359154][T17895] batadv0: entered promiscuous mode [ 962.370067][ T27] audit: type=1326 audit(1697456855.186:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17903 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 962.409963][T17895] batadv_slave_0: entered promiscuous mode [ 962.416972][T17895] batadv_slave_0: left promiscuous mode [ 962.430803][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd 11:47:35 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x3a, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x6da041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000001c0)="660f388292bb00b8e3098ec866b9800000c00f326635000100000f30653e3e65f30f090fbd2166b9130300000f32af0f00900010d97f570f20d86635080000000f22d8", 0x43}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) r5 = signalfd4(r2, &(0x7f0000000000)={[0x1]}, 0x8, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000316000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000240)="f2f02803bad00466b8b600000066ef0fc6e96d0f20c06635000000200f22c0f866b8e8821fb20f23c80f21f86635080090000f23f8f40f20d86635080000000f22d8660f3882b40e00660f3882830000", 0x50}], 0x1, 0x9, &(0x7f0000000300)=[@cstype0={0x4, 0x5}, @cstype3={0x5, 0x2}], 0x2) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000000040)={0x2, r2, 0x1}) [ 962.460765][T17895] batadv0: left promiscuous mode [ 962.570387][ T27] audit: type=1326 audit(1697456855.376:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17903 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 11:47:35 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x7ff00000) [ 962.670645][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 962.754717][T17910] batadv0: entered promiscuous mode 11:47:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x107d, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 962.808894][ T27] audit: type=1326 audit(1697456855.656:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17913 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 962.810358][T17910] batadv_slave_0: entered promiscuous mode [ 962.838281][T17910] batadv_slave_0: left promiscuous mode [ 962.851004][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 962.934800][T17910] batadv0: left promiscuous mode [ 962.951225][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 963.161006][ T10] usb 6-1: New USB device found, idVendor=062a, idProduct=5110, bcdDevice= 0.40 [ 963.170462][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.178781][ T10] usb 6-1: Product: syz [ 963.183754][ T10] usb 6-1: Manufacturer: syz [ 963.188548][ T10] usb 6-1: SerialNumber: syz [ 963.217894][T17916] batadv0: entered promiscuous mode 11:47:36 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) open(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{0x2, 0x7, 0x1f, 0x3}, {0x8, 0x8, 0x4, 0x1}, {0x1, 0x20, 0x4, 0xffff}, {0xb7, 0xf3, 0xff, 0x4}, {0x2, 0x7, 0x7f, 0xdb}, {0xfbff, 0x6, 0x1f, 0xffffffff}]}) [ 963.248504][T17916] batadv_slave_0: entered promiscuous mode [ 963.255558][T17916] batadv_slave_0: left promiscuous mode [ 963.276511][T17916] batadv0: left promiscuous mode 11:47:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = dup(r2) mmap(&(0x7f0000310000/0x3000)=nil, 0x3000, 0x9, 0x30, r3, 0x49bbb000) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 963.356519][ T10] usbhid 6-1:1.0: couldn't find an input interrupt endpoint 11:47:36 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x48, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 963.537672][ T10] usb 6-1: USB disconnect, device number 6 [ 963.596999][ T27] audit: type=1326 audit(1697456856.456:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17917 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 963.714682][T17924] batadv0: entered promiscuous mode [ 963.729568][T17924] batadv_slave_0: entered promiscuous mode [ 963.737279][T17924] batadv_slave_0: left promiscuous mode [ 963.763192][T17924] batadv0: left promiscuous mode 11:47:37 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x7ffc0000) 11:47:37 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x107e, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = dup(r2) mmap(&(0x7f0000310000/0x3000)=nil, 0x3000, 0x9, 0x30, r3, 0x49bbb000) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11:47:37 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4a, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:37 executing program 5: syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60984ad100080000fe800000000000000000000000000027fe8000000000000000000000000000aa5482"], 0x0) [ 964.179638][ T27] audit: type=1326 audit(1697456857.036:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17926 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 964.325270][T17935] batadv0: entered promiscuous mode [ 964.349002][T17935] batadv_slave_0: entered promiscuous mode [ 964.356413][T17935] batadv_slave_0: left promiscuous mode [ 964.369496][T17935] batadv0: left promiscuous mode 11:47:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="64360f01c20fc79bb8e7dacc66f30faeedbaf80c66b808edf68066efbafc0c66ed0e0f019773c40f20e06635000004000f22e066b8010000000f01c19e", 0x3d}], 0x1, 0x0, &(0x7f0000000100)=[@dstype3={0x7, 0x9}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:47:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = dup(r2) mmap(&(0x7f0000310000/0x3000)=nil, 0x3000, 0x9, 0x30, r3, 0x49bbb000) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) dup(r2) (async) mmap(&(0x7f0000310000/0x3000)=nil, 0x3000, 0x9, 0x30, r3, 0x49bbb000) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 11:47:37 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) open(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{0x2, 0x7, 0x1f, 0x3}, {0x8, 0x8, 0x4, 0x1}, {0x1, 0x20, 0x4, 0xffff}, {0xb7, 0xf3, 0xff, 0x4}, {0x2, 0x7, 0x7f, 0xdb}, {0xfbff, 0x6, 0x1f, 0xffffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async) open(0x0, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{0x2, 0x7, 0x1f, 0x3}, {0x8, 0x8, 0x4, 0x1}, {0x1, 0x20, 0x4, 0xffff}, {0xb7, 0xf3, 0xff, 0x4}, {0x2, 0x7, 0x7f, 0xdb}, {0xfbff, 0x6, 0x1f, 0xffffffff}]}) (async) [ 964.503242][T17932] batadv0: entered promiscuous mode [ 964.593367][T17932] batadv_slave_0: entered promiscuous mode [ 964.600463][T17932] batadv_slave_0: left promiscuous mode 11:47:37 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1100, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 964.717590][T17932] batadv0: left promiscuous mode [ 964.784731][ T27] audit: type=1326 audit(1697456857.566:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17941 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 964.880320][ T27] audit: type=1326 audit(1697456857.686:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17941 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 964.959416][T17951] batadv0: entered promiscuous mode 11:47:37 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4c, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 964.999830][T17951] batadv_slave_0: entered promiscuous mode [ 965.008422][T17951] batadv_slave_0: left promiscuous mode 11:47:38 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x7fff0000) [ 965.115262][T17951] batadv0: left promiscuous mode 11:47:38 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x8, &(0x7f0000000080)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}) [ 965.297189][ T27] audit: type=1326 audit(1697456858.146:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17957 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 965.307788][T17956] batadv0: entered promiscuous mode 11:47:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="3e0fc72f360f01bbab11660f388250000f30f00fc15156baa100edba6100ec66b93308000066b80060000066ba000000000f30660f381de482be2c00ab", 0x3d}], 0x1, 0x2, &(0x7f00000001c0), 0x0) [ 965.364379][T17956] batadv_slave_0: entered promiscuous mode [ 965.371506][T17956] batadv_slave_0: left promiscuous mode [ 965.387106][T17956] batadv0: left promiscuous mode 11:47:38 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1140, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:38 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async) open(0x0, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{0x2, 0x7, 0x1f, 0x3}, {0x8, 0x8, 0x4, 0x1}, {0x1, 0x20, 0x4, 0xffff}, {0xb7, 0xf3, 0xff, 0x4}, {0x2, 0x7, 0x7f, 0xdb}, {0xfbff, 0x6, 0x1f, 0xffffffff}]}) 11:47:38 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x50, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 965.735357][ T773] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 965.790076][T17966] batadv0: entered promiscuous mode [ 965.823951][T17966] batadv_slave_0: entered promiscuous mode [ 965.830955][T17966] batadv_slave_0: left promiscuous mode [ 965.892500][T17966] batadv0: left promiscuous mode [ 965.909361][ T27] audit: type=1326 audit(1697456858.736:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17968 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 966.010488][ T773] usb 6-1: Using ep0 maxpacket: 32 [ 966.060280][T17973] batadv0: entered promiscuous mode 11:47:38 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x114e, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 966.097068][T17973] batadv_slave_0: entered promiscuous mode [ 966.104064][T17973] batadv_slave_0: left promiscuous mode 11:47:39 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x80010000) [ 966.183640][T17973] batadv0: left promiscuous mode [ 966.251482][ T773] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 966.354030][T17975] batadv0: entered promiscuous mode [ 966.393750][T17975] batadv_slave_0: entered promiscuous mode [ 966.401319][T17975] batadv_slave_0: left promiscuous mode [ 966.430627][ T27] audit: type=1326 audit(1697456859.206:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17976 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 966.475024][ T773] usb 6-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.40 [ 966.484611][ T773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 11:47:39 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x60, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 966.493109][ T773] usb 6-1: Product: syz [ 966.497473][ T773] usb 6-1: Manufacturer: syz [ 966.502380][ T773] usb 6-1: SerialNumber: syz [ 966.531339][T17975] batadv0: left promiscuous mode [ 966.614846][ T773] usbhid 6-1:1.0: couldn't find an input interrupt endpoint 11:47:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="3e0fc72f360f01bbab11660f388250000f30f00fc15156baa100edba6100ec66b93308000066b80060000066ba000000000f30660f381de482be2c00ab", 0x3d}], 0x1, 0x2, &(0x7f00000001c0), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000000)) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="3e0fc72f360f01bbab11660f388250000f30f00fc15156baa100edba6100ec66b93308000066b80060000066ba000000000f30660f381de482be2c00ab", 0x3d}], 0x1, 0x2, &(0x7f00000001c0), 0x0) (async) 11:47:39 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) open(0x0, 0x50102, 0x7) [ 966.831497][T17979] batadv0: entered promiscuous mode [ 966.843551][ T773] usb 6-1: USB disconnect, device number 7 11:47:39 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1200, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 966.879772][T17979] batadv_slave_0: entered promiscuous mode [ 966.893019][T17979] batadv_slave_0: left promiscuous mode [ 966.927446][T17979] batadv0: left promiscuous mode [ 967.250745][T17989] batadv0: entered promiscuous mode 11:47:40 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x68, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 967.324787][T17989] batadv_slave_0: entered promiscuous mode [ 967.331717][T17989] batadv_slave_0: left promiscuous mode [ 967.363927][T17989] batadv0: left promiscuous mode 11:47:40 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) 11:47:40 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xaa020000) [ 967.571194][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 967.571257][ T27] audit: type=1326 audit(1697456860.426:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17995 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 967.619000][T17996] batadv0: entered promiscuous mode 11:47:40 executing program 5: socket(0xe11baa9e03c3b53d, 0x0, 0x0) [ 967.687298][T17996] batadv_slave_0: entered promiscuous mode [ 967.694251][T17996] batadv_slave_0: left promiscuous mode [ 967.715150][T17996] batadv0: left promiscuous mode 11:47:40 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1223, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:40 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x6c, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 968.022853][T18003] batadv0: entered promiscuous mode 11:47:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (rerun: 64) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000000)) (async, rerun: 32) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="3e0fc72f360f01bbab11660f388250000f30f00fc15156baa100edba6100ec66b93308000066b80060000066ba000000000f30660f381de482be2c00ab", 0x3d}], 0x1, 0x2, &(0x7f00000001c0), 0x0) 11:47:40 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) open(0x0, 0x50102, 0x7) (async) open(0x0, 0x50102, 0x7) [ 968.054021][T18003] batadv_slave_0: entered promiscuous mode [ 968.061493][T18003] batadv_slave_0: left promiscuous mode 11:47:40 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0201"], 0x90}}, 0x0) [ 968.143461][T18003] batadv0: left promiscuous mode [ 968.343584][ T27] audit: type=1326 audit(1697456861.166:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18010 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 968.390836][T18006] batadv0: entered promiscuous mode 11:47:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xe1681100) 11:47:41 executing program 5: io_setup(0x7, &(0x7f0000000f40)) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 968.436912][T18006] batadv_slave_0: entered promiscuous mode [ 968.443980][T18006] batadv_slave_0: left promiscuous mode [ 968.467702][T18006] batadv0: left promiscuous mode 11:47:41 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1224, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$binfmt_script(r5, &(0x7f0000000240)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}], 0xa, "811b4c36db8d0a83b3ea7a7b3f7305b58f4daa69acd2a67012c7f1d3730d0ad297509edbb8239e550d29fa692e6ddfe36e9ec42e539681b7cd38ade707a24e336585599c9372a6c135e40904336f2a"}, 0x64) [ 968.789985][ T27] audit: type=1326 audit(1697456861.606:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18017 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:47:41 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x74, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 968.840526][T18022] batadv0: entered promiscuous mode [ 968.857165][T18022] batadv_slave_0: entered promiscuous mode [ 968.864082][T18022] batadv_slave_0: left promiscuous mode [ 968.903519][T18022] batadv0: left promiscuous mode 11:47:41 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001180)={0x1, &(0x7f0000001100)=[{}]}) [ 969.129015][T18029] batadv0: entered promiscuous mode 11:47:42 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async, rerun: 32) open(0x0, 0x50102, 0x7) (rerun: 32) 11:47:42 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 969.189453][T18029] batadv_slave_0: entered promiscuous mode [ 969.198392][T18029] batadv_slave_0: left promiscuous mode 11:47:42 executing program 5: sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8ca, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x15}, &(0x7f0000000300)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r6 = fcntl$dupfd(r1, 0x0, r1) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x1, @thr={&(0x7f00000006c0), 0x0}}, &(0x7f0000000280)) read$FUSE(r2, &(0x7f00000033c0)={0x2020}, 0x2020) write$FUSE_LK(r6, &(0x7f0000000080)={0x28}, 0x28) [ 969.270652][T18029] batadv0: left promiscuous mode 11:47:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) write$binfmt_script(r5, &(0x7f0000000240)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}], 0xa, "811b4c36db8d0a83b3ea7a7b3f7305b58f4daa69acd2a67012c7f1d3730d0ad297509edbb8239e550d29fa692e6ddfe36e9ec42e539681b7cd38ade707a24e336585599c9372a6c135e40904336f2a"}, 0x64) [ 969.491274][ T27] audit: type=1326 audit(1697456862.296:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18033 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f77d067cae9 code=0x0 [ 969.601555][T18035] batadv0: entered promiscuous mode 11:47:42 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xeaffffff) [ 969.631753][T18035] batadv_slave_0: entered promiscuous mode [ 969.638534][T18035] batadv_slave_0: left promiscuous mode [ 969.719401][T18035] batadv0: left promiscuous mode 11:47:42 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x7a, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 969.863329][ T27] audit: type=1326 audit(1697456862.666:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18047 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 969.950839][T18052] batadv0: entered promiscuous mode [ 969.968584][T18052] batadv_slave_0: entered promiscuous mode [ 969.975582][T18052] batadv_slave_0: left promiscuous mode [ 969.983344][T18052] batadv0: left promiscuous mode 11:47:42 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2302, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 970.251188][T18054] batadv0: entered promiscuous mode 11:47:43 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x9d, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$binfmt_script(r5, &(0x7f0000000240)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}], 0xa, "811b4c36db8d0a83b3ea7a7b3f7305b58f4daa69acd2a67012c7f1d3730d0ad297509edbb8239e550d29fa692e6ddfe36e9ec42e539681b7cd38ade707a24e336585599c9372a6c135e40904336f2a"}, 0x64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) write$binfmt_script(r5, &(0x7f0000000240)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}], 0xa, "811b4c36db8d0a83b3ea7a7b3f7305b58f4daa69acd2a67012c7f1d3730d0ad297509edbb8239e550d29fa692e6ddfe36e9ec42e539681b7cd38ade707a24e336585599c9372a6c135e40904336f2a"}, 0x64) (async) [ 970.382674][T18054] batadv_slave_0: entered promiscuous mode [ 970.389533][T18054] batadv_slave_0: left promiscuous mode 11:47:43 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1, 0x2}, {0x0, 0x1, 0x0, 0x4}, {0x6}]}) open(0x0, 0x0, 0x0) 11:47:43 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8ca, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x15}, &(0x7f0000000300)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r6 = fcntl$dupfd(r1, 0x0, r1) read$FUSE(r2, &(0x7f00000033c0)={0x2020}, 0x2020) write$FUSE_LK(r6, &(0x7f0000000080)={0x28}, 0x28) connect$unix(0xffffffffffffffff, 0x0, 0x0) [ 970.481925][T18054] batadv0: left promiscuous mode [ 970.680749][T18057] batadv0: entered promiscuous mode 11:47:43 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xfeffffff) [ 970.713259][ T27] audit: type=1326 audit(1697456863.476:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18059 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 970.746891][T18057] batadv_slave_0: entered promiscuous mode [ 970.753809][T18057] batadv_slave_0: left promiscuous mode [ 970.825247][T18057] batadv0: left promiscuous mode 11:47:43 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2312, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 970.972084][ T27] audit: type=1326 audit(1697456863.806:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18071 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:47:43 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x21b, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_NR_MMU_PAGES(r6, 0xae45, 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 971.240903][T18076] batadv0: entered promiscuous mode [ 971.307696][T18076] batadv_slave_0: entered promiscuous mode [ 971.314896][T18076] batadv_slave_0: left promiscuous mode [ 971.333085][T18076] batadv0: left promiscuous mode [ 971.417255][T18078] batadv0: entered promiscuous mode [ 971.486005][T18078] batadv_slave_0: entered promiscuous mode [ 971.498398][T18078] batadv_slave_0: left promiscuous mode [ 971.521046][T18078] batadv0: left promiscuous mode 11:47:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2400, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1, 0x2}, {0x0, 0x1, 0x0, 0x4}, {0x6}]}) (async) open(0x0, 0x0, 0x0) 11:47:44 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffff, 0x8, 0x80000}) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x3f, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) syz_io_uring_setup(0x4cd5, &(0x7f0000000200)={0x0, 0x78a2, 0x400, 0x1, 0x3e5}, &(0x7f0000000280), &(0x7f00000002c0)) 11:47:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xff600000) [ 971.890591][T18088] batadv0: entered promiscuous mode 11:47:44 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x21e, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 971.940664][ T27] audit: type=1326 audit(1697456864.686:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18086 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 971.965234][T18088] batadv_slave_0: entered promiscuous mode [ 971.972239][T18088] batadv_slave_0: left promiscuous mode 11:47:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1, 0x2}, {0x0, 0x1, 0x0, 0x4}, {0x6}]}) open(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1, 0x2}, {0x0, 0x1, 0x0, 0x4}, {0x6}]}) (async) open(0x0, 0x0, 0x0) (async) [ 972.027822][T18088] batadv0: left promiscuous mode 11:47:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_NR_MMU_PAGES(r6, 0xae45, 0x9) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 972.236826][ T27] audit: type=1326 audit(1697456865.056:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 972.260814][ T27] audit: type=1326 audit(1697456865.076:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 972.314233][T18094] batadv0: entered promiscuous mode 11:47:45 executing program 5: capset(&(0x7f0000000600), 0x0) 11:47:45 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2412, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 972.363235][T18094] batadv_slave_0: entered promiscuous mode [ 972.370044][T18094] batadv_slave_0: left promiscuous mode [ 972.393955][T18094] batadv0: left promiscuous mode 11:47:45 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001680)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0}, 0x0) 11:47:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x268, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 972.723365][T18109] batadv0: entered promiscuous mode [ 972.775836][T18109] batadv_slave_0: entered promiscuous mode [ 972.783191][T18109] batadv_slave_0: left promiscuous mode [ 972.808391][T18109] batadv0: left promiscuous mode [ 972.918928][T18112] batadv0: entered promiscuous mode 11:47:45 executing program 5: io_setup(0x7, &(0x7f0000000f40)=0x0) io_submit(r0, 0x0, 0x0) [ 973.008637][T18112] batadv_slave_0: entered promiscuous mode [ 973.015664][T18112] batadv_slave_0: left promiscuous mode 11:47:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_GET_NR_MMU_PAGES(r6, 0xae45, 0x9) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:45 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2500, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:46 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xffffff7f) [ 973.121059][T18112] batadv0: left promiscuous mode 11:47:46 executing program 2: open(0x0, 0x8403, 0x8) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0xf8, 0x0, 0x0, "231300e78768fed724bab27f5686a4e2", "8e9f69f520408d498b7c1cb9a00247b36287c9928936898bcef8fb309143eb0fa8ad9c3cc1117c41e4a3d3de1d087727144c71e499cfd1fab9e741839adba00829eaf9a5fe1a5ca3bebebcfd3d7715e845fb42246618053df45ac49177d67e0f45e7073140f4e471314a268041a601622f601c02ea67699ce13249b0a09d75103443d9a6d98f8db8fb7107404c58c6bee594b50f3d8c6f9bee692a463f1036ff560e81dd4c7db1ff614b42ab1e5d8f40f4285005723d4f7b85d475ada54a0b956bc194f0ecaed31de1a886080db840136c906d0f789844b5d447b432b8fdb30ab303d1"}, 0xf8, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x1000, 0x1) [ 973.368673][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 973.368735][ T27] audit: type=1326 audit(1697456866.206:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18118 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 973.422577][T18121] batadv0: entered promiscuous mode 11:47:46 executing program 5: bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 11:47:46 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2aa, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 973.452528][T18121] batadv_slave_0: entered promiscuous mode [ 973.459742][T18121] batadv_slave_0: left promiscuous mode [ 973.486260][T18121] batadv0: left promiscuous mode 11:47:46 executing program 2: open(0x0, 0x8403, 0x8) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0xf8, 0x0, 0x0, "231300e78768fed724bab27f5686a4e2", "8e9f69f520408d498b7c1cb9a00247b36287c9928936898bcef8fb309143eb0fa8ad9c3cc1117c41e4a3d3de1d087727144c71e499cfd1fab9e741839adba00829eaf9a5fe1a5ca3bebebcfd3d7715e845fb42246618053df45ac49177d67e0f45e7073140f4e471314a268041a601622f601c02ea67699ce13249b0a09d75103443d9a6d98f8db8fb7107404c58c6bee594b50f3d8c6f9bee692a463f1036ff560e81dd4c7db1ff614b42ab1e5d8f40f4285005723d4f7b85d475ada54a0b956bc194f0ecaed31de1a886080db840136c906d0f789844b5d447b432b8fdb30ab303d1"}, 0xf8, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x1000, 0x1) open(0x0, 0x8403, 0x8) (async) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0xf8, 0x0, 0x0, "231300e78768fed724bab27f5686a4e2", "8e9f69f520408d498b7c1cb9a00247b36287c9928936898bcef8fb309143eb0fa8ad9c3cc1117c41e4a3d3de1d087727144c71e499cfd1fab9e741839adba00829eaf9a5fe1a5ca3bebebcfd3d7715e845fb42246618053df45ac49177d67e0f45e7073140f4e471314a268041a601622f601c02ea67699ce13249b0a09d75103443d9a6d98f8db8fb7107404c58c6bee594b50f3d8c6f9bee692a463f1036ff560e81dd4c7db1ff614b42ab1e5d8f40f4285005723d4f7b85d475ada54a0b956bc194f0ecaed31de1a886080db840136c906d0f789844b5d447b432b8fdb30ab303d1"}, 0xf8, 0x2) (async) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x1000, 0x1) (async) 11:47:46 executing program 5: syz_io_uring_setup(0x4cd5, &(0x7f0000000200), &(0x7f0000000280), 0x0) 11:47:46 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2f00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup(r4) mmap(&(0x7f000031a000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x5000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 973.913772][T18132] batadv0: entered promiscuous mode [ 974.047584][T18132] batadv_slave_0: entered promiscuous mode [ 974.062300][T18132] batadv_slave_0: left promiscuous mode 11:47:47 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8ca, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x15}, &(0x7f0000000300)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) 11:47:47 executing program 2: open(0x0, 0x8403, 0x8) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0xf8, 0x0, 0x0, "231300e78768fed724bab27f5686a4e2", "8e9f69f520408d498b7c1cb9a00247b36287c9928936898bcef8fb309143eb0fa8ad9c3cc1117c41e4a3d3de1d087727144c71e499cfd1fab9e741839adba00829eaf9a5fe1a5ca3bebebcfd3d7715e845fb42246618053df45ac49177d67e0f45e7073140f4e471314a268041a601622f601c02ea67699ce13249b0a09d75103443d9a6d98f8db8fb7107404c58c6bee594b50f3d8c6f9bee692a463f1036ff560e81dd4c7db1ff614b42ab1e5d8f40f4285005723d4f7b85d475ada54a0b956bc194f0ecaed31de1a886080db840136c906d0f789844b5d447b432b8fdb30ab303d1"}, 0xf8, 0x2) (async) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0xf8, 0x0, 0x0, "231300e78768fed724bab27f5686a4e2", "8e9f69f520408d498b7c1cb9a00247b36287c9928936898bcef8fb309143eb0fa8ad9c3cc1117c41e4a3d3de1d087727144c71e499cfd1fab9e741839adba00829eaf9a5fe1a5ca3bebebcfd3d7715e845fb42246618053df45ac49177d67e0f45e7073140f4e471314a268041a601622f601c02ea67699ce13249b0a09d75103443d9a6d98f8db8fb7107404c58c6bee594b50f3d8c6f9bee692a463f1036ff560e81dd4c7db1ff614b42ab1e5d8f40f4285005723d4f7b85d475ada54a0b956bc194f0ecaed31de1a886080db840136c906d0f789844b5d447b432b8fdb30ab303d1"}, 0xf8, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x1000, 0x1) [ 974.210561][T18132] batadv0: left promiscuous mode 11:47:47 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xffffffea) [ 974.514556][T18139] batadv0: entered promiscuous mode 11:47:47 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) open(0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x240102, 0x0) [ 974.538231][T18139] batadv_slave_0: entered promiscuous mode [ 974.540017][ T27] audit: type=1326 audit(1697456867.356:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18148 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 974.545021][T18139] batadv_slave_0: left promiscuous mode 11:47:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2dc, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 974.712003][T18139] batadv0: left promiscuous mode [ 974.907468][ T27] audit: type=1326 audit(1697456867.706:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18155 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 974.910077][T18158] batadv0: entered promiscuous mode [ 974.953947][T18158] batadv_slave_0: entered promiscuous mode [ 974.961265][T18158] batadv_slave_0: left promiscuous mode [ 974.998876][T18158] batadv0: left promiscuous mode 11:47:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x3a00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:48 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x300, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:48 executing program 5: pipe(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) [ 975.325485][T18161] batadv0: entered promiscuous mode 11:47:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xfffffffe) 11:47:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup(r4) mmap(&(0x7f000031a000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x5000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x48, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) dup(r4) (async) mmap(&(0x7f000031a000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x5000) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) [ 975.434477][T18161] batadv_slave_0: entered promiscuous mode [ 975.441478][T18161] batadv_slave_0: left promiscuous mode [ 975.491332][T18161] batadv0: left promiscuous mode 11:47:48 executing program 5: bpf$MAP_CREATE(0x1c, &(0x7f0000001200)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 975.592504][T18165] batadv0: entered promiscuous mode [ 975.630650][ T27] audit: type=1326 audit(1697456868.436:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18166 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:47:48 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) open(0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x240102, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x240102, 0x0) [ 975.676256][T18165] batadv_slave_0: entered promiscuous mode [ 975.683589][T18165] batadv_slave_0: left promiscuous mode 11:47:48 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x3f00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 975.767939][T18165] batadv0: left promiscuous mode 11:47:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x12, 0x8001, 0x0, 0x8, 0x0, 0x1}, 0x48) 11:47:48 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x3f4, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 976.006515][T18179] batadv0: entered promiscuous mode [ 976.024818][ T27] audit: type=1326 audit(1697456868.806:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 976.095303][T18179] batadv_slave_0: entered promiscuous mode [ 976.109534][T18179] batadv_slave_0: left promiscuous mode [ 976.196642][T18179] batadv0: left promiscuous mode [ 976.299137][T18188] batadv0: entered promiscuous mode [ 976.322798][T18188] batadv_slave_0: entered promiscuous mode [ 976.329779][T18188] batadv_slave_0: left promiscuous mode 11:47:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x2) 11:47:49 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x30000000000) [ 976.421060][T18188] batadv0: left promiscuous mode 11:47:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:49 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x500, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 976.706375][ T27] audit: type=1326 audit(1697456869.516:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18191 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 976.761253][T18195] batadv0: entered promiscuous mode [ 976.775352][T18195] batadv_slave_0: entered promiscuous mode [ 976.783109][T18195] batadv_slave_0: left promiscuous mode [ 976.803593][T18195] batadv0: left promiscuous mode 11:47:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) open(0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x240102, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async) open(0x0, 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x240102, 0x0) (async) [ 977.027580][T18197] batadv0: entered promiscuous mode 11:47:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x48, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) dup(r4) mmap(&(0x7f000031a000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x5000) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 11:47:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4011, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 977.070436][T18197] batadv_slave_0: entered promiscuous mode [ 977.077247][T18197] batadv_slave_0: left promiscuous mode [ 977.088727][T18197] batadv0: left promiscuous mode [ 977.185212][ T27] audit: type=1326 audit(1697456870.026:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18198 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 977.289810][ T27] audit: type=1326 audit(1697456870.116:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18198 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 977.333528][T18202] batadv0: entered promiscuous mode [ 977.389742][T18202] batadv_slave_0: entered promiscuous mode [ 977.396801][T18202] batadv_slave_0: left promiscuous mode [ 977.437985][T18202] batadv0: left promiscuous mode 11:47:50 executing program 5: socketpair(0x5, 0x0, 0x0, &(0x7f0000000040)) 11:47:50 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x50000000000) 11:47:50 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x5d6, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 977.784368][ T27] audit: type=1326 audit(1697456870.586:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18213 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 977.830880][T18217] batadv0: entered promiscuous mode 11:47:50 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4788, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 977.993547][T18217] batadv_slave_0: entered promiscuous mode [ 978.000895][T18217] batadv_slave_0: left promiscuous mode 11:47:50 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x22, 0x0, 0xff, 0x200000}, {0x4}, {0x2, 0x0, 0x0, 0x1}]}) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x810, r0, 0xe20e3000) [ 978.084132][T18217] batadv0: left promiscuous mode 11:47:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r2) r5 = fcntl$dupfd(r0, 0x406, r1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="660f2c39660f69480066660f3a17e19db9e30a0000b8a8000000ba000000000f309a70000000220066baf80cb81289618fef66bafc0c66ed260f08dc83f30000000f01c90f001cd4", 0x48}], 0x1, 0x1, &(0x7f00000001c0), 0x0) 11:47:51 executing program 5: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003440), 0x0}, 0x50) [ 978.189982][T18219] batadv0: entered promiscuous mode [ 978.294946][T18219] batadv_slave_0: entered promiscuous mode [ 978.301851][T18219] batadv_slave_0: left promiscuous mode [ 978.347825][T18219] batadv0: left promiscuous mode 11:47:51 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x600, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:51 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x500, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:51 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x22, 0x0, 0xff, 0x200000}, {0x4}, {0x2, 0x0, 0x0, 0x1}]}) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x810, r0, 0xe20e3000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x22, 0x0, 0xff, 0x200000}, {0x4}, {0x2, 0x0, 0x0, 0x1}]}) (async) open(0x0, 0x0, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x810, r0, 0xe20e3000) (async) 11:47:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4800, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 978.629771][T18229] batadv0: entered promiscuous mode 11:47:51 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x60ffffffffff) [ 978.705451][T18229] batadv_slave_0: entered promiscuous mode [ 978.712765][T18229] batadv_slave_0: left promiscuous mode [ 978.788922][T18229] batadv0: left promiscuous mode 11:47:51 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x22, 0x0, 0xff, 0x200000}, {0x4}, {0x2, 0x0, 0x0, 0x1}]}) open(0x0, 0x0, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x810, r0, 0xe20e3000) 11:47:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r2) r5 = fcntl$dupfd(r0, 0x406, r1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="660f2c39660f69480066660f3a17e19db9e30a0000b8a8000000ba000000000f309a70000000220066baf80cb81289618fef66bafc0c66ed260f08dc83f30000000f01c90f001cd4", 0x48}], 0x1, 0x1, &(0x7f00000001c0), 0x0) [ 978.913880][T18232] batadv0: entered promiscuous mode [ 978.943117][T18232] batadv_slave_0: entered promiscuous mode [ 978.949934][T18232] batadv_slave_0: left promiscuous mode 11:47:51 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 979.006003][T18232] batadv0: left promiscuous mode [ 979.018342][ T27] audit: type=1326 audit(1697456871.796:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18237 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 979.185627][T18236] batadv0: entered promiscuous mode [ 979.229191][T18236] batadv_slave_0: entered promiscuous mode [ 979.236158][T18236] batadv_slave_0: left promiscuous mode [ 979.262836][T18236] batadv0: left promiscuous mode 11:47:52 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000100)={0x1384, 0x12, 0x8, 0x70bd25, 0x25dfdbfe, {0x11, 0xa1, 0xc4, 0x25, {0x4e22, 0x4e22, [0x8000, 0x80000000, 0x8, 0x5], [0x401, 0x40, 0x10000, 0xff], 0x0, [0x3ff, 0x9]}, 0x8, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x85, 0x1, "77ccc0ee7182b3d32d5b9b0cd6cf2d35951036e499cf8a5d7c1b4f053b426666b13e1941b7e45108986a0707604bd2673949951ba55d56402a24f5d4f843cd10348a32d76064e92cf1725780e5cbe205a748cc99fcc96e7a70aadef6060de9cf2ac96f968500fd333ca803e94fdadad65fbd98748f21e4b1642f34c5d32d6d9af0"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xff, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "d659fa2121d7fa797f2fa9005e71179224c8e7698c551b6fa3331053502f83d324fa068fc9e1ed1b2ba30017ddbee0ae2ed9e89c6c89c7f9c799ad85676e37558d7facdb7a858c48692f4dac8c912ac5f18458dda0081ad29c80bf836580377c85d0adbaa4288b7df04bdec5ea5aa8fdb154bdeab5708ffbfc355dd79cc022bc505b3972c96dd276ddb9dabb8d08ebad4a234bcaaf003d5b2c47d76864c5fcac412b9b07d92135eef98132dc3fd7e9e4ce4535c9e7373b46734fbb97"}, @INET_DIAG_REQ_BYTECODE={0xec, 0x1, "8355bc26abfd98c348790d2d8812605cadf62c4a8b63725c094454563b0066dc8fd6d1916d00d74ee4d800c01955bee87b9532136182ceb522b6b454fd48ab979a6623b9978d6018a10f881a4805b7026778f42c0a80dad32fcd6e51eff68ffa866739e1813d4f028c8b5ed33ea2f6262ad035c9ed98cd11f8ee87ea0a647f26d900f9a7980b2e4359e22a7eb20930b43eda9d8e6bf2593ad0152b87000de5d90ceff38c67880e0c0bfc27671ecffd8a3d499ee20106aef64e21a16881d61eeaae28962ebe4ccf51569c48aa6675ba38c6fce547687880e4db8be49182ce47d4005f836586faffde"}]}, 0x1384}, 0x1, 0x0, 0x0, 0x4004000}, 0x450) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000052c0), 0x440d02, 0x191) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005400)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005780)=ANY=[@ANYBLOB="900e00002c00270d00"/20, @ANYRES32=r8, @ANYBLOB="0d000000000000000c0000000a000100726f757465000000600e02005c0e0600580e01000a00018837f00832bc47ce180cb0f284751bb0d243c8263d26b72a3ada8e3f6544c7befd69a55d26253b4f7f5ea489174d7b862e787c8146477c60b445f08e314616d32d18aaeebcf50a2a5b989cfd5c671f39161124b780d64cf90e1622ce09dda7e82d7867c0690e1e5be9e4c44ed52fd566df2147bb73ea7890755dd3ba0d609e762c3d4396cef7f6b0c4574bd7088dd4799927c1339b0ce6decaec71e375a57030098c64e44cc56f6b85e7145cf6dc978a2474fb6c950dbb3423a73c031a5de79aaf7a9931777e23062459f3ab9e86474f2fd44e646e61a273624f6768b643a8b4179f54"], 0xe90}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000005740)={&(0x7f0000005540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005700)={&(0x7f0000005580)=@getae={0x160, 0x1f, 0x200, 0x70bd2d, 0x25dfdbff, {{@in6=@mcast1, 0x4d4, 0x2, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xe8}, [@policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast1, 0x4e20, 0x0, 0x4e20, 0x2, 0xa, 0xa0, 0x80, 0x2f, r8, 0xffffffffffffffff}, {0x400, 0x2, 0x14e5, 0x4, 0x1000, 0x80, 0x81}, {0x8, 0xa66, 0x9, 0x2}, 0x7}}, @lastused={0xc, 0xf, 0x20}, @etimer_thresh={0x8, 0xc, 0x8}, @algo_auth_trunc={0x4f, 0x14, {{'rmd160\x00'}, 0x18, 0x200, "1b3bd2"}}, @proto={0x5}, @tfcpad={0x8, 0x16, 0x7e7}]}, 0x160}, 0x1, 0x0, 0x0, 0x10000}, 0xc884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="900e00002c00270d00"/20, @ANYRES32=r5, @ANYBLOB="0d000000000000000c0000000a000100726f757465000000600e02005c0e0600580e01000a0001"], 0xe90}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000005500)={&(0x7f0000005440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000054c0)={&(0x7f0000005480)=@ipv6_newaddr={0x2c, 0x14, 0x300, 0x70bd25, 0x25dfdbfd, {0xa, 0x78, 0xc0, 0xc8, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x880) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000053c0)={&(0x7f0000005300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005380)={&(0x7f0000005340)={0x2c, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x240400c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) open(0x0, 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) recvfrom$unix(r9, &(0x7f00000000c0)=""/210, 0xd2, 0x40000101, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r9, &(0x7f00000050c0)=[{{&(0x7f0000001540)=@ieee802154, 0x80, &(0x7f00000019c0)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/142, 0x8e}, {&(0x7f0000001700)=""/250, 0xfa}, {&(0x7f0000001800)=""/24, 0x18}, {&(0x7f0000001840)=""/82, 0x52}, {&(0x7f00000018c0)=""/143, 0x8f}, {&(0x7f0000001980)=""/54, 0x36}], 0x7, &(0x7f0000001a40)=""/47, 0x2f}, 0x2}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a80)=""/211, 0xd3}, {&(0x7f0000001b80)=""/51, 0x33}], 0x2, &(0x7f0000001c00)=""/10, 0xa}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/82, 0x52}, {&(0x7f0000001cc0)=""/13, 0xd}], 0x2, &(0x7f0000001d40)=""/51, 0x33}, 0x10000}, {{&(0x7f0000001d80)=@qipcrtr, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001e00)=""/226, 0xe2}, {&(0x7f0000001f00)=""/218, 0xda}, {&(0x7f0000002000)=""/214, 0xd6}, {&(0x7f0000002100)=""/197, 0xc5}, {&(0x7f0000002200)=""/195, 0xc3}, {&(0x7f0000002300)=""/143, 0x8f}], 0x6}, 0x4}, {{&(0x7f0000002440)=@ieee802154, 0x80, &(0x7f0000002600)=[{&(0x7f00000024c0)=""/190, 0xbe}, {&(0x7f0000002580)=""/70, 0x46}], 0x2, &(0x7f0000002640)=""/46, 0x2e}, 0xffffffe0}, {{&(0x7f0000002680)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/202, 0xca}, {&(0x7f0000003800)=""/190, 0xbe}, {&(0x7f00000038c0)=""/205, 0xcd}, {&(0x7f00000039c0)=""/143, 0x8f}, {&(0x7f0000003a80)=""/156, 0x9c}, {&(0x7f0000003b40)=""/175, 0xaf}, {&(0x7f0000003c00)=""/157, 0x9d}, {&(0x7f0000003cc0)=""/45, 0x2d}], 0x9, &(0x7f0000003dc0)=""/219, 0xdb}, 0x6}, {{&(0x7f0000003ec0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000004f80)=[{&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/31, 0x1f}], 0x2, &(0x7f0000004fc0)=""/205, 0xcd}, 0x8107}], 0x7, 0x40010000, &(0x7f0000005280)) 11:47:52 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4788, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r2) (async) r5 = fcntl$dupfd(r0, 0x406, r1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="660f2c39660f69480066660f3a17e19db9e30a0000b8a8000000ba000000000f309a70000000220066baf80cb81289618fef66bafc0c66ed260f08dc83f30000000f01c90f001cd4", 0x48}], 0x1, 0x1, &(0x7f00000001c0), 0x0) [ 979.481055][T18247] batadv0: entered promiscuous mode [ 979.549749][T18247] batadv_slave_0: entered promiscuous mode [ 979.556732][T18247] batadv_slave_0: left promiscuous mode [ 979.633048][T18247] batadv0: left promiscuous mode 11:47:52 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4888, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 979.726485][T18249] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 979.800789][ T27] audit: type=1326 audit(1697456872.606:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18248 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 11:47:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x900, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:52 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xc07f00000000) [ 979.959801][T18253] batadv0: entered promiscuous mode [ 980.031043][T18253] batadv_slave_0: entered promiscuous mode [ 980.037847][T18253] batadv_slave_0: left promiscuous mode 11:47:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x105000, 0x80) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f00000001c0)=ANY=[@ANYBLOB="0400000000000000000000000000000000000000dd9b425d7ab1630f46c230f577df4d0258000000003c9497806c978587d3b9e340435df51eb40bf343bfe0b63ed746f712525afa49af0676c84b8ffc78fc8f84321803be198c443c698431e9ca00d1f98497df0cf7d0e3ec6230c367ea56499b24197d1c230ac9a938f3870ca1470f17bb402efedee7d3c21d2b2ce8125ee362c8643941f1d017df0385422f4124e751cec5b9ceae406ae2"]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000280)="0f0bf20fd6ef0f213b0f20c06635080000000f22c066b8fa6700000f23c00f21f86635000009000f23f80f22de66b9610b000066b853c7000066ba000000000f300f01cb0f2c6cb9baf80c66b882fe3e8a66efbafc0cb80058ef", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 980.074934][T18253] batadv0: left promiscuous mode [ 980.089576][ T27] audit: type=1326 audit(1697456872.936:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18261 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 980.208015][T18260] batadv0: entered promiscuous mode [ 980.269884][T18260] batadv_slave_0: entered promiscuous mode [ 980.276988][T18260] batadv_slave_0: left promiscuous mode [ 980.286955][T18260] batadv0: left promiscuous mode 11:47:53 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) write$tcp_congestion(r0, 0x0, 0x0) [ 980.445707][T18262] batadv0: entered promiscuous mode 11:47:53 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000100)={0x1384, 0x12, 0x8, 0x70bd25, 0x25dfdbfe, {0x11, 0xa1, 0xc4, 0x25, {0x4e22, 0x4e22, [0x8000, 0x80000000, 0x8, 0x5], [0x401, 0x40, 0x10000, 0xff], 0x0, [0x3ff, 0x9]}, 0x8, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x85, 0x1, "77ccc0ee7182b3d32d5b9b0cd6cf2d35951036e499cf8a5d7c1b4f053b426666b13e1941b7e45108986a0707604bd2673949951ba55d56402a24f5d4f843cd10348a32d76064e92cf1725780e5cbe205a748cc99fcc96e7a70aadef6060de9cf2ac96f968500fd333ca803e94fdadad65fbd98748f21e4b1642f34c5d32d6d9af0"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xff, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "d659fa2121d7fa797f2fa9005e71179224c8e7698c551b6fa3331053502f83d324fa068fc9e1ed1b2ba30017ddbee0ae2ed9e89c6c89c7f9c799ad85676e37558d7facdb7a858c48692f4dac8c912ac5f18458dda0081ad29c80bf836580377c85d0adbaa4288b7df04bdec5ea5aa8fdb154bdeab5708ffbfc355dd79cc022bc505b3972c96dd276ddb9dabb8d08ebad4a234bcaaf003d5b2c47d76864c5fcac412b9b07d92135eef98132dc3fd7e9e4ce4535c9e7373b46734fbb97"}, @INET_DIAG_REQ_BYTECODE={0xec, 0x1, "8355bc26abfd98c348790d2d8812605cadf62c4a8b63725c094454563b0066dc8fd6d1916d00d74ee4d800c01955bee87b9532136182ceb522b6b454fd48ab979a6623b9978d6018a10f881a4805b7026778f42c0a80dad32fcd6e51eff68ffa866739e1813d4f028c8b5ed33ea2f6262ad035c9ed98cd11f8ee87ea0a647f26d900f9a7980b2e4359e22a7eb20930b43eda9d8e6bf2593ad0152b87000de5d90ceff38c67880e0c0bfc27671ecffd8a3d499ee20106aef64e21a16881d61eeaae28962ebe4ccf51569c48aa6675ba38c6fce547687880e4db8be49182ce47d4005f836586faffde"}]}, 0x1384}, 0x1, 0x0, 0x0, 0x4004000}, 0x450) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000052c0), 0x440d02, 0x191) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005400)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005780)=ANY=[@ANYBLOB="900e00002c00270d00"/20, @ANYRES32=r8, @ANYBLOB="0d000000000000000c0000000a000100726f757465000000600e02005c0e0600580e01000a00018837f00832bc47ce180cb0f284751bb0d243c8263d26b72a3ada8e3f6544c7befd69a55d26253b4f7f5ea489174d7b862e787c8146477c60b445f08e314616d32d18aaeebcf50a2a5b989cfd5c671f39161124b780d64cf90e1622ce09dda7e82d7867c0690e1e5be9e4c44ed52fd566df2147bb73ea7890755dd3ba0d609e762c3d4396cef7f6b0c4574bd7088dd4799927c1339b0ce6decaec71e375a57030098c64e44cc56f6b85e7145cf6dc978a2474fb6c950dbb3423a73c031a5de79aaf7a9931777e23062459f3ab9e86474f2fd44e646e61a273624f6768b643a8b4179f54"], 0xe90}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000005740)={&(0x7f0000005540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005700)={&(0x7f0000005580)=@getae={0x160, 0x1f, 0x200, 0x70bd2d, 0x25dfdbff, {{@in6=@mcast1, 0x4d4, 0x2, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xe8}, [@policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast1, 0x4e20, 0x0, 0x4e20, 0x2, 0xa, 0xa0, 0x80, 0x2f, r8, 0xffffffffffffffff}, {0x400, 0x2, 0x14e5, 0x4, 0x1000, 0x80, 0x81}, {0x8, 0xa66, 0x9, 0x2}, 0x7}}, @lastused={0xc, 0xf, 0x20}, @etimer_thresh={0x8, 0xc, 0x8}, @algo_auth_trunc={0x4f, 0x14, {{'rmd160\x00'}, 0x18, 0x200, "1b3bd2"}}, @proto={0x5}, @tfcpad={0x8, 0x16, 0x7e7}]}, 0x160}, 0x1, 0x0, 0x0, 0x10000}, 0xc884) (async) sendmsg$nl_xfrm(r1, &(0x7f0000005740)={&(0x7f0000005540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005700)={&(0x7f0000005580)=@getae={0x160, 0x1f, 0x200, 0x70bd2d, 0x25dfdbff, {{@in6=@mcast1, 0x4d4, 0x2, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xe8}, [@policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast1, 0x4e20, 0x0, 0x4e20, 0x2, 0xa, 0xa0, 0x80, 0x2f, r8, 0xffffffffffffffff}, {0x400, 0x2, 0x14e5, 0x4, 0x1000, 0x80, 0x81}, {0x8, 0xa66, 0x9, 0x2}, 0x7}}, @lastused={0xc, 0xf, 0x20}, @etimer_thresh={0x8, 0xc, 0x8}, @algo_auth_trunc={0x4f, 0x14, {{'rmd160\x00'}, 0x18, 0x200, "1b3bd2"}}, @proto={0x5}, @tfcpad={0x8, 0x16, 0x7e7}]}, 0x160}, 0x1, 0x0, 0x0, 0x10000}, 0xc884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="900e00002c00270d00"/20, @ANYRES32=r5, @ANYBLOB="0d000000000000000c0000000a000100726f757465000000600e02005c0e0600580e01000a0001"], 0xe90}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000005500)={&(0x7f0000005440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000054c0)={&(0x7f0000005480)=@ipv6_newaddr={0x2c, 0x14, 0x300, 0x70bd25, 0x25dfdbfd, {0xa, 0x78, 0xc0, 0xc8, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x880) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000053c0)={&(0x7f0000005300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005380)={&(0x7f0000005340)={0x2c, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x240400c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) open(0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) recvfrom$unix(r9, &(0x7f00000000c0)=""/210, 0xd2, 0x40000101, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) recvfrom$unix(r9, &(0x7f00000000c0)=""/210, 0xd2, 0x40000101, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r9, &(0x7f00000050c0)=[{{&(0x7f0000001540)=@ieee802154, 0x80, &(0x7f00000019c0)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/142, 0x8e}, {&(0x7f0000001700)=""/250, 0xfa}, {&(0x7f0000001800)=""/24, 0x18}, {&(0x7f0000001840)=""/82, 0x52}, {&(0x7f00000018c0)=""/143, 0x8f}, {&(0x7f0000001980)=""/54, 0x36}], 0x7, &(0x7f0000001a40)=""/47, 0x2f}, 0x2}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a80)=""/211, 0xd3}, {&(0x7f0000001b80)=""/51, 0x33}], 0x2, &(0x7f0000001c00)=""/10, 0xa}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/82, 0x52}, {&(0x7f0000001cc0)=""/13, 0xd}], 0x2, &(0x7f0000001d40)=""/51, 0x33}, 0x10000}, {{&(0x7f0000001d80)=@qipcrtr, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001e00)=""/226, 0xe2}, {&(0x7f0000001f00)=""/218, 0xda}, {&(0x7f0000002000)=""/214, 0xd6}, {&(0x7f0000002100)=""/197, 0xc5}, {&(0x7f0000002200)=""/195, 0xc3}, {&(0x7f0000002300)=""/143, 0x8f}], 0x6}, 0x4}, {{&(0x7f0000002440)=@ieee802154, 0x80, &(0x7f0000002600)=[{&(0x7f00000024c0)=""/190, 0xbe}, {&(0x7f0000002580)=""/70, 0x46}], 0x2, &(0x7f0000002640)=""/46, 0x2e}, 0xffffffe0}, {{&(0x7f0000002680)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/202, 0xca}, {&(0x7f0000003800)=""/190, 0xbe}, {&(0x7f00000038c0)=""/205, 0xcd}, {&(0x7f00000039c0)=""/143, 0x8f}, {&(0x7f0000003a80)=""/156, 0x9c}, {&(0x7f0000003b40)=""/175, 0xaf}, {&(0x7f0000003c00)=""/157, 0x9d}, {&(0x7f0000003cc0)=""/45, 0x2d}], 0x9, &(0x7f0000003dc0)=""/219, 0xdb}, 0x6}, {{&(0x7f0000003ec0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000004f80)=[{&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/31, 0x1f}], 0x2, &(0x7f0000004fc0)=""/205, 0xcd}, 0x8107}], 0x7, 0x40010000, &(0x7f0000005280)) 11:47:53 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4a00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 980.490034][T18262] batadv_slave_0: entered promiscuous mode [ 980.497040][T18262] batadv_slave_0: left promiscuous mode [ 980.527787][T18262] batadv0: left promiscuous mode [ 980.727933][T18273] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:47:53 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xa00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:53 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x40045701, &(0x7f0000000880)={0x0, "01db091d1eea631c3b51f4360da8936afd54855672db450fb9eaea120f2bb62f", 0xffffffffffffffff}) fchown(r1, 0xee00, 0x0) [ 980.938061][T18275] batadv0: entered promiscuous mode [ 980.974208][T18275] batadv_slave_0: entered promiscuous mode [ 980.981742][T18275] batadv_slave_0: left promiscuous mode [ 980.989462][T18275] batadv0: left promiscuous mode 11:47:53 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xf07f00000000) [ 981.077140][T18279] batadv0: entered promiscuous mode 11:47:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x105000, 0x80) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f00000001c0)=ANY=[@ANYBLOB="0400000000000000000000000000000000000000dd9b425d7ab1630f46c230f577df4d0258000000003c9497806c978587d3b9e340435df51eb40bf343bfe0b63ed746f712525afa49af0676c84b8ffc78fc8f84321803be198c443c698431e9ca00d1f98497df0cf7d0e3ec6230c367ea56499b24197d1c230ac9a938f3870ca1470f17bb402efedee7d3c21d2b2ce8125ee362c8643941f1d017df0385422f4124e751cec5b9ceae406ae2"]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000280)="0f0bf20fd6ef0f213b0f20c06635080000000f22c066b8fa6700000f23c00f21f86635000009000f23f80f22de66b9610b000066b853c7000066ba000000000f300f01cb0f2c6cb9baf80c66b882fe3e8a66efbafc0cb80058ef", 0x5a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11:47:54 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4c00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 981.173156][T18279] batadv_slave_0: entered promiscuous mode [ 981.179974][T18279] batadv_slave_0: left promiscuous mode 11:47:54 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000100)={0x1384, 0x12, 0x8, 0x70bd25, 0x25dfdbfe, {0x11, 0xa1, 0xc4, 0x25, {0x4e22, 0x4e22, [0x8000, 0x80000000, 0x8, 0x5], [0x401, 0x40, 0x10000, 0xff], 0x0, [0x3ff, 0x9]}, 0x8, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x85, 0x1, "77ccc0ee7182b3d32d5b9b0cd6cf2d35951036e499cf8a5d7c1b4f053b426666b13e1941b7e45108986a0707604bd2673949951ba55d56402a24f5d4f843cd10348a32d76064e92cf1725780e5cbe205a748cc99fcc96e7a70aadef6060de9cf2ac96f968500fd333ca803e94fdadad65fbd98748f21e4b1642f34c5d32d6d9af0"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xff, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "d659fa2121d7fa797f2fa9005e71179224c8e7698c551b6fa3331053502f83d324fa068fc9e1ed1b2ba30017ddbee0ae2ed9e89c6c89c7f9c799ad85676e37558d7facdb7a858c48692f4dac8c912ac5f18458dda0081ad29c80bf836580377c85d0adbaa4288b7df04bdec5ea5aa8fdb154bdeab5708ffbfc355dd79cc022bc505b3972c96dd276ddb9dabb8d08ebad4a234bcaaf003d5b2c47d76864c5fcac412b9b07d92135eef98132dc3fd7e9e4ce4535c9e7373b46734fbb97"}, @INET_DIAG_REQ_BYTECODE={0xec, 0x1, "8355bc26abfd98c348790d2d8812605cadf62c4a8b63725c094454563b0066dc8fd6d1916d00d74ee4d800c01955bee87b9532136182ceb522b6b454fd48ab979a6623b9978d6018a10f881a4805b7026778f42c0a80dad32fcd6e51eff68ffa866739e1813d4f028c8b5ed33ea2f6262ad035c9ed98cd11f8ee87ea0a647f26d900f9a7980b2e4359e22a7eb20930b43eda9d8e6bf2593ad0152b87000de5d90ceff38c67880e0c0bfc27671ecffd8a3d499ee20106aef64e21a16881d61eeaae28962ebe4ccf51569c48aa6675ba38c6fce547687880e4db8be49182ce47d4005f836586faffde"}]}, 0x1384}, 0x1, 0x0, 0x0, 0x4004000}, 0x450) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000052c0), 0x440d02, 0x191) (async) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000052c0), 0x440d02, 0x191) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005400)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005780)=ANY=[@ANYBLOB="900e00002c00270d00"/20, @ANYRES32=r8, @ANYBLOB="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"], 0xe90}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005780)=ANY=[@ANYBLOB="900e00002c00270d00"/20, @ANYRES32=r8, @ANYBLOB="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"], 0xe90}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000005740)={&(0x7f0000005540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005700)={&(0x7f0000005580)=@getae={0x160, 0x1f, 0x200, 0x70bd2d, 0x25dfdbff, {{@in6=@mcast1, 0x4d4, 0x2, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xe8}, [@policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast1, 0x4e20, 0x0, 0x4e20, 0x2, 0xa, 0xa0, 0x80, 0x2f, r8, 0xffffffffffffffff}, {0x400, 0x2, 0x14e5, 0x4, 0x1000, 0x80, 0x81}, {0x8, 0xa66, 0x9, 0x2}, 0x7}}, @lastused={0xc, 0xf, 0x20}, @etimer_thresh={0x8, 0xc, 0x8}, @algo_auth_trunc={0x4f, 0x14, {{'rmd160\x00'}, 0x18, 0x200, "1b3bd2"}}, @proto={0x5}, @tfcpad={0x8, 0x16, 0x7e7}]}, 0x160}, 0x1, 0x0, 0x0, 0x10000}, 0xc884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="900e00002c00270d00"/20, @ANYRES32=r5, @ANYBLOB="0d000000000000000c0000000a000100726f757465000000600e02005c0e0600580e01000a0001"], 0xe90}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000005500)={&(0x7f0000005440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000054c0)={&(0x7f0000005480)=@ipv6_newaddr={0x2c, 0x14, 0x300, 0x70bd25, 0x25dfdbfd, {0xa, 0x78, 0xc0, 0xc8, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x880) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000053c0)={&(0x7f0000005300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005380)={&(0x7f0000005340)={0x2c, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x240400c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) open(0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) recvfrom$unix(r9, &(0x7f00000000c0)=""/210, 0xd2, 0x40000101, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r9, &(0x7f00000050c0)=[{{&(0x7f0000001540)=@ieee802154, 0x80, &(0x7f00000019c0)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/142, 0x8e}, {&(0x7f0000001700)=""/250, 0xfa}, {&(0x7f0000001800)=""/24, 0x18}, {&(0x7f0000001840)=""/82, 0x52}, {&(0x7f00000018c0)=""/143, 0x8f}, {&(0x7f0000001980)=""/54, 0x36}], 0x7, &(0x7f0000001a40)=""/47, 0x2f}, 0x2}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a80)=""/211, 0xd3}, {&(0x7f0000001b80)=""/51, 0x33}], 0x2, &(0x7f0000001c00)=""/10, 0xa}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/82, 0x52}, {&(0x7f0000001cc0)=""/13, 0xd}], 0x2, &(0x7f0000001d40)=""/51, 0x33}, 0x10000}, {{&(0x7f0000001d80)=@qipcrtr, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001e00)=""/226, 0xe2}, {&(0x7f0000001f00)=""/218, 0xda}, {&(0x7f0000002000)=""/214, 0xd6}, {&(0x7f0000002100)=""/197, 0xc5}, {&(0x7f0000002200)=""/195, 0xc3}, {&(0x7f0000002300)=""/143, 0x8f}], 0x6}, 0x4}, {{&(0x7f0000002440)=@ieee802154, 0x80, &(0x7f0000002600)=[{&(0x7f00000024c0)=""/190, 0xbe}, {&(0x7f0000002580)=""/70, 0x46}], 0x2, &(0x7f0000002640)=""/46, 0x2e}, 0xffffffe0}, {{&(0x7f0000002680)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/202, 0xca}, {&(0x7f0000003800)=""/190, 0xbe}, {&(0x7f00000038c0)=""/205, 0xcd}, {&(0x7f00000039c0)=""/143, 0x8f}, {&(0x7f0000003a80)=""/156, 0x9c}, {&(0x7f0000003b40)=""/175, 0xaf}, {&(0x7f0000003c00)=""/157, 0x9d}, {&(0x7f0000003cc0)=""/45, 0x2d}], 0x9, &(0x7f0000003dc0)=""/219, 0xdb}, 0x6}, {{&(0x7f0000003ec0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000004f80)=[{&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/31, 0x1f}], 0x2, &(0x7f0000004fc0)=""/205, 0xcd}, 0x8107}], 0x7, 0x40010000, &(0x7f0000005280)) (async) recvmmsg(r9, &(0x7f00000050c0)=[{{&(0x7f0000001540)=@ieee802154, 0x80, &(0x7f00000019c0)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/142, 0x8e}, {&(0x7f0000001700)=""/250, 0xfa}, {&(0x7f0000001800)=""/24, 0x18}, {&(0x7f0000001840)=""/82, 0x52}, {&(0x7f00000018c0)=""/143, 0x8f}, {&(0x7f0000001980)=""/54, 0x36}], 0x7, &(0x7f0000001a40)=""/47, 0x2f}, 0x2}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a80)=""/211, 0xd3}, {&(0x7f0000001b80)=""/51, 0x33}], 0x2, &(0x7f0000001c00)=""/10, 0xa}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/82, 0x52}, {&(0x7f0000001cc0)=""/13, 0xd}], 0x2, &(0x7f0000001d40)=""/51, 0x33}, 0x10000}, {{&(0x7f0000001d80)=@qipcrtr, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001e00)=""/226, 0xe2}, {&(0x7f0000001f00)=""/218, 0xda}, {&(0x7f0000002000)=""/214, 0xd6}, {&(0x7f0000002100)=""/197, 0xc5}, {&(0x7f0000002200)=""/195, 0xc3}, {&(0x7f0000002300)=""/143, 0x8f}], 0x6}, 0x4}, {{&(0x7f0000002440)=@ieee802154, 0x80, &(0x7f0000002600)=[{&(0x7f00000024c0)=""/190, 0xbe}, {&(0x7f0000002580)=""/70, 0x46}], 0x2, &(0x7f0000002640)=""/46, 0x2e}, 0xffffffe0}, {{&(0x7f0000002680)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/202, 0xca}, {&(0x7f0000003800)=""/190, 0xbe}, {&(0x7f00000038c0)=""/205, 0xcd}, {&(0x7f00000039c0)=""/143, 0x8f}, {&(0x7f0000003a80)=""/156, 0x9c}, {&(0x7f0000003b40)=""/175, 0xaf}, {&(0x7f0000003c00)=""/157, 0x9d}, {&(0x7f0000003cc0)=""/45, 0x2d}], 0x9, &(0x7f0000003dc0)=""/219, 0xdb}, 0x6}, {{&(0x7f0000003ec0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000004f80)=[{&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/31, 0x1f}], 0x2, &(0x7f0000004fc0)=""/205, 0xcd}, 0x8107}], 0x7, 0x40010000, &(0x7f0000005280)) [ 981.254827][T18279] batadv0: left promiscuous mode 11:47:54 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) [ 981.402461][ T27] audit: type=1326 audit(1697456874.186:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18282 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 981.494795][T18291] batadv0: entered promiscuous mode [ 981.519761][T18291] batadv_slave_0: entered promiscuous mode [ 981.531230][T18291] batadv_slave_0: left promiscuous mode 11:47:54 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xb00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 981.655875][ T27] audit: type=1326 audit(1697456874.486:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18288 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 981.717215][T18291] batadv0: left promiscuous mode [ 981.813826][T18290] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:47:54 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000001480), 0x801, 0x0) [ 981.919803][T18302] batadv0: entered promiscuous mode [ 981.940957][T18302] batadv_slave_0: entered promiscuous mode [ 981.947733][T18302] batadv_slave_0: left promiscuous mode [ 981.964044][T18302] batadv0: left promiscuous mode 11:47:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x105000, 0x80) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f00000001c0)=ANY=[@ANYBLOB="0400000000000000000000000000000000000000dd9b425d7ab1630f46c230f577df4d0258000000003c9497806c978587d3b9e340435df51eb40bf343bfe0b63ed746f712525afa49af0676c84b8ffc78fc8f84321803be198c443c698431e9ca00d1f98497df0cf7d0e3ec6230c367ea56499b24197d1c230ac9a938f3870ca1470f17bb402efedee7d3c21d2b2ce8125ee362c8643941f1d017df0385422f4124e751cec5b9ceae406ae2"]) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000280)="0f0bf20fd6ef0f213b0f20c06635080000000f22c066b8fa6700000f23c00f21f86635000009000f23f80f22de66b9610b000066b853c7000066ba000000000f300f01cb0f2c6cb9baf80c66b882fe3e8a66efbafc0cb80058ef", 0x5a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11:47:54 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000012c0)={0x9, 0x0, &(0x7f0000001240)=[{&(0x7f0000000040)}, {&(0x7f00000000c0)=""/105, 0x69}, {&(0x7f0000001300)=""/208, 0xd0}, {&(0x7f0000000240)=""/4096, 0x1000}], &(0x7f0000000040)=[0x0, 0x8], 0x4}, 0x20) r2 = socket$unix(0x1, 0x1, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/210, 0xd2, 0x40000101, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000140)={0x1, 'dvmrp1\x00', {}, 0x9}) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000001280)=@md0, 0xee01, &(0x7f0000001400)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x4, 0x4}, {}, {0x2}]}) open(0x0, 0x4ca040, 0xe) 11:47:55 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigreturn() r0 = syz_clone3(&(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$peeksig(0x10, r0, 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) 11:47:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4e11, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:55 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xfc7f00000000) 11:47:55 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xc00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 982.462543][T18312] batadv0: entered promiscuous mode 11:47:55 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) (async) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000012c0)={0x9, 0x0, &(0x7f0000001240)=[{&(0x7f0000000040)}, {&(0x7f00000000c0)=""/105, 0x69}, {&(0x7f0000001300)=""/208, 0xd0}, {&(0x7f0000000240)=""/4096, 0x1000}], &(0x7f0000000040)=[0x0, 0x8], 0x4}, 0x20) (async) r2 = socket$unix(0x1, 0x1, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/210, 0xd2, 0x40000101, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000140)={0x1, 'dvmrp1\x00', {}, 0x9}) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000001280)=@md0, 0xee01, &(0x7f0000001400)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x4, 0x4}, {}, {0x2}]}) open(0x0, 0x4ca040, 0xe) [ 982.533778][T18312] batadv_slave_0: entered promiscuous mode [ 982.543414][T18312] batadv_slave_0: left promiscuous mode [ 982.597812][T18312] batadv0: left promiscuous mode [ 982.653947][ T27] audit: type=1326 audit(1697456875.446:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18317 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:47:55 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xff7f00000000) [ 982.740939][T18324] batadv0: entered promiscuous mode 11:47:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system', 0x0, 0x0) dup3(r0, r1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) [ 982.804249][T18324] batadv_slave_0: entered promiscuous mode [ 982.811315][T18324] batadv_slave_0: left promiscuous mode [ 982.871801][T18324] batadv0: left promiscuous mode 11:47:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x5865, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:55 executing program 3: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1fd, 0x3, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="0d2b8bbbacd91040408dd148281b2407652b1eb33b73845e52950600"/41]) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000030f000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r10, 0xae80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 982.992333][ T27] audit: type=1326 audit(1697456875.796:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18328 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:47:56 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000012c0)={0x9, 0x0, &(0x7f0000001240)=[{&(0x7f0000000040)}, {&(0x7f00000000c0)=""/105, 0x69}, {&(0x7f0000001300)=""/208, 0xd0}, {&(0x7f0000000240)=""/4096, 0x1000}], &(0x7f0000000040)=[0x0, 0x8], 0x4}, 0x20) (async) r2 = socket$unix(0x1, 0x1, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/210, 0xd2, 0x40000101, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000140)={0x1, 'dvmrp1\x00', {}, 0x9}) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000001280)=@md0, 0xee01, &(0x7f0000001400)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x4, 0x4}, {}, {0x2}]}) open(0x0, 0x4ca040, 0xe) 11:47:56 executing program 5: pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x1}) pread64(r4, 0x0, 0x0, 0x0) dup3(r3, r4, 0x0) rt_sigreturn() prlimit64(0x0, 0x7, &(0x7f0000000100)={0x80000001, 0xfffffffffffffff8}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='gid_map\x00') fcntl$lock(r5, 0x0, &(0x7f00000004c0)) socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) 11:47:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xd00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 983.304073][T18335] batadv0: entered promiscuous mode [ 983.416858][T18335] batadv_slave_0: entered promiscuous mode [ 983.423938][T18335] batadv_slave_0: left promiscuous mode [ 983.533506][T18335] batadv0: left promiscuous mode [ 983.607138][T18350] batadv0: entered promiscuous mode [ 983.633931][T18350] batadv_slave_0: entered promiscuous mode [ 983.640913][T18350] batadv_slave_0: left promiscuous mode [ 983.648861][T18350] batadv0: left promiscuous mode 11:47:56 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x1000000000000) 11:47:56 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x6000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:47:56 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x1, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0xc2}], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x4, 0x101, 0xffff008e}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x1, 0x5, 0xc, 0xb}, {0x2, 0x1, 0xf, 0x8}, {0x1, 0x4, 0xb, 0x2}, {0x3, 0x3, 0xb, 0x3}, {0x3, 0x5, 0x6, 0xc}], 0x10, 0x101}, 0x90) fallocate(r0, 0xc, 0x6, 0x200000000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)) open(0x0, 0x0, 0x0) 11:47:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r0, &(0x7f0000000400)=@in={0x2, 0x4e23, @multicast2}, 0x80) 11:47:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xe00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 984.099519][T18354] batadv0: entered promiscuous mode [ 984.131672][ T27] audit: type=1326 audit(1697456876.896:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18352 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 984.173840][T18354] batadv_slave_0: entered promiscuous mode [ 984.180924][T18354] batadv_slave_0: left promiscuous mode 11:47:57 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x541b, &(0x7f0000001340)={0x0, "c8736fe2d21b8fa190a5950eafbd6dbb98358b042d0e49eb1aec1bbfeb20933a"}) [ 984.293203][ T27] audit: type=1326 audit(1697456877.066:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18358 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 984.298735][T18354] batadv0: left promiscuous mode [ 984.413796][T18361] batadv0: entered promiscuous mode [ 984.429528][T18361] batadv_slave_0: entered promiscuous mode [ 984.436965][T18361] batadv_slave_0: left promiscuous mode 11:47:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x60ff, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 984.519974][T18361] batadv0: left promiscuous mode 11:47:57 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 11:47:57 executing program 3: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1fd, 0x3, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="0d2b8bbbacd91040408dd148281b2407652b1eb33b73845e52950600"/41]) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000030f000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000000)) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000000)) (async, rerun: 64) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async, rerun: 64) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 984.720962][T18366] batadv0: entered promiscuous mode [ 984.759977][T18366] batadv_slave_0: entered promiscuous mode [ 984.767036][T18366] batadv_slave_0: left promiscuous mode 11:47:57 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xf00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 984.826666][T18366] batadv0: left promiscuous mode 11:47:57 executing program 5: syz_open_dev$dri(&(0x7f00000003c0), 0xfffffffffffffffd, 0x200) 11:47:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x4000000000000) [ 985.016919][T18374] batadv0: entered promiscuous mode 11:47:57 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x1, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0xc2}], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x4, 0x101, 0xffff008e}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x1, 0x5, 0xc, 0xb}, {0x2, 0x1, 0xf, 0x8}, {0x1, 0x4, 0xb, 0x2}, {0x3, 0x3, 0xb, 0x3}, {0x3, 0x5, 0x6, 0xc}], 0x10, 0x101}, 0x90) fallocate(r0, 0xc, 0x6, 0x200000000) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)) (async) open(0x0, 0x0, 0x0) [ 985.085389][T18374] batadv_slave_0: entered promiscuous mode [ 985.092430][T18374] batadv_slave_0: left promiscuous mode 11:47:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x6558, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 985.171275][T18374] batadv0: left promiscuous mode [ 985.272178][ T27] audit: type=1326 audit(1697456878.056:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18378 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:47:58 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x541b, 0x0) [ 985.356310][ T27] audit: type=1326 audit(1697456878.206:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18382 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 985.439845][T18385] batadv0: entered promiscuous mode [ 985.492069][T18385] batadv_slave_0: entered promiscuous mode [ 985.498880][T18385] batadv_slave_0: left promiscuous mode 11:47:58 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1021, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 985.569367][T18385] batadv0: left promiscuous mode 11:47:58 executing program 3: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1fd, 0x3, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="0d2b8bbbacd91040408dd148281b2407652b1eb33b73845e52950600"/41]) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000030f000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0xc, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000000)) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 11:47:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r0, &(0x7f0000000400)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) 11:47:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x6800, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 985.792458][T18390] batadv0: entered promiscuous mode [ 985.842962][T18390] batadv_slave_0: entered promiscuous mode [ 985.849781][T18390] batadv_slave_0: left promiscuous mode [ 985.891140][T18390] batadv0: left promiscuous mode 11:47:58 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x8, &(0x7f0000000840)=@raw=[@map_fd, @generic, @initr0, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000180)='syzkaller\x00'}, 0x90) 11:47:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x10000000000000) [ 986.094797][T18399] batadv0: entered promiscuous mode [ 986.171331][T18399] batadv_slave_0: entered promiscuous mode [ 986.178125][T18399] batadv_slave_0: left promiscuous mode 11:47:59 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1022, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 986.219999][T18399] batadv0: left promiscuous mode 11:47:59 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x1, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0xc2}], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x4, 0x101, 0xffff008e}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x1, 0x5, 0xc, 0xb}, {0x2, 0x1, 0xf, 0x8}, {0x1, 0x4, 0xb, 0x2}, {0x3, 0x3, 0xb, 0x3}, {0x3, 0x5, 0x6, 0xc}], 0x10, 0x101}, 0x90) fallocate(r0, 0xc, 0x6, 0x200000000) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)) open(0x0, 0x0, 0x0) 11:47:59 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl(r0, 0x1, &(0x7f0000000080)="bd68ab8d") [ 986.494795][T18408] batadv0: entered promiscuous mode [ 986.500784][ T27] audit: type=1326 audit(1697456879.286:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18405 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:47:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x6c00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 986.587425][ T27] audit: type=1326 audit(1697456879.386:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18409 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 986.636724][T18408] batadv_slave_0: entered promiscuous mode [ 986.651056][T18408] batadv_slave_0: left promiscuous mode 11:47:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x0, 0x0) fchown(r0, 0xee01, 0xffffffffffffffff) [ 986.741303][T18408] batadv0: left promiscuous mode [ 986.945932][T18415] batadv0: entered promiscuous mode [ 987.037215][T18415] batadv_slave_0: entered promiscuous mode [ 987.044605][T18415] batadv_slave_0: left promiscuous mode [ 987.123371][T18415] batadv0: left promiscuous mode 11:48:00 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x2, &(0x7f0000000840)=@raw=[@map_fd={0xe}], &(0x7f0000000180)='syzkaller\x00'}, 0x90) 11:48:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x3, 0x2) preadv(r4, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f0000000240)=""/160, 0xa0}, {&(0x7f0000000300)=""/252, 0xfc}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f0000000400)=""/131, 0x83}], 0x5, 0x2, 0x954b) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:48:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1023, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:00 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x6, &(0x7f0000000100)=[{0x1d, 0x0, 0x1, 0x800}, {0x702b, 0x2, 0x3}, {0x8, 0x7, 0x10}, {0x3, 0x5, 0x20, 0xf93d}, {0x20, 0x6, 0x1, 0xffff}, {0x0, 0x1f, 0x3f, 0x40}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x7, &(0x7f0000000040)=[{0x55d4, 0x80, 0x1, 0x86}, {0x5, 0x4, 0x7, 0x7fff}, {0x400, 0xff, 0x1, 0x671de7b0}, {0x7f, 0x9c, 0x5, 0x2}, {0x44f, 0x3a, 0xff, 0xffff0000}, {0x8, 0x4, 0x4, 0x5}, {0x8, 0x2, 0x9, 0xe0}]}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x735f}}, './file0\x00'}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000001080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000001100)={r3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={r3, 0x3, r5, 0x9, 0x80000}) open(0x0, 0x0, 0x0) 11:48:00 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x20000000000000) 11:48:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x6c03, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:00 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$binfmt_script(r0, 0x0, 0x0) [ 987.516399][ T27] audit: type=1326 audit(1697456880.286:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18423 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 987.525563][T18428] batadv0: entered promiscuous mode [ 987.608577][T18428] batadv_slave_0: entered promiscuous mode [ 987.615729][T18428] batadv_slave_0: left promiscuous mode [ 987.676231][T18428] batadv0: left promiscuous mode 11:48:00 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000001340)={0x2, "c8736fe2d21b8fa190a5950eafbd6dbb98358b042d0e49eb1aec1bbfeb20933a"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000880)={0x7, "01db091d1eea631c3b51f4360da8936afd54855672db450fb9eaea120f2bb62f"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x9, "065083e77a691c9d254dbc45f5f01b8257f3cbcd59936a6a6ad1d482dc953570"}) [ 987.943737][T18433] batadv0: entered promiscuous mode [ 987.965515][T18433] batadv_slave_0: entered promiscuous mode [ 987.974243][T18433] batadv_slave_0: left promiscuous mode [ 987.995915][T18433] batadv0: left promiscuous mode 11:48:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) (async) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x3, 0x2) (async) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x3, 0x2) preadv(r4, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f0000000240)=""/160, 0xa0}, {&(0x7f0000000300)=""/252, 0xfc}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f0000000400)=""/131, 0x83}], 0x5, 0x2, 0x954b) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000000)) (async) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:48:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1024, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:01 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40305829, 0x0) 11:48:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x6e03, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 988.330040][T18443] batadv0: entered promiscuous mode 11:48:01 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x60010000000000) [ 988.370639][T18443] batadv_slave_0: entered promiscuous mode [ 988.377460][T18443] batadv_slave_0: left promiscuous mode [ 988.437988][T18443] batadv0: left promiscuous mode 11:48:01 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x6, &(0x7f0000000100)=[{0x1d, 0x0, 0x1, 0x800}, {0x702b, 0x2, 0x3}, {0x8, 0x7, 0x10}, {0x3, 0x5, 0x20, 0xf93d}, {0x20, 0x6, 0x1, 0xffff}, {0x0, 0x1f, 0x3f, 0x40}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x7, &(0x7f0000000040)=[{0x55d4, 0x80, 0x1, 0x86}, {0x5, 0x4, 0x7, 0x7fff}, {0x400, 0xff, 0x1, 0x671de7b0}, {0x7f, 0x9c, 0x5, 0x2}, {0x44f, 0x3a, 0xff, 0xffff0000}, {0x8, 0x4, 0x4, 0x5}, {0x8, 0x2, 0x9, 0xe0}]}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x735f}}, './file0\x00'}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000001080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000080)) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000001100)={r3}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={r3, 0x3, r5, 0x9, 0x80000}) open(0x0, 0x0, 0x0) 11:48:01 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000880)={0x0, "01db091d1eea631c3b51f4360da8936afd54855672db450fb9eaea120f2bb62f", 0xffffffffffffffff}) dup2(r1, r0) [ 988.660431][ T27] audit: type=1326 audit(1697456881.476:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18450 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:48:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1100, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 988.778404][T18453] batadv0: entered promiscuous mode [ 988.826693][T18453] batadv_slave_0: entered promiscuous mode [ 988.834849][T18453] batadv_slave_0: left promiscuous mode [ 988.890866][T18453] batadv0: left promiscuous mode 11:48:01 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x2541, 0x0) fchown(r0, 0x0, 0x0) 11:48:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x3, 0x2) preadv(r4, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f0000000240)=""/160, 0xa0}, {&(0x7f0000000300)=""/252, 0xfc}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f0000000400)=""/131, 0x83}], 0x5, 0x2, 0x954b) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 989.123164][T18462] batadv0: entered promiscuous mode 11:48:02 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x7103, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 989.201654][T18462] batadv_slave_0: entered promiscuous mode [ 989.214709][T18462] batadv_slave_0: left promiscuous mode [ 989.271982][T18462] batadv0: left promiscuous mode 11:48:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x2, 0x2}) [ 989.450503][T18471] batadv0: entered promiscuous mode 11:48:02 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x80000000000000) [ 989.529471][T18471] batadv_slave_0: entered promiscuous mode [ 989.538729][T18471] batadv_slave_0: left promiscuous mode 11:48:02 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1140, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 989.639499][T18471] batadv0: left promiscuous mode [ 989.787065][ T27] audit: type=1326 audit(1697456882.606:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18474 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:48:02 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f00000022c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7b, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "e2"}, {0x5}, {0xd}, {0x6}, [@call_mgmt={0x5}, @dmm={0x7}]}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f00000000c0)=ANY=[]) [ 989.891563][T18478] batadv0: entered promiscuous mode 11:48:02 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x6, &(0x7f0000000100)=[{0x1d, 0x0, 0x1, 0x800}, {0x702b, 0x2, 0x3}, {0x8, 0x7, 0x10}, {0x3, 0x5, 0x20, 0xf93d}, {0x20, 0x6, 0x1, 0xffff}, {0x0, 0x1f, 0x3f, 0x40}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x7, &(0x7f0000000040)=[{0x55d4, 0x80, 0x1, 0x86}, {0x5, 0x4, 0x7, 0x7fff}, {0x400, 0xff, 0x1, 0x671de7b0}, {0x7f, 0x9c, 0x5, 0x2}, {0x44f, 0x3a, 0xff, 0xffff0000}, {0x8, 0x4, 0x4, 0x5}, {0x8, 0x2, 0x9, 0xe0}]}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x735f}}, './file0\x00'}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000001080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000001100)={r3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={r3, 0x3, r5, 0x9, 0x80000}) open(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x6, &(0x7f0000000100)=[{0x1d, 0x0, 0x1, 0x800}, {0x702b, 0x2, 0x3}, {0x8, 0x7, 0x10}, {0x3, 0x5, 0x20, 0xf93d}, {0x20, 0x6, 0x1, 0xffff}, {0x0, 0x1f, 0x3f, 0x40}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x7, &(0x7f0000000040)=[{0x55d4, 0x80, 0x1, 0x86}, {0x5, 0x4, 0x7, 0x7fff}, {0x400, 0xff, 0x1, 0x671de7b0}, {0x7f, 0x9c, 0x5, 0x2}, {0x44f, 0x3a, 0xff, 0xffff0000}, {0x8, 0x4, 0x4, 0x5}, {0x8, 0x2, 0x9, 0xe0}]}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x735f}}, './file0\x00'}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000001080)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000080)) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000001100)={r3}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={r3, 0x3, r5, 0x9, 0x80000}) (async) open(0x0, 0x0, 0x0) (async) [ 989.935442][T18478] batadv_slave_0: entered promiscuous mode [ 989.944053][T18478] batadv_slave_0: left promiscuous mode 11:48:02 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x7400, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 989.996475][T18478] batadv0: left promiscuous mode 11:48:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000040)={[0xef6]}, 0x8, 0x80000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f000000f000/0x4000)=nil) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 990.257579][T18484] batadv0: entered promiscuous mode 11:48:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x114e, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 990.321296][T18484] batadv_slave_0: entered promiscuous mode [ 990.328103][T18484] batadv_slave_0: left promiscuous mode [ 990.335629][ T775] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 990.404895][T18484] batadv0: left promiscuous mode [ 990.531803][T18494] batadv0: entered promiscuous mode [ 990.554217][T18494] batadv_slave_0: entered promiscuous mode [ 990.561352][T18494] batadv_slave_0: left promiscuous mode [ 990.590667][ T775] usb 6-1: Using ep0 maxpacket: 16 11:48:03 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x7a00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 990.629605][T18494] batadv0: left promiscuous mode 11:48:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000040)={[0xef6]}, 0x8, 0x80000) (async) prctl$PR_SET_MM(0x23, 0x4, &(0x7f000000f000/0x4000)=nil) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11:48:03 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xe0030000000000) [ 990.723253][ T775] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.733918][ T775] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 990.750051][ T775] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 990.760532][ T775] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 990.770587][ T775] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 11:48:03 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) open(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x80000, 0x2) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={{r1, r2/1000+60000}}) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000040)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x1, 'wlc\x00', 0x8, 0xb7, 0x76}, {@rand_addr=0x64010102, 0x4e24, 0x10000, 0x9, 0x917, 0xd3}}, 0x44) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x4b, 0x0, "26b40fe04b90cc1415f2b6346a656b7e63bbd654ba3d30961d44ef4b76d089eb9b16c4ce209add3045b6a6fa7f6713d39835f18d11adeb4596f22c1520637c1bfd9cec268658edc17723451009514f7b"}, 0xd8) [ 990.890757][T18496] batadv0: entered promiscuous mode [ 990.911601][ T775] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 990.921118][ T775] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 990.929425][ T775] usb 6-1: Manufacturer: syz [ 990.952388][T18496] batadv_slave_0: entered promiscuous mode [ 990.959222][T18496] batadv_slave_0: left promiscuous mode [ 991.013247][ T775] usb 6-1: config 0 descriptor?? [ 991.036395][ T27] audit: type=1326 audit(1697456883.886:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18498 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 991.064012][T18496] batadv0: left promiscuous mode 11:48:04 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1200, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 991.116241][ T27] audit: type=1326 audit(1697456883.976:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18501 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 11:48:04 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x7c10, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) (async) signalfd4(r2, &(0x7f0000000040)={[0xef6]}, 0x8, 0x80000) (async) prctl$PR_SET_MM(0x23, 0x4, &(0x7f000000f000/0x4000)=nil) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 991.466798][T18511] batadv0: entered promiscuous mode [ 991.484488][T18480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.495024][T18480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.654460][T18511] batadv_slave_0: entered promiscuous mode [ 991.667571][T18511] batadv_slave_0: left promiscuous mode [ 991.732487][ T775] rc_core: IR keymap rc-hauppauge not found [ 991.738785][ T775] Registered IR keymap rc-empty [ 991.746131][ T775] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 991.806295][T18511] batadv0: left promiscuous mode [ 991.842288][ T775] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 991.892653][ T775] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 991.908897][ T775] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input5 [ 991.958719][ T775] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 992.028068][ T775] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 992.084607][ T775] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 992.130024][ T775] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 992.154405][T18514] batadv0: entered promiscuous mode [ 992.178394][ T775] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 992.231025][T18514] batadv_slave_0: entered promiscuous mode [ 992.231251][ T775] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 992.237850][T18514] batadv_slave_0: left promiscuous mode [ 992.291702][T18514] batadv0: left promiscuous mode [ 992.314357][ T775] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 992.353575][ T775] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 992.391139][ T775] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 992.426664][ T775] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 992.473883][ T775] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 992.489260][ T775] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 992.518142][ T775] usb 6-1: USB disconnect, device number 8 11:48:05 executing program 5: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 11:48:05 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x100000000000000) 11:48:05 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async) open(0x0, 0x0, 0x0) (async) r0 = socket$inet(0x2, 0x80000, 0x2) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={{r1, r2/1000+60000}}) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000040)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x1, 'wlc\x00', 0x8, 0xb7, 0x76}, {@rand_addr=0x64010102, 0x4e24, 0x10000, 0x9, 0x917, 0xd3}}, 0x44) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x4b, 0x0, "26b40fe04b90cc1415f2b6346a656b7e63bbd654ba3d30961d44ef4b76d089eb9b16c4ce209add3045b6a6fa7f6713d39835f18d11adeb4596f22c1520637c1bfd9cec268658edc17723451009514f7b"}, 0xd8) 11:48:05 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400000, 0x58) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000005000000180800004b26c89d163e8d9d210bbaf0702c5865746696b9db10a26a2a578577938955f38746527de45065dbc6188ce62f8d258f280764f84ab6af5b86252d853ffca8e7511190997502670d3e694e0dd5f545dc", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:48:05 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1223, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x7d10, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 993.042466][T18525] batadv0: entered promiscuous mode [ 993.110031][ T27] audit: type=1326 audit(1697456885.916:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18530 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 993.114530][T18525] batadv_slave_0: entered promiscuous mode 11:48:06 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400000, 0x58) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000005000000180800004b26c89d163e8d9d210bbaf0702c5865746696b9db10a26a2a578577938955f38746527de45065dbc6188ce62f8d258f280764f84ab6af5b86252d853ffca8e7511190997502670d3e694e0dd5f545dc", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async, rerun: 64) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 993.135886][ T27] audit: type=1326 audit(1697456885.936:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18524 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 993.139498][T18525] batadv_slave_0: left promiscuous mode 11:48:06 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40305839, 0x0) [ 993.237967][T18525] batadv0: left promiscuous mode [ 993.361408][T18533] batadv0: entered promiscuous mode [ 993.383069][T18533] batadv_slave_0: entered promiscuous mode [ 993.389875][T18533] batadv_slave_0: left promiscuous mode 11:48:06 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400000, 0x58) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000005000000180800004b26c89d163e8d9d210bbaf0702c5865746696b9db10a26a2a578577938955f38746527de45065dbc6188ce62f8d258f280764f84ab6af5b86252d853ffca8e7511190997502670d3e694e0dd5f545dc", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:48:06 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1224, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 993.454718][T18533] batadv0: left promiscuous mode 11:48:06 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 993.661287][T18544] batadv0: entered promiscuous mode [ 993.681381][T18544] batadv_slave_0: entered promiscuous mode [ 993.688198][T18544] batadv_slave_0: left promiscuous mode 11:48:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x7e10, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 993.706918][T18544] batadv0: left promiscuous mode 11:48:06 executing program 5: clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x8401, 0x0) 11:48:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x200000000000000) 11:48:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f00000000c0)="360fbe12360f01c5b893000f00d866b9870400000f320f01ca2ef30f2af90f08670f209aa566b94103000066b80010000066ba000000000f30", 0x39}], 0x1, 0x1, &(0x7f0000000300), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000001c0)="0fc72f66b9a00d000066b80100000066ba000000000f30670fc73d0b00000066b8c68f66cc0f23d00f21f866351000000c0f23f866b8344f00000f23d00f21f866352000000c0f23f80f01cf67260f32b800008ec00f014d00f30f1ef2", 0x5d}], 0x1, 0xf, &(0x7f00000000c0), 0x0) 11:48:06 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1b02, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:06 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) open(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x80000, 0x2) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={{r1, r2/1000+60000}}) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000040)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x1, 'wlc\x00', 0x8, 0xb7, 0x76}, {@rand_addr=0x64010102, 0x4e24, 0x10000, 0x9, 0x917, 0xd3}}, 0x44) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x4b, 0x0, "26b40fe04b90cc1415f2b6346a656b7e63bbd654ba3d30961d44ef4b76d089eb9b16c4ce209add3045b6a6fa7f6713d39835f18d11adeb4596f22c1520637c1bfd9cec268658edc17723451009514f7b"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x4b, 0x0, "26b40fe04b90cc1415f2b6346a656b7e63bbd654ba3d30961d44ef4b76d089eb9b16c4ce209add3045b6a6fa7f6713d39835f18d11adeb4596f22c1520637c1bfd9cec268658edc17723451009514f7b"}, 0xd8) [ 994.009758][T18550] batadv0: entered promiscuous mode [ 994.075006][T18550] batadv_slave_0: entered promiscuous mode [ 994.082201][T18550] batadv_slave_0: left promiscuous mode [ 994.160928][T18550] batadv0: left promiscuous mode 11:48:07 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000001340)={0x0, "c8736fe2d21b8fa190a5950eafbd6dbb98358b042d0e49eb1aec1bbfeb20933a", 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) [ 994.289259][T18556] batadv0: entered promiscuous mode [ 994.328945][ T27] audit: type=1326 audit(1697456887.096:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18555 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 994.351969][ T27] audit: type=1326 audit(1697456887.106:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18555 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 994.374835][ T27] audit: type=1326 audit(1697456887.156:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18559 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 994.415908][T18556] batadv_slave_0: entered promiscuous mode [ 994.425997][T18556] batadv_slave_0: left promiscuous mode 11:48:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x8100, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:07 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x400, 0x0, 0x1}, {0xfff9}, {0x6}]}) open(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x800) [ 994.508186][T18556] batadv0: left promiscuous mode [ 994.659325][T18571] batadv0: entered promiscuous mode [ 994.711438][T18571] batadv_slave_0: entered promiscuous mode [ 994.718273][T18571] batadv_slave_0: left promiscuous mode [ 994.756862][T18571] batadv0: left promiscuous mode 11:48:07 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1e02, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:07 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x400, 0x0, 0x1}, {0xfff9}, {0x6}]}) (async) open(0x0, 0x0, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x800) [ 995.028958][T18575] batadv0: entered promiscuous mode 11:48:08 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x8847, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 995.117381][T18575] batadv_slave_0: entered promiscuous mode [ 995.124390][T18575] batadv_slave_0: left promiscuous mode 11:48:08 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x204000000000000) 11:48:08 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x400, 0x0, 0x1}, {0xfff9}, {0x6}]}) open(0x0, 0x0, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x800) [ 995.251744][T18575] batadv0: left promiscuous mode [ 995.395902][ T27] audit: type=1326 audit(1697456888.246:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18579 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:48:08 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x226240, 0x0) ppoll(&(0x7f0000000100)=[{r0}, {}], 0x2, 0x0, 0x0, 0x0) [ 995.534143][T18585] batadv0: entered promiscuous mode 11:48:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000240)) (async) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f00000000c0)="360fbe12360f01c5b893000f00d866b9870400000f320f01ca2ef30f2af90f08670f209aa566b94103000066b80010000066ba000000000f30", 0x39}], 0x1, 0x1, &(0x7f0000000300), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000001c0)="0fc72f66b9a00d000066b80100000066ba000000000f30670fc73d0b00000066b8c68f66cc0f23d00f21f866351000000c0f23f866b8344f00000f23d00f21f866352000000c0f23f80f01cf67260f32b800008ec00f014d00f30f1ef2", 0x5d}], 0x1, 0xf, &(0x7f00000000c0), 0x0) 11:48:08 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) finit_module(r2, &(0x7f0000000040)='([,{.\x00', 0x2) 11:48:08 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 995.668719][T18585] batadv_slave_0: entered promiscuous mode [ 995.675687][T18585] batadv_slave_0: left promiscuous mode 11:48:08 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x8, &(0x7f0000000840)=@raw=[@map_fd, @generic, @initr0, @cb_func, @func], &(0x7f0000000180)='syzkaller\x00'}, 0x8f) [ 995.813410][T18585] batadv0: left promiscuous mode [ 995.974865][ T27] audit: type=1326 audit(1697456888.806:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18590 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 996.056906][T18591] batadv0: entered promiscuous mode 11:48:08 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x7, &(0x7f0000000840)=@raw=[@map_fd={0x6}, @generic, @initr0, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000180)='syzkaller\x00'}, 0x90) [ 996.119371][T18591] batadv_slave_0: entered promiscuous mode [ 996.127444][T18591] batadv_slave_0: left promiscuous mode 11:48:09 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x8848, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:09 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x300000000000000) [ 996.251831][T18591] batadv0: left promiscuous mode 11:48:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) (async) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f00000000c0)="360fbe12360f01c5b893000f00d866b9870400000f320f01ca2ef30f2af90f08670f209aa566b94103000066b80010000066ba000000000f30", 0x39}], 0x1, 0x1, &(0x7f0000000300), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000030c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01310f350f093e3e0f01cfd9ec2e0f01d1640f0f70001db8be0f8ec066f283f9f50f20e06635200000000f22e0", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000001c0)="0fc72f66b9a00d000066b80100000066ba000000000f30670fc73d0b00000066b8c68f66cc0f23d00f21f866351000000c0f23f866b8344f00000f23d00f21f866352000000c0f23f80f01cf67260f32b800008ec00f014d00f30f1ef2", 0x5d}], 0x1, 0xf, &(0x7f00000000c0), 0x0) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000001c0)="0fc72f66b9a00d000066b80100000066ba000000000f30670fc73d0b00000066b8c68f66cc0f23d00f21f866351000000c0f23f866b8344f00000f23d00f21f866352000000c0f23f80f01cf67260f32b800008ec00f014d00f30f1ef2", 0x5d}], 0x1, 0xf, &(0x7f00000000c0), 0x0) [ 996.434301][T18608] batadv0: entered promiscuous mode 11:48:09 executing program 5: r0 = eventfd2(0x0, 0x0) io_setup(0x1, &(0x7f0000000280)=0x0) eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000840)=[&(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x0, r0, 0x0}]) 11:48:09 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2110, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 996.515424][ T27] audit: type=1326 audit(1697456889.306:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18607 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 996.519183][T18608] batadv_slave_0: entered promiscuous mode [ 996.545349][T18608] batadv_slave_0: left promiscuous mode [ 996.639172][T18608] batadv0: left promiscuous mode 11:48:09 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x9d00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 996.877721][T18620] batadv0: entered promiscuous mode 11:48:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [], 0xffffffffffffffff}, 0x18, 0x0) [ 996.923761][T18620] batadv_slave_0: entered promiscuous mode [ 996.930745][T18620] batadv_slave_0: left promiscuous mode [ 996.999689][T18620] batadv0: left promiscuous mode 11:48:09 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) (async) open(0x0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) finit_module(r2, &(0x7f0000000040)='([,{.\x00', 0x2) [ 997.157923][T18623] batadv0: entered promiscuous mode [ 997.212786][T18623] batadv_slave_0: entered promiscuous mode [ 997.219575][T18623] batadv_slave_0: left promiscuous mode 11:48:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2200, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:10 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000001340)={0x0, "c8736fe2d21b8fa190a5950eafbd6dbb98358b042d0e49eb1aec1bbfeb20933a", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000000)={"29573924b053c2a545f5b9e322d3d677d289471295500e492685c5a3c7a21b43"}) [ 997.323184][T18623] batadv0: left promiscuous mode [ 997.335429][ T27] audit: type=1326 audit(1697456890.116:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18626 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 11:48:10 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x400000000000000) [ 997.582978][T18633] batadv0: entered promiscuous mode 11:48:10 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000001340)={0x2, "c8736fe2d21b8fa190a5950eafbd6dbb98358b042d0e49eb1aec1bbfeb20933a"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x40045701, &(0x7f0000000880)={0x0, "01db091d1eea631c3b51f4360da8936afd54855672db450fb9eaea120f2bb62f"}) 11:48:10 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xb803, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 997.647499][T18633] batadv_slave_0: entered promiscuous mode [ 997.654560][T18633] batadv_slave_0: left promiscuous mode [ 997.657243][ T27] audit: type=1326 audit(1697456890.486:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18635 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 997.716247][T18633] batadv0: left promiscuous mode 11:48:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x0, 0x0, 0xfff}, 0x48) 11:48:10 executing program 5: syz_clone(0x0, 0x0, 0x0, &(0x7f0000007080), 0x0, &(0x7f0000007100)) [ 998.003458][T18640] batadv0: entered promiscuous mode 11:48:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2210, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 998.073725][T18640] batadv_slave_0: entered promiscuous mode [ 998.080954][T18640] batadv_slave_0: left promiscuous mode 11:48:11 executing program 3: syz_clone(0x0, 0x0, 0x0, &(0x7f0000007080), &(0x7f00000070c0), &(0x7f0000007100)) [ 998.177023][T18640] batadv0: left promiscuous mode [ 998.297960][T18648] batadv0: entered promiscuous mode 11:48:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) (async) open(0x0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) finit_module(r2, &(0x7f0000000040)='([,{.\x00', 0x2) [ 998.372050][T18648] batadv_slave_0: entered promiscuous mode [ 998.378874][T18648] batadv_slave_0: left promiscuous mode 11:48:11 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xd605, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 998.468042][T18648] batadv0: left promiscuous mode 11:48:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) sendmsg$unix(r0, 0x0, 0x0) 11:48:11 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003940)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000007280)) 11:48:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x500000000000000) [ 998.666098][ T27] audit: type=1326 audit(1697456891.486:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18651 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 998.776585][T18654] batadv0: entered promiscuous mode 11:48:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2310, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 998.820984][T18654] batadv_slave_0: entered promiscuous mode [ 998.827777][T18654] batadv_slave_0: left promiscuous mode [ 998.909416][T18654] batadv0: left promiscuous mode [ 998.921617][ T27] audit: type=1326 audit(1697456891.726:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18660 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:48:11 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigreturn() r0 = syz_clone(0x0, 0x0, 0xf, 0x0, 0x0, 0x0) ptrace$peeksig(0x10, r0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2000, 0x13e) syz_clone3(0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) 11:48:11 executing program 5: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000005d00)='devices.deny\x00', 0x2, 0x0) [ 999.168124][T18666] batadv0: entered promiscuous mode 11:48:12 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x1, 0x100) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={0x0, 0x0, 0x5}) open(0x0, 0x0, 0x0) 11:48:12 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xff7f, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 999.266361][T18666] batadv_slave_0: entered promiscuous mode [ 999.273308][T18666] batadv_slave_0: left promiscuous mode 11:48:12 executing program 5: syz_clone(0x0, 0x0, 0x0, &(0x7f0000007080), 0x0, 0x0) [ 999.359939][T18666] batadv0: left promiscuous mode [ 999.494564][ T27] audit: type=1326 audit(1697456892.276:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 999.611193][T18680] batadv0: entered promiscuous mode 11:48:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)) [ 999.665431][T18680] batadv_slave_0: entered promiscuous mode [ 999.672897][T18680] batadv_slave_0: left promiscuous mode 11:48:12 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x600000000000000) [ 999.736991][T18680] batadv0: left promiscuous mode 11:48:12 executing program 3: pipe2$9p(&(0x7f00000059c0), 0x80000) 11:48:12 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2312, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:12 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x3ffff, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 999.966404][ T27] audit: type=1326 audit(1697456892.776:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18683 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:48:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) accept$unix(r0, 0x0, 0x0) [ 1000.073526][T18689] batadv0: entered promiscuous mode 11:48:13 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000005dc0)='cpuacct.usage_all\x00', 0x0, 0x0) [ 1000.166634][T18689] batadv_slave_0: entered promiscuous mode [ 1000.175438][T18689] batadv_slave_0: left promiscuous mode [ 1000.231044][T18689] batadv0: left promiscuous mode 11:48:13 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x1, 0x100) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={0x0, 0x0, 0x5}) open(0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) 11:48:13 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007100)) [ 1000.400896][T18691] batadv0: entered promiscuous mode [ 1000.482823][T18691] batadv_slave_0: entered promiscuous mode [ 1000.489659][T18691] batadv_slave_0: left promiscuous mode 11:48:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8918, &(0x7f0000002880)) [ 1000.603312][T18691] batadv0: left promiscuous mode 11:48:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2400, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1000.646306][ T27] audit: type=1326 audit(1697456893.486:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18696 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 11:48:13 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x604000000000000) [ 1000.799082][T18704] batadv0: entered promiscuous mode [ 1000.814915][T18704] batadv_slave_0: entered promiscuous mode [ 1000.821805][T18704] batadv_slave_0: left promiscuous mode [ 1000.842553][T18704] batadv0: left promiscuous mode 11:48:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x40049409, 0x0) 11:48:13 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x40000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:13 executing program 5: getresuid(&(0x7f0000001640), &(0x7f0000001680), &(0x7f00000016c0)) 11:48:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2410, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1001.166927][ T27] audit: type=1326 audit(1697456893.976:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18707 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1001.265212][T18711] batadv0: entered promiscuous mode [ 1001.320994][T18711] batadv_slave_0: entered promiscuous mode [ 1001.327808][T18711] batadv_slave_0: left promiscuous mode 11:48:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8940, &(0x7f0000002880)) [ 1001.363246][T18711] batadv0: left promiscuous mode [ 1001.463681][T18716] batadv0: entered promiscuous mode 11:48:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8983, &(0x7f0000002880)) 11:48:14 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x1, 0x100) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={0x0, 0x0, 0x5}) open(0x0, 0x0, 0x0) [ 1001.526852][T18716] batadv_slave_0: entered promiscuous mode [ 1001.533785][T18716] batadv_slave_0: left promiscuous mode 11:48:14 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x80000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1001.599461][T18716] batadv0: left promiscuous mode 11:48:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8922, &(0x7f0000002880)) 11:48:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) readv(r0, &(0x7f0000001740)=[{&(0x7f0000000480)=""/144, 0x90}, {0x0}, {0x0}], 0x3) [ 1001.813437][ T27] audit: type=1326 audit(1697456894.596:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18720 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 1001.886856][T18725] batadv0: entered promiscuous mode 11:48:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2412, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1001.967303][T18725] batadv_slave_0: entered promiscuous mode [ 1001.975292][T18725] batadv_slave_0: left promiscuous mode 11:48:14 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x700000000000000) [ 1002.026957][T18725] batadv0: left promiscuous mode [ 1002.093459][T18731] batadv0: mtu less than device minimum 11:48:15 executing program 3: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, 0x0, 0x0) [ 1002.179052][T18729] batadv0: entered promiscuous mode 11:48:15 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x100000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1002.247972][T18729] batadv_slave_0: entered promiscuous mode [ 1002.255961][T18729] batadv_slave_0: left promiscuous mode [ 1002.263628][ T27] audit: type=1326 audit(1697456895.086:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18732 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1002.287937][T18729] batadv0: left promiscuous mode [ 1002.460595][T18737] batadv0: entered promiscuous mode [ 1002.501011][T18737] batadv_slave_0: entered promiscuous mode [ 1002.507905][T18737] batadv_slave_0: left promiscuous mode 11:48:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup3(r1, r0, 0x80000) 11:48:15 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2500, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1002.566591][T18737] batadv0: left promiscuous mode 11:48:15 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) [ 1002.865924][T18742] batadv0: entered promiscuous mode 11:48:15 executing program 3: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, 0x0) [ 1002.903854][ T27] audit: type=1326 audit(1697456895.716:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18743 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 1002.933414][T18742] batadv_slave_0: entered promiscuous mode [ 1002.940427][T18742] batadv_slave_0: left promiscuous mode 11:48:15 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xe0ffff, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:15 executing program 5: syz_open_dev$vcsn(&(0x7f0000000300), 0x0, 0x40) [ 1003.070688][T18742] batadv0: left promiscuous mode 11:48:16 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x800000000000000) 11:48:16 executing program 3: syz_open_dev$vcsa(&(0x7f0000001dc0), 0x0, 0x43c281) [ 1003.258574][T18752] batadv0: entered promiscuous mode 11:48:16 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2f00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1003.347768][T18752] batadv_slave_0: entered promiscuous mode [ 1003.354733][T18752] batadv_slave_0: left promiscuous mode 11:48:16 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) [ 1003.415840][T18752] batadv0: left promiscuous mode [ 1003.425507][ T27] audit: type=1326 audit(1697456896.246:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18754 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:48:16 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:16 executing program 3: pselect6(0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)={0x0, 0x989680}, 0x0) [ 1003.646006][T18760] batadv0: entered promiscuous mode [ 1003.714383][T18760] batadv_slave_0: entered promiscuous mode [ 1003.721299][T18760] batadv_slave_0: left promiscuous mode [ 1003.766001][T18760] batadv0: left promiscuous mode 11:48:16 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f0000000700), 0x31d802, 0x0) 11:48:16 executing program 3: pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1003.961488][T18765] batadv0: entered promiscuous mode 11:48:16 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async) open(0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) (async) 11:48:16 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x3a00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1004.073552][T18765] batadv_slave_0: entered promiscuous mode [ 1004.080571][T18765] batadv_slave_0: left promiscuous mode 11:48:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) [ 1004.121082][T18765] batadv0: left promiscuous mode 11:48:17 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x900000000000000) 11:48:17 executing program 3: socketpair(0x29, 0x2, 0x91, &(0x7f0000000080)) [ 1004.356074][ T27] audit: type=1326 audit(1697456897.156:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18770 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 1004.394539][T18774] batadv0: entered promiscuous mode [ 1004.431750][T18774] batadv_slave_0: entered promiscuous mode [ 1004.438542][T18774] batadv_slave_0: left promiscuous mode 11:48:17 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1004.460600][ T27] audit: type=1326 audit(1697456897.266:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:48:17 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000002140)='/sys/class/nvme-generic', 0xa41, 0x0) [ 1004.514469][T18774] batadv0: left promiscuous mode 11:48:17 executing program 3: openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x4000) [ 1004.766846][T18786] batadv0: entered promiscuous mode 11:48:17 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x3f00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1004.849695][T18786] batadv_slave_0: entered promiscuous mode [ 1004.856888][T18786] batadv_slave_0: left promiscuous mode [ 1004.901726][T18786] batadv0: left promiscuous mode 11:48:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89b0, &(0x7f0000002880)) 11:48:17 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async) open(0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) (async) 11:48:17 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/tpm_crb', 0x644a00, 0x0) 11:48:18 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x3000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1005.236992][ T27] audit: type=1326 audit(1697456898.046:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18795 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 11:48:18 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:18 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x801c581f, 0x0) 11:48:18 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xa00000000000000) [ 1005.477117][T18806] batadv0: entered promiscuous mode [ 1005.488500][ T27] audit: type=1326 audit(1697456898.286:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18795 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 1005.556583][T18806] batadv_slave_0: entered promiscuous mode [ 1005.563886][T18806] batadv_slave_0: left promiscuous mode 11:48:18 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000100)={0x0, 0x0, @status}) fstatfs(r0, &(0x7f0000000000)=""/218) [ 1005.609752][T18806] batadv0: left promiscuous mode 11:48:18 executing program 5: pselect6(0x40, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) [ 1005.753695][T18813] batadv0: entered promiscuous mode 11:48:18 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) readv(r0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}], 0x3) [ 1005.843062][T18813] batadv_slave_0: entered promiscuous mode [ 1005.849850][T18813] batadv_slave_0: left promiscuous mode [ 1005.916090][T18813] batadv0: left promiscuous mode 11:48:18 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:18 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000140)=[{0x1d, 0x0, 0x1}, {}, {0x6}, {0x7f, 0xa1, 0x85, 0xfff}]}) open(0x0, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) 11:48:19 executing program 3: syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0x408000) [ 1006.177072][T18821] batadv0: entered promiscuous mode [ 1006.237750][T18821] batadv_slave_0: entered promiscuous mode [ 1006.247123][T18821] batadv_slave_0: left promiscuous mode 11:48:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4011, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1006.314358][T18821] batadv0: left promiscuous mode 11:48:19 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000140)=[{0x1d, 0x0, 0x1}, {}, {0x6}, {0x7f, 0xa1, 0x85, 0xfff}]}) open(0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) 11:48:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xb00000000000000) 11:48:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x40086602, 0x0) [ 1006.590697][T18828] batadv0: entered promiscuous mode [ 1006.638894][T18828] batadv_slave_0: entered promiscuous mode [ 1006.646173][T18828] batadv_slave_0: left promiscuous mode 11:48:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x5000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1006.703038][T18828] batadv0: left promiscuous mode 11:48:19 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000140)=[{0x1d, 0x0, 0x1}, {}, {0x6}, {0x7f, 0xa1, 0x85, 0xfff}]}) open(0x0, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) 11:48:19 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89a0, &(0x7f0000002880)) [ 1006.834792][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1006.834854][ T27] audit: type=1326 audit(1697456899.696:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18830 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:48:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8923, &(0x7f0000002880)) [ 1006.962241][T18835] batadv0: entered promiscuous mode [ 1007.032974][T18835] batadv_slave_0: entered promiscuous mode [ 1007.039790][T18835] batadv_slave_0: left promiscuous mode 11:48:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4788, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1007.078720][T18835] batadv0: left promiscuous mode 11:48:20 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x669ac50e2ab3ca24}}, './file0\x00'}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000180)={0x8663, 0xa8c, 0xf4, 0x1, 0x9, "7af949fb147be9861ab2c5c070048a50b30bef"}) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f5, 0x300, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000809) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) open(0x0, 0x8200, 0x20) 11:48:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x80108906, 0x0) 11:48:20 executing program 5: memfd_create(&(0x7f0000002b80)='/dev/nvme-fabrics\x00', 0x4) 11:48:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x6000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1007.396960][T18845] batadv0: entered promiscuous mode [ 1007.470350][T18845] batadv_slave_0: entered promiscuous mode [ 1007.477167][T18845] batadv_slave_0: left promiscuous mode [ 1007.521534][ T27] audit: type=1326 audit(1697456900.326:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18842 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 1007.577056][T18845] batadv0: left promiscuous mode 11:48:20 executing program 5: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) 11:48:20 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xc00000000000000) [ 1007.726796][T18851] batadv0: entered promiscuous mode 11:48:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8995, &(0x7f0000002880)) [ 1007.806327][T18851] batadv_slave_0: entered promiscuous mode [ 1007.813327][T18851] batadv_slave_0: left promiscuous mode 11:48:20 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4800, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1007.857951][T18851] batadv0: left promiscuous mode 11:48:20 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="c3fa2d169d195aa18f"]) [ 1007.962601][ T27] audit: type=1326 audit(1697456900.786:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18854 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:48:20 executing program 3: pipe2(&(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r0, 0x0) 11:48:21 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x7000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:21 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xd00000000000000) [ 1008.223112][T18861] batadv0: entered promiscuous mode [ 1008.293992][T18861] batadv_slave_0: entered promiscuous mode [ 1008.301635][T18861] batadv_slave_0: left promiscuous mode 11:48:21 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x669ac50e2ab3ca24}}, './file0\x00'}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000180)={0x8663, 0xa8c, 0xf4, 0x1, 0x9, "7af949fb147be9861ab2c5c070048a50b30bef"}) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f5, 0x300, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000809) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) open(0x0, 0x8200, 0x20) pipe(&(0x7f0000000100)) (async) pipe2$watch_queue(&(0x7f00000001c0), 0x80) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x669ac50e2ab3ca24}}, './file0\x00'}) (async) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000180)={0x8663, 0xa8c, 0xf4, 0x1, 0x9, "7af949fb147be9861ab2c5c070048a50b30bef"}) (async) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f5, 0x300, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000809) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async) open(0x0, 0x8200, 0x20) (async) [ 1008.352088][T18861] batadv0: left promiscuous mode 11:48:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89b1, &(0x7f0000002880)) 11:48:21 executing program 3: ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000580)={0x0, "42c4dc44da56e6c0e3c4c3746f45b52e"}) getresuid(&(0x7f0000001640), &(0x7f0000001680), 0x0) [ 1008.497498][ T27] audit: type=1326 audit(1697456901.296:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18866 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1008.508332][T18868] batadv0: entered promiscuous mode 11:48:21 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4888, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1008.653554][T18868] batadv_slave_0: entered promiscuous mode [ 1008.664545][T18868] batadv_slave_0: left promiscuous mode 11:48:21 executing program 3: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r0) [ 1008.731082][T18868] batadv0: left promiscuous mode [ 1008.734420][ T27] audit: type=1326 audit(1697456901.566:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18871 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 1008.850673][T18878] batadv0: entered promiscuous mode 11:48:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f00000027c0)={0x74, 0x0, 0xffea12c6863b19d}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 11:48:21 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x8000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1008.914384][T18878] batadv_slave_0: entered promiscuous mode [ 1008.922942][T18878] batadv_slave_0: left promiscuous mode [ 1008.978204][T18878] batadv0: left promiscuous mode 11:48:21 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8902, &(0x7f0000002880)) 11:48:22 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x669ac50e2ab3ca24}}, './file0\x00'}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000180)={0x8663, 0xa8c, 0xf4, 0x1, 0x9, "7af949fb147be9861ab2c5c070048a50b30bef"}) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f5, 0x300, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000809) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async, rerun: 32) open(0x0, 0x8200, 0x20) [ 1009.233118][T18889] batadv0: entered promiscuous mode 11:48:22 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4a00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1009.295497][T18889] batadv_slave_0: entered promiscuous mode [ 1009.302531][T18889] batadv_slave_0: left promiscuous mode 11:48:22 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xe00000000000000) [ 1009.348308][T18889] batadv0: left promiscuous mode 11:48:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8941, 0x0) [ 1009.609730][T18896] batadv0: entered promiscuous mode [ 1009.634398][ T27] audit: type=1326 audit(1697456902.456:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18894 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1009.657341][ T27] audit: type=1326 audit(1697456902.466:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18893 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f77d067cae9 code=0x0 11:48:22 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8942, &(0x7f0000002880)) [ 1009.665316][T18896] batadv_slave_0: entered promiscuous mode [ 1009.693309][T18896] batadv_slave_0: left promiscuous mode 11:48:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x9000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1009.762617][T18896] batadv0: left promiscuous mode 11:48:22 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8994, &(0x7f0000002880)) [ 1010.011129][T18905] batadv0: entered promiscuous mode 11:48:22 executing program 3: openat$hwrng(0xffffffffffffff9c, 0x0, 0x200000, 0x0) [ 1010.043778][T18905] batadv_slave_0: entered promiscuous mode [ 1010.051014][T18905] batadv_slave_0: left promiscuous mode [ 1010.079265][T18905] batadv0: left promiscuous mode 11:48:23 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4c00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:23 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xa000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1010.358676][T18911] batadv0: entered promiscuous mode 11:48:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0xc020660b, 0x0) 11:48:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f66696c6530200f2040252d2f917b4040285da7205b66280a586ea32e6facdc5f352c97ec1b62c35a02f203b477dd9be0b81695a921b635763e0dd2f109fd"], 0x101d) [ 1010.454975][T18911] batadv_slave_0: entered promiscuous mode [ 1010.463879][T18911] batadv_slave_0: left promiscuous mode 11:48:23 executing program 2: open(0x0, 0x0, 0x0) 11:48:23 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x1000000000000000) [ 1010.523621][T18911] batadv0: left promiscuous mode [ 1010.675247][T18913] batadv0: entered promiscuous mode 11:48:23 executing program 5: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x4a00, 0x0) [ 1010.779676][T18913] batadv_slave_0: entered promiscuous mode [ 1010.786646][T18913] batadv_slave_0: left promiscuous mode 11:48:23 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4e11, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5452, &(0x7f0000002880)) [ 1010.819216][ T27] audit: type=1326 audit(1697456903.606:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18918 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1010.860872][T18913] batadv0: left promiscuous mode 11:48:23 executing program 2: open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) (async) [ 1011.052354][T18926] batadv0: entered promiscuous mode 11:48:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8949, &(0x7f0000002880)) [ 1011.153156][T18926] batadv_slave_0: entered promiscuous mode [ 1011.159959][T18926] batadv_slave_0: left promiscuous mode 11:48:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xb000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1011.249896][T18926] batadv0: left promiscuous mode 11:48:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x2, &(0x7f0000002880)) 11:48:24 executing program 2: open(0x0, 0x0, 0x0) 11:48:24 executing program 3: pipe2(&(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, 0x0, 0x0) 11:48:24 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x5000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:24 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 1011.624879][T18936] batadv0: entered promiscuous mode 11:48:24 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x1100000000000000) [ 1011.657535][T18936] batadv_slave_0: entered promiscuous mode [ 1011.666094][T18936] batadv_slave_0: left promiscuous mode 11:48:24 executing program 2: open(0x0, 0x0, 0x0) [ 1011.793353][T18936] batadv0: left promiscuous mode 11:48:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x401c5820, &(0x7f0000002880)) 11:48:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8904, 0x0) [ 1011.909073][ T27] audit: type=1326 audit(1697456904.716:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18945 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1012.086132][T18944] batadv0: entered promiscuous mode 11:48:25 executing program 2: open(0x0, 0x0, 0x0) 11:48:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xc000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1012.203037][T18944] batadv_slave_0: entered promiscuous mode [ 1012.209852][T18944] batadv_slave_0: left promiscuous mode 11:48:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8941, &(0x7f0000002880)) 11:48:25 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, 0x0) [ 1012.397378][T18944] batadv0: left promiscuous mode 11:48:25 executing program 2: open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) (async) [ 1012.586573][ T1214] ieee802154 phy0 wpan0: encryption failed: -22 [ 1012.593552][ T1214] ieee802154 phy1 wpan1: encryption failed: -22 [ 1012.618542][T18958] batadv0: entered promiscuous mode [ 1012.640823][T18958] batadv_slave_0: entered promiscuous mode [ 1012.647619][T18958] batadv_slave_0: left promiscuous mode 11:48:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8912, &(0x7f0000002880)) 11:48:25 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x5865, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1012.779764][T18958] batadv0: left promiscuous mode 11:48:25 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x1200000000000000) [ 1012.939187][T18963] batadv0: entered promiscuous mode 11:48:25 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x7, 0x7}]}) open(0x0, 0x1, 0x0) 11:48:25 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/51, 0x33}], 0x1, 0x0, 0x0, 0x2) [ 1013.019794][T18963] batadv_slave_0: entered promiscuous mode [ 1013.028445][T18963] batadv_slave_0: left promiscuous mode [ 1013.034194][ T27] audit: type=1326 audit(1697456905.856:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18967 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:48:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xd000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1013.180779][T18963] batadv0: left promiscuous mode [ 1013.185514][ T27] audit: type=1326 audit(1697456906.036:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18969 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 11:48:26 executing program 3: ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000240)={@local}) io_setup(0xf72, &(0x7f0000001a40)) 11:48:26 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x6000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1013.431606][T18975] batadv0: entered promiscuous mode [ 1013.478053][T18975] batadv_slave_0: entered promiscuous mode [ 1013.485030][T18975] batadv_slave_0: left promiscuous mode 11:48:26 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000002280), 0x200000, 0x0) [ 1013.551015][T18975] batadv0: left promiscuous mode [ 1013.645789][T18979] batadv0: entered promiscuous mode [ 1013.660689][T18979] batadv_slave_0: entered promiscuous mode [ 1013.667479][T18979] batadv_slave_0: left promiscuous mode 11:48:26 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) 11:48:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xe000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:26 executing program 3: process_vm_readv(0x0, &(0x7f0000002b80)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1, &(0x7f0000003c80)=[{&(0x7f0000002c40)=""/39, 0x27}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x2, 0x0) [ 1013.811404][T18979] batadv0: left promiscuous mode 11:48:26 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x2000000000000000) [ 1014.047448][T18985] batadv0: entered promiscuous mode 11:48:26 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x7, 0x7}]}) open(0x0, 0x1, 0x0) (async) open(0x0, 0x1, 0x0) 11:48:27 executing program 3: ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000580)={0x0, "42c4dc44da56e6c0e3c4c3746f45b52e"}) getresuid(&(0x7f0000001640), &(0x7f0000001680), &(0x7f00000016c0)) [ 1014.104163][T18985] batadv_slave_0: entered promiscuous mode [ 1014.111199][T18985] batadv_slave_0: left promiscuous mode [ 1014.156492][T18985] batadv0: left promiscuous mode 11:48:27 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) fstatfs(r0, &(0x7f00000001c0)=""/194) 11:48:27 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x60ff, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1014.282429][ T27] audit: type=1326 audit(1697456907.076:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18988 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1014.339260][ T27] audit: type=1326 audit(1697456907.186:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 11:48:27 executing program 3: syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x0) 11:48:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xf000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1014.546880][T18998] batadv0: entered promiscuous mode [ 1014.568914][T18998] batadv_slave_0: entered promiscuous mode [ 1014.575894][T18998] batadv_slave_0: left promiscuous mode [ 1014.622336][T18998] batadv0: left promiscuous mode 11:48:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5421, &(0x7f0000002880)) [ 1014.836522][T19003] batadv0: entered promiscuous mode 11:48:27 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x6558, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1014.883601][T19003] batadv_slave_0: entered promiscuous mode [ 1014.892927][T19003] batadv_slave_0: left promiscuous mode [ 1014.931104][T19003] batadv0: left promiscuous mode 11:48:27 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x107b00, 0x0) 11:48:27 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x2500000000000000) [ 1015.089927][T19007] batadv0: entered promiscuous mode 11:48:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8983, 0x0) 11:48:28 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x7, 0x7}]}) (async) open(0x0, 0x1, 0x0) [ 1015.171372][T19007] batadv_slave_0: entered promiscuous mode [ 1015.179587][T19007] batadv_slave_0: left promiscuous mode 11:48:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x10000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1015.278289][T19007] batadv0: left promiscuous mode [ 1015.337342][ T27] audit: type=1326 audit(1697456908.156:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19009 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:48:28 executing program 5: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f00000015c0)={0x0}) io_setup(0xf72, &(0x7f0000001a40)) [ 1015.492514][T19015] batadv0: entered promiscuous mode 11:48:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8924, &(0x7f0000002880)) [ 1015.581457][T19015] batadv_slave_0: entered promiscuous mode [ 1015.588281][T19015] batadv_slave_0: left promiscuous mode [ 1015.607706][ T27] audit: type=1326 audit(1697456908.386:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19016 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 11:48:28 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x6800, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1015.636253][T19015] batadv0: left promiscuous mode [ 1015.791459][T19023] batadv0: entered promiscuous mode [ 1015.811717][T19023] batadv_slave_0: entered promiscuous mode [ 1015.818516][T19023] batadv_slave_0: left promiscuous mode 11:48:28 executing program 5: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x20102, 0x0) 11:48:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x11000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1015.881641][T19023] batadv0: left promiscuous mode [ 1016.107279][T19028] batadv0: entered promiscuous mode 11:48:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8911, &(0x7f0000002880)) [ 1016.155407][T19028] batadv_slave_0: entered promiscuous mode [ 1016.162348][T19028] batadv_slave_0: left promiscuous mode 11:48:29 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x6802, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:29 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000004c40)='/sys/power/pm_test', 0x0, 0x0) [ 1016.197826][T19028] batadv0: left promiscuous mode 11:48:29 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x4000000000000000) 11:48:29 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) open(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x2, 0x0, 0x7c, 0x5}, {0x4, 0xff, 0x6, 0x1e1}, {0x100, 0x3e, 0x6, 0xde28}, {0x4, 0x2, 0x0, 0x7}]}) 11:48:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x80086601, 0x0) [ 1016.429821][ T27] audit: type=1326 audit(1697456909.246:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1016.473756][T19035] batadv0: entered promiscuous mode [ 1016.568262][T19035] batadv_slave_0: entered promiscuous mode [ 1016.575413][T19035] batadv_slave_0: left promiscuous mode 11:48:29 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/51, 0x33}], 0x1, 0x0, 0x0, 0x0) 11:48:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x12000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1016.654656][T19035] batadv0: left promiscuous mode 11:48:29 executing program 3: openat2(0xffffffffffffffff, 0x0, &(0x7f00000039c0)={0x0, 0x0, 0x22}, 0x18) [ 1016.773749][ T27] audit: type=1326 audit(1697456909.556:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19038 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 1016.833155][T19042] batadv0: entered promiscuous mode [ 1016.883195][T19042] batadv_slave_0: entered promiscuous mode [ 1016.889984][T19042] batadv_slave_0: left promiscuous mode 11:48:29 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x6c00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1016.935473][T19042] batadv0: left promiscuous mode 11:48:29 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) 11:48:29 executing program 3: pselect6(0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)={0x0, 0x989680}, 0x0) [ 1017.174102][T19049] batadv0: entered promiscuous mode 11:48:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x20000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1017.232702][T19049] batadv_slave_0: entered promiscuous mode [ 1017.239519][T19049] batadv_slave_0: left promiscuous mode [ 1017.331720][T19049] batadv0: left promiscuous mode 11:48:30 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x4002000000000000) 11:48:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89a1, &(0x7f0000002880)) 11:48:30 executing program 3: openat2(0xffffffffffffffff, 0x0, &(0x7f00000039c0)={0x0, 0x100}, 0x18) 11:48:30 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async) open(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x2, 0x0, 0x7c, 0x5}, {0x4, 0xff, 0x6, 0x1e1}, {0x100, 0x3e, 0x6, 0xde28}, {0x4, 0x2, 0x0, 0x7}]}) [ 1017.597494][T19055] batadv0: entered promiscuous mode [ 1017.605936][ T27] audit: type=1326 audit(1697456910.416:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1017.651578][T19055] batadv_slave_0: entered promiscuous mode [ 1017.658409][T19055] batadv_slave_0: left promiscuous mode [ 1017.703803][T19055] batadv0: left promiscuous mode 11:48:30 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 11:48:30 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x7400, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1017.813987][ T27] audit: type=1326 audit(1697456910.646:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19062 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 11:48:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x23020000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89a0, 0x0) [ 1018.087317][T19068] batadv0: entered promiscuous mode 11:48:31 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, &(0x7f0000000940)) [ 1018.196210][T19068] batadv_slave_0: entered promiscuous mode [ 1018.204511][T19068] batadv_slave_0: left promiscuous mode [ 1018.238997][T19068] batadv0: left promiscuous mode [ 1018.305558][T19070] batadv0: entered promiscuous mode [ 1018.317591][T19070] batadv_slave_0: entered promiscuous mode [ 1018.325240][T19070] batadv_slave_0: left promiscuous mode 11:48:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x7a00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:31 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) [ 1018.410070][T19070] batadv0: left promiscuous mode 11:48:31 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x4800000000000000) 11:48:31 executing program 5: process_vm_readv(0x0, &(0x7f0000002b80)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1, &(0x7f0000003c80)=[{0x0}], 0x1, 0x0) 11:48:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x23120000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:31 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async) open(0x0, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x2, 0x0, 0x7c, 0x5}, {0x4, 0xff, 0x6, 0x1e1}, {0x100, 0x3e, 0x6, 0xde28}, {0x4, 0x2, 0x0, 0x7}]}) 11:48:31 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00'}, 0x18) [ 1018.746845][T19080] batadv0: entered promiscuous mode [ 1018.867810][T19080] batadv_slave_0: entered promiscuous mode [ 1018.874954][T19080] batadv_slave_0: left promiscuous mode [ 1018.921192][ T27] audit: type=1326 audit(1697456911.696:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19078 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:48:31 executing program 5: pipe2(&(0x7f0000001980)={0xffffffffffffffff}, 0x0) openat2(r0, &(0x7f0000002200)='./file0\x00', &(0x7f0000002240)={0xc040}, 0x18) 11:48:31 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x4c00000000000000) [ 1019.064767][T19080] batadv0: left promiscuous mode 11:48:32 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000004c40)='/sys/power/pm_test', 0x44000, 0x0) [ 1019.111641][ T27] audit: type=1326 audit(1697456911.916:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19086 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 11:48:32 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x2}]}) open(0x0, 0x0, 0x0) [ 1019.245339][ T27] audit: type=1326 audit(1697456912.056:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19091 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1019.326928][T19085] batadv0: entered promiscuous mode [ 1019.368799][T19085] batadv_slave_0: entered promiscuous mode [ 1019.375733][T19085] batadv_slave_0: left promiscuous mode 11:48:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x894a, &(0x7f0000002880)) 11:48:32 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x8100, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1019.442681][T19085] batadv0: left promiscuous mode 11:48:32 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd}, 0x1c}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000009020900"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 11:48:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x24000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:32 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x2}]}) open(0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) [ 1019.750438][T19104] batadv0: entered promiscuous mode [ 1019.805900][T19104] batadv_slave_0: entered promiscuous mode [ 1019.812793][T19104] batadv_slave_0: left promiscuous mode 11:48:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$UHID_INPUT(r0, &(0x7f0000001080)={0xd, {"f1f353f0c833097c27a892e9d357cff5f8dbe89627fac0c7baa3d2367d096bce7be2201f63550726fae46c98bb9d1015f4f6c630ca5fe559381741086cf09a276956cdc7e94dadd91d11e3b0870e56a7d3809b2f9b0a43a9527a975ed11798f36566468a95b4b5bee90b1dc6b83f9488e226e57be4eb015b2d2c87b4a9488e1f205eab5b424225cb6cb4a89a4f644fa5a17a96b6f1b989cee896f36037d03e5533f69dfd83cda70ce02910faf8777c0a2b88df10f0385e1bc828ff019eb5a450b1e05c738079972dfc58810132a59804b823355107214232b12efc8b93d69b777eb1e6db53d9f00a72d4634edf1a514fe9840f22c9af52a3273844507f4614bf298a072f1b0292c5461596f7daaab6e60ce35b40d84f5abf83b710420cfb9332c80c9205bace3d3f81bfeec61ae2537dbb854da4131e11a12f2939c46c119fcb9695c453380c41f08b77f4e3f56f4ceb9f12d12ff852642075ad082dbc7b6e0c4201b7f5b35846e7baf3ea591daa5e175b45f2fc93dfba95837f20dd701f829811f82ef2f71447df0390048fdded6e05838edb9fad4158751321d6452a67b6f11e87aaee34a5082fe86d2fe67b5ab0ba8b9a1023316dee0db52aac7c5eaeca00fcb7df6d82b1ee05e5f17729546e25fa6882f167137c761bf4179669859e027874d20c7584d4d4db23cebc32344ea2d4305215f0e13fa3cda44c00f200f1a95bf51288722b8ee15349fd12345f70f8502f54fb659da95677679697f30ebe4b1e0ff19b9873d6de900a89f11835afe90c42df20b80dd1cb1764482d3c2bc5151abb6c6027673f3d0e6f09a6704c6754ed50886f8726329b331a40955cacc11c3ddef202996302ce8cc90896dc848c7066e82a98def0741f008a8d2a68be8979daf97c645552aa06b57aef18db7a8135768fd829f852dc6e7ff64599717f7715d75c5056c4ec5b1b75c5f6d25d53810f8a72d5b79a21ef4e5aa97fcc00fd134e1520d225a6d8e72cd819d3f064bcf336ac26e133c359830d1b326ca62071e38d465913de34a93947e3d09db2e5ced544a3f30b89fd2e0ea3bc71172ff30273a3d5cbcd4f98bd884b83f7b447f9697cfcd4e4d52379aa8aaaa97b48feb0ea03c1a9318cc87bde35d753cfe997ca98a7c203424443a3b9b6098fbf061584eed12668be29bb7491fedb3debc8970c577c14ff9ecb8e2ad6b9e36447b35925b761267e7858b78a89b9f8e248b138700763a729213a32dae8bdc25243d94aa3d717be39737a3053ad2eb4a0c07953444a1206355f46207774634c35deb3b484ec1a4ccc0b532b620593ccfaf6ea298fe0cb62b4e92d80cd248fd9c18d518c29cb6af367d7094e93d9e9ab5c2aa95a12ceb885927cb05739b060843e8b47a454d42ad8a06211ac37fc830edfe811d434b38b7602af5a05a6e2dc4c85c6622b9df9bda2363e8b2aa0fdaa4eb32d2f70dcf08106ac9601ada331a6a7337df98cc342a52a998f8f9bf372531f10fd292c22f3dcf85551cc6a66531c699a1f37d64eb9c7788e912c5e7b3949d291a557bad3199db335cc7f8aecbb97fe00d80a12273dbab8b70c2c6159e8b8f7ffffffd273bd5534e0306078e0a4472f5282b71abdd2a6b1c74dccdc34f28053c024011994323d24784518e9edb57f09602cc1a1c06d88b7b171bb3f852401eb41089c547bdb5195a0c7e73a8c47d650fd0941a7ecc6e351e5dd4499baa9a81b4a28757b2408bbdf1267629778fc977224362326bf6820628b47f6a070152be1b9b41b20ce4d26064720585746a87bfb24b744612af89fe691777451d804355d5b103838e2381aadf191e70bf6a0fabe9cc84e029582c9683384afd49e08ed99dee0a3dabf879c2938b4c2fc4213e337ac56563d0a579c153f3821691d4b21f2ae3e1343604ce8d61b4b02438e6e3bbc766671250a6cd626ffb9c333d2e52414fad4bcdf36a0e84463618875600ad3bc5859e2e29bef9b8b0c3400490fab3deef256c4fb5d608c5cba570cd2f2b8e1517928e22bd508c43cffb630e080fa0cfb1d5fcb8d2fea44419a15b96f99aadb6212bf80f50b05650b8d82109973fd4e39f8272a7bdac7afa01338201ee45d80c0da849cf0ab77b5ea93b327dbebbc46aa795a966a4737dc84afc126aa54f501462e86c06f4b3052bad341174380d689475ee1790ff162239b427567ddf7ebac9c62034d2b8285fbe07be4e04c57e8462361d04e075be4e3dce985ff8c2c252685f8afe95f3d8b4961faf8c621c31fbd2a8af095ce9fc49a3ec84cf998a7b81069b03c1eef1f14a676a34039bcefeaa6d64d168b7282bc00676765788d5891f4617f22dbcb81d4f2fd7be7b42ae3b9818505d577e7f0dcd89f669d2c15d70e292c13b525d81beee6b6870c3c8a72f7d1e3b64472bbf9087f411d9b18f80cd42872f2caeaa3fc4ec777135752418b136892f4b2603a463bedfbf13dba2ca1bcaf41e74e807877eedf15551164b041e4dc9d3022e99c2e2fac9d15906ac6a7d63bfb57d8cfee8df66a00abce56e1424ecbda3b4a9dc5f381bb7ba38b57268750a0808d39c5cbf5cea7bc55ec1e8328206028c16abf2c3eeae79359777c53718d0c6ce3c9f1b093a3db834cfeb1e146e140465345d6f0a75de4a1a8a374c2467a641f5583907c5f1639eb16cc8156f4b7e1484be957cbe1b1fcb26d443bf759b738a86ccfdff4a6076cd5056f52126b3935cf2107be04033696ef408fcbebd73a10bf8f5d728d2729fd41bcb1bf1ec315216c8c5f9dfbf366f12945f648f901d968f6ee231b98bab2ccb31303c02cf32e065dd73cd81e2b0e99e5f64b2de44eeb477a3b370b9c7aa81ef780aa9f48dadd32cefab2070df2b52a6ac7077338e7269ce5608d1d109d66e307a2c82b411c1089a3afd99a56aab8f301cfc0e541afa853769154efa1d9901fae7b1b5a54e865de2eefc5a0b26dde5eacbc51d43920a9c0f212c27e16be26cccb2477b31aa5756054c985d84200f710cca0b091849890c4e87428217e2cbc211e1bd701cf9381de83b17b617daa7941a054534c9915d951dc9278974d9092e09fdb9978bad73ad989e3565b05fc7f3791be2d7e0b67fb904d9890e71152c168c58eb54a66d7d37fd2a9aa4ebd109adc946a7eb337e3a7afb50c7a959e55bb1933188c9019bee743102a845d3503f95b53248c480fc81b6afc21a5cc3fc81f19a2d438b152b648239460c420f5cb198582be439865acfb4e7e4ce5f4e12e1b267d293609a93a0c79949315e5195f511bc231ec9735cc5c94c473467cf6e341718392a9cd7a4dcff06369dbcc5f54be4345d70563aec33a4aec74bdd64fd86d902752e9dc65fd07c77b508309336cca5574542e234346dba7ddfa2e4a8c12806418b378a5b40dc19fa910c69a8850854007677f01d299a2c916be0cc554c3386febf013a10120ed0bbe636a6b6adeb40c30540ce7426078d7117354fc0e5974ee40345cc8f70970b4ba1e40a18b288bac7e920f0c3e1ec91ccabc01762f6e0d4c49d8a5760cee1c501b85ec6e3ca5c1911fa26b9ffb52f3b66417e889616b99e89be2ef781f49d8dafa599433f369c561d55494577468d8b5b0f3fdc0135cbd43ca79063d9a3e15f23ca1677eaf94fbcf3a81ea62fc8bca1422274644ec77368ef3e05cfa311ac3a8c1a8c132c3701f797c1f0d51ec72ce7a8fab44b9ff2e4e714b52caba8d198a42bd255be3723439faad37f050c06c9fcff2bd6d9393d61ba3efcafee71645159b8c1faad79d02a4d453b98d09c46288dcfafdf82c79b6404be1b9d45d5f7f56f39d50deb58647d5faee01ae3a6dcd4465bfd908e0cbbfa73ae5725503f70f022868950ce5c0f6cd9c10bf6019e9162447b58ab2c27f0eda060efc3c894ddf731d6964d1dac70c0085e397683757abcab5c9d55d2747c58817ec259eead68c112135707ee419ae042ad0a2947e84b4ae748b1f85a585b4d18bef8a9efa2e48e7aa5f5b42bbd1ae3851ad482c3d2042eecbffb63705d36aae2ee7c7110421e4cedb3ea6857b47e5d289b280286bc34c85bfc9677501fae389c14eb4d15f08359562da54cb3a8518b3d1308eeb2f678967098ea21a3d128e5bb623e3409a8acce6346208a386f3e4f2ddd4dc6234b373d9da0fd39ca0badf742767fc8708569352eb46d5ca588037fa8522e61c83209ac943685b262d8ef3d7fd4dd7dd14377494c0b542e23c4c95151c8e1395984ad2b6df2397e098f8415be65088651426abb5cd587c253a13054ee16e8dfd0f23f0a889db7529269e807cec75f7386a5844b789183341c705fcd2b96cf80ce14a4f6422948a6c8d3d8e9d455e2d6b8b87f4696993cbc010ce10614f1dff96dc18f865b26660d27229defa822953bf392c3d920a50eb2473aa94fbced152660d57159b33f2272fe6e7e1ce6e6ba1f948b59c277f185d9a686ac0445e15e20b46c8e0ea4656d715df96425b7d4b36cb856e7c7ba3aaf620c9d10d5d96370e463d2555e0085ba94d8ffd2973e6be31d7934e771b9b82d0066011da58f147744e747a240de1978a8eca86cfa845d8eca0aa9cabdc8668c43f9862c7ee85353d289d81d744877e22d67613673905e78cfaacde5f6e43ffcd6e7d9b9d15aea0dd922977ae87b0cb51a89ef15350309b43eb5c8e79e446d9ba2bb06d74fa6aed2431a5379da9776221130c87ac36b72bc1fc03f14c78cdb8a16f2d840b2bad04bf4655a2ab3c1ef4458e401fa817704b5a88e4bb8b15cf16383b9a7e2a64de19928b16e5f7f25be0ad126c3833ace7f36f3c3d9a6836d1a4710b4995ec0c9f10001f7dfc6410b29e9d031f1d3b4b34e9b4dc3a8fb08b49a29892e68dce9309c67874ecc75d477b59e2fbf4347f3c445e49126822f4301eaee1259475cfb22566e69d9ae0d436e402f8d100439a9ca6a518d457a91087e83663c413e339a0d8d4c31c083303b46b2982015227bd7e126976d7b26a670ba78f21a8c95b05450ee149c0ae1fb7397d179c6e295d0fc57dab28e5e9bdc99acd8596a928d6ebd97316b8c60cf657bc4ca1ffe8b9a445724842cb38681acc5d5eba455d5fa19cc8c5cac15a46d6a72c9b64983a686edff27b3669d46c005879949b1980a1456e8a85fe4969acd56415f144405ed99afb16d9d652fce35b9c800b8e217517690bed18e00051868dfe8acb5b10ff49d733316bcc7b8ba77265cda37e5faed1307f8a69338090f532f463f1a9740bbcc58851bc5c85b1a129596898667e55a6882f4d0d97c456697dbe282345dec80d76443e1ec7602f523607534f429d603bc087f9b189b15e9c389456ddc04b425a553fb7ec0fa0488b85afa75f624a4cd25f8454b620b0b4fd084a6f6750dcb0a6f3ceeb033fb9dd0f253a53bc4e1dfc7f03b5000cf1fa9c5f0ecbab3257146030f77f30b160b76262b8d3de2510e0984b8192caa7856a69b93f5f53db8190bb70c7daa2b052c56d38a644eb2c69d316d505848d9258c8934b1b870844e543b771f4969e25c8e9a5f825b9aaeeac6ff1cc4e956504fd07f834800413e22da22dfdc4a0c218dadd0442d305cb436dca3d835402e0362b12d02e52ae84c2e80c9fcd7a47efd6c4bc654c8148c47a2ae50f89e729676b4ee79c96991cb4484679eb8eda3517407dd402f0d1b48fcc9551275df982e34e1ee7dd2bb646b9f2ed45bc7e770cbce36566eced4dc3ddf8665232d029e9487d64848c10e8cd2b01415d3e80519cc9b2ff3218d6f239691e4800", 0x1000}}, 0x1006) creat(&(0x7f0000000040)='./file0\x00', 0xc0) [ 1019.875064][T19104] batadv0: left promiscuous mode 11:48:32 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x2}]}) open(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x2}]}) (async) open(0x0, 0x0, 0x0) (async) [ 1020.015874][T19107] batadv0: entered promiscuous mode [ 1020.045530][ T775] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1020.103885][T19107] batadv_slave_0: entered promiscuous mode [ 1020.110817][T19107] batadv_slave_0: left promiscuous mode 11:48:33 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x6800000000000000) [ 1020.175514][T19107] batadv0: left promiscuous mode 11:48:33 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x8847, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x24120000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1020.331244][ T775] usb 4-1: Using ep0 maxpacket: 8 11:48:33 executing program 2: ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000000c0)={0x4, 0x0, [{0x2, 0x3, 0x0, 0x4, 0x101, 0xffffff7d, 0x1}, {0x80000008, 0x2e5, 0x2, 0x2, 0x1, 0x4, 0x20}, {0xc0000001, 0xdd5, 0x6, 0x6, 0x0, 0x8, 0x5}, {0x40000000, 0x9, 0x7, 0xfffffff8, 0x1, 0xe0000000, 0x20}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) [ 1020.432088][ T27] audit: type=1326 audit(1697456913.286:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19116 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1020.488476][T19118] batadv0: entered promiscuous mode [ 1020.532448][T19118] batadv_slave_0: entered promiscuous mode [ 1020.547511][T19118] batadv_slave_0: left promiscuous mode [ 1020.553126][ T775] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.553258][ T775] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1020.553393][ T775] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1020.553598][ T775] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1020.553731][ T775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.563891][T19118] batadv0: left promiscuous mode [ 1020.628736][T19120] batadv0: entered promiscuous mode [ 1020.632865][ T775] hub 4-1:1.0: bad descriptor, ignoring hub [ 1020.696629][ T775] hub: probe of 4-1:1.0 failed with error -5 11:48:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1020.698264][ T775] cdc_wdm: probe of 4-1:1.0 failed with error -22 11:48:33 executing program 2: ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000000c0)={0x4, 0x0, [{0x2, 0x3, 0x0, 0x4, 0x101, 0xffffff7d, 0x1}, {0x80000008, 0x2e5, 0x2, 0x2, 0x1, 0x4, 0x20}, {0xc0000001, 0xdd5, 0x6, 0x6, 0x0, 0x8, 0x5}, {0x40000000, 0x9, 0x7, 0xfffffff8, 0x1, 0xe0000000, 0x20}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) [ 1020.823058][T19120] batadv_slave_0: entered promiscuous mode [ 1020.823890][T19120] batadv_slave_0: left promiscuous mode [ 1020.824906][ T27] audit: type=1326 audit(1697456913.626:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19121 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 11:48:34 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x8848, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1020.853790][T19120] batadv0: left promiscuous mode [ 1020.955288][ T775] usb 4-1: USB disconnect, device number 12 [ 1021.118681][T19124] batadv0: entered promiscuous mode [ 1021.158570][T19124] batadv_slave_0: entered promiscuous mode [ 1021.159397][T19124] batadv_slave_0: left promiscuous mode [ 1021.163812][T19124] batadv0: left promiscuous mode [ 1021.168483][ T27] audit: type=1326 audit(1697456914.026:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19125 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 1021.525037][T19128] batadv0: entered promiscuous mode 11:48:34 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x80004508, 0x0) 11:48:34 executing program 2: ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000000c0)={0x4, 0x0, [{0x2, 0x3, 0x0, 0x4, 0x101, 0xffffff7d, 0x1}, {0x80000008, 0x2e5, 0x2, 0x2, 0x1, 0x4, 0x20}, {0xc0000001, 0xdd5, 0x6, 0x6, 0x0, 0x8, 0x5}, {0x40000000, 0x9, 0x7, 0xfffffff8, 0x1, 0xe0000000, 0x20}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000000c0)={0x4, 0x0, [{0x2, 0x3, 0x0, 0x4, 0x101, 0xffffff7d, 0x1}, {0x80000008, 0x2e5, 0x2, 0x2, 0x1, 0x4, 0x20}, {0xc0000001, 0xdd5, 0x6, 0x6, 0x0, 0x8, 0x5}, {0x40000000, 0x9, 0x7, 0xfffffff8, 0x1, 0xe0000000, 0x20}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async) 11:48:34 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x6c00000000000000) [ 1021.681729][ T27] audit: type=1326 audit(1697456914.536:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19129 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1021.681938][T19128] batadv_slave_0: entered promiscuous mode [ 1021.682783][T19128] batadv_slave_0: left promiscuous mode [ 1021.684405][ T27] audit: type=1326 audit(1697456914.546:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19131 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 1021.721212][T19128] batadv0: left promiscuous mode 11:48:35 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x14, 0x0, 0x0}) 11:48:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2f000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$UHID_INPUT(r0, &(0x7f0000001080)={0xd, {"f1f353f0c833097c27a892e9d357cff5f8dbe89627fac0c7baa3d2367d096bce7be2201f63550726fae46c98bb9d1015f4f6c630ca5fe559381741086cf09a276956cdc7e94dadd91d11e3b0870e56a7d3809b2f9b0a43a9527a975ed11798f36566468a95b4b5bee90b1dc6b83f9488e226e57be4eb015b2d2c87b4a9488e1f205eab5b424225cb6cb4a89a4f644fa5a17a96b6f1b989cee896f36037d03e5533f69dfd83cda70ce02910faf8777c0a2b88df10f0385e1bc828ff019eb5a450b1e05c738079972dfc58810132a59804b823355107214232b12efc8b93d69b777eb1e6db53d9f00a72d4634edf1a514fe9840f22c9af52a3273844507f4614bf298a072f1b0292c5461596f7daaab6e60ce35b40d84f5abf83b710420cfb9332c80c9205bace3d3f81bfeec61ae2537dbb854da4131e11a12f2939c46c119fcb9695c453380c41f08b77f4e3f56f4ceb9f12d12ff852642075ad082dbc7b6e0c4201b7f5b35846e7baf3ea591daa5e175b45f2fc93dfba95837f20dd701f829811f82ef2f71447df0390048fdded6e05838edb9fad4158751321d6452a67b6f11e87aaee34a5082fe86d2fe67b5ab0ba8b9a1023316dee0db52aac7c5eaeca00fcb7df6d82b1ee05e5f17729546e25fa6882f167137c761bf4179669859e027874d20c7584d4d4db23cebc32344ea2d4305215f0e13fa3cda44c00f200f1a95bf51288722b8ee15349fd12345f70f8502f54fb659da95677679697f30ebe4b1e0ff19b9873d6de900a89f11835afe90c42df20b80dd1cb1764482d3c2bc5151abb6c6027673f3d0e6f09a6704c6754ed50886f8726329b331a40955cacc11c3ddef202996302ce8cc90896dc848c7066e82a98def0741f008a8d2a68be8979daf97c645552aa06b57aef18db7a8135768fd829f852dc6e7ff64599717f7715d75c5056c4ec5b1b75c5f6d25d53810f8a72d5b79a21ef4e5aa97fcc00fd134e1520d225a6d8e72cd819d3f064bcf336ac26e133c359830d1b326ca62071e38d465913de34a93947e3d09db2e5ced544a3f30b89fd2e0ea3bc71172ff30273a3d5cbcd4f98bd884b83f7b447f9697cfcd4e4d52379aa8aaaa97b48feb0ea03c1a9318cc87bde35d753cfe997ca98a7c203424443a3b9b6098fbf061584eed12668be29bb7491fedb3debc8970c577c14ff9ecb8e2ad6b9e36447b35925b761267e7858b78a89b9f8e248b138700763a729213a32dae8bdc25243d94aa3d717be39737a3053ad2eb4a0c07953444a1206355f46207774634c35deb3b484ec1a4ccc0b532b620593ccfaf6ea298fe0cb62b4e92d80cd248fd9c18d518c29cb6af367d7094e93d9e9ab5c2aa95a12ceb885927cb05739b060843e8b47a454d42ad8a06211ac37fc830edfe811d434b38b7602af5a05a6e2dc4c85c6622b9df9bda2363e8b2aa0fdaa4eb32d2f70dcf08106ac9601ada331a6a7337df98cc342a52a998f8f9bf372531f10fd292c22f3dcf85551cc6a66531c699a1f37d64eb9c7788e912c5e7b3949d291a557bad3199db335cc7f8aecbb97fe00d80a12273dbab8b70c2c6159e8b8f7ffffffd273bd5534e0306078e0a4472f5282b71abdd2a6b1c74dccdc34f28053c024011994323d24784518e9edb57f09602cc1a1c06d88b7b171bb3f852401eb41089c547bdb5195a0c7e73a8c47d650fd0941a7ecc6e351e5dd4499baa9a81b4a28757b2408bbdf1267629778fc977224362326bf6820628b47f6a070152be1b9b41b20ce4d26064720585746a87bfb24b744612af89fe691777451d804355d5b103838e2381aadf191e70bf6a0fabe9cc84e029582c9683384afd49e08ed99dee0a3dabf879c2938b4c2fc4213e337ac56563d0a579c153f3821691d4b21f2ae3e1343604ce8d61b4b02438e6e3bbc766671250a6cd626ffb9c333d2e52414fad4bcdf36a0e84463618875600ad3bc5859e2e29bef9b8b0c3400490fab3deef256c4fb5d608c5cba570cd2f2b8e1517928e22bd508c43cffb630e080fa0cfb1d5fcb8d2fea44419a15b96f99aadb6212bf80f50b05650b8d82109973fd4e39f8272a7bdac7afa01338201ee45d80c0da849cf0ab77b5ea93b327dbebbc46aa795a966a4737dc84afc126aa54f501462e86c06f4b3052bad341174380d689475ee1790ff162239b427567ddf7ebac9c62034d2b8285fbe07be4e04c57e8462361d04e075be4e3dce985ff8c2c252685f8afe95f3d8b4961faf8c621c31fbd2a8af095ce9fc49a3ec84cf998a7b81069b03c1eef1f14a676a34039bcefeaa6d64d168b7282bc00676765788d5891f4617f22dbcb81d4f2fd7be7b42ae3b9818505d577e7f0dcd89f669d2c15d70e292c13b525d81beee6b6870c3c8a72f7d1e3b64472bbf9087f411d9b18f80cd42872f2caeaa3fc4ec777135752418b136892f4b2603a463bedfbf13dba2ca1bcaf41e74e807877eedf15551164b041e4dc9d3022e99c2e2fac9d15906ac6a7d63bfb57d8cfee8df66a00abce56e1424ecbda3b4a9dc5f381bb7ba38b57268750a0808d39c5cbf5cea7bc55ec1e8328206028c16abf2c3eeae79359777c53718d0c6ce3c9f1b093a3db834cfeb1e146e140465345d6f0a75de4a1a8a374c2467a641f5583907c5f1639eb16cc8156f4b7e1484be957cbe1b1fcb26d443bf759b738a86ccfdff4a6076cd5056f52126b3935cf2107be04033696ef408fcbebd73a10bf8f5d728d2729fd41bcb1bf1ec315216c8c5f9dfbf366f12945f648f901d968f6ee231b98bab2ccb31303c02cf32e065dd73cd81e2b0e99e5f64b2de44eeb477a3b370b9c7aa81ef780aa9f48dadd32cefab2070df2b52a6ac7077338e7269ce5608d1d109d66e307a2c82b411c1089a3afd99a56aab8f301cfc0e541afa853769154efa1d9901fae7b1b5a54e865de2eefc5a0b26dde5eacbc51d43920a9c0f212c27e16be26cccb2477b31aa5756054c985d84200f710cca0b091849890c4e87428217e2cbc211e1bd701cf9381de83b17b617daa7941a054534c9915d951dc9278974d9092e09fdb9978bad73ad989e3565b05fc7f3791be2d7e0b67fb904d9890e71152c168c58eb54a66d7d37fd2a9aa4ebd109adc946a7eb337e3a7afb50c7a959e55bb1933188c9019bee743102a845d3503f95b53248c480fc81b6afc21a5cc3fc81f19a2d438b152b648239460c420f5cb198582be439865acfb4e7e4ce5f4e12e1b267d293609a93a0c79949315e5195f511bc231ec9735cc5c94c473467cf6e341718392a9cd7a4dcff06369dbcc5f54be4345d70563aec33a4aec74bdd64fd86d902752e9dc65fd07c77b508309336cca5574542e234346dba7ddfa2e4a8c12806418b378a5b40dc19fa910c69a8850854007677f01d299a2c916be0cc554c3386febf013a10120ed0bbe636a6b6adeb40c30540ce7426078d7117354fc0e5974ee40345cc8f70970b4ba1e40a18b288bac7e920f0c3e1ec91ccabc01762f6e0d4c49d8a5760cee1c501b85ec6e3ca5c1911fa26b9ffb52f3b66417e889616b99e89be2ef781f49d8dafa599433f369c561d55494577468d8b5b0f3fdc0135cbd43ca79063d9a3e15f23ca1677eaf94fbcf3a81ea62fc8bca1422274644ec77368ef3e05cfa311ac3a8c1a8c132c3701f797c1f0d51ec72ce7a8fab44b9ff2e4e714b52caba8d198a42bd255be3723439faad37f050c06c9fcff2bd6d9393d61ba3efcafee71645159b8c1faad79d02a4d453b98d09c46288dcfafdf82c79b6404be1b9d45d5f7f56f39d50deb58647d5faee01ae3a6dcd4465bfd908e0cbbfa73ae5725503f70f022868950ce5c0f6cd9c10bf6019e9162447b58ab2c27f0eda060efc3c894ddf731d6964d1dac70c0085e397683757abcab5c9d55d2747c58817ec259eead68c112135707ee419ae042ad0a2947e84b4ae748b1f85a585b4d18bef8a9efa2e48e7aa5f5b42bbd1ae3851ad482c3d2042eecbffb63705d36aae2ee7c7110421e4cedb3ea6857b47e5d289b280286bc34c85bfc9677501fae389c14eb4d15f08359562da54cb3a8518b3d1308eeb2f678967098ea21a3d128e5bb623e3409a8acce6346208a386f3e4f2ddd4dc6234b373d9da0fd39ca0badf742767fc8708569352eb46d5ca588037fa8522e61c83209ac943685b262d8ef3d7fd4dd7dd14377494c0b542e23c4c95151c8e1395984ad2b6df2397e098f8415be65088651426abb5cd587c253a13054ee16e8dfd0f23f0a889db7529269e807cec75f7386a5844b789183341c705fcd2b96cf80ce14a4f6422948a6c8d3d8e9d455e2d6b8b87f4696993cbc010ce10614f1dff96dc18f865b26660d27229defa822953bf392c3d920a50eb2473aa94fbced152660d57159b33f2272fe6e7e1ce6e6ba1f948b59c277f185d9a686ac0445e15e20b46c8e0ea4656d715df96425b7d4b36cb856e7c7ba3aaf620c9d10d5d96370e463d2555e0085ba94d8ffd2973e6be31d7934e771b9b82d0066011da58f147744e747a240de1978a8eca86cfa845d8eca0aa9cabdc8668c43f9862c7ee85353d289d81d744877e22d67613673905e78cfaacde5f6e43ffcd6e7d9b9d15aea0dd922977ae87b0cb51a89ef15350309b43eb5c8e79e446d9ba2bb06d74fa6aed2431a5379da9776221130c87ac36b72bc1fc03f14c78cdb8a16f2d840b2bad04bf4655a2ab3c1ef4458e401fa817704b5a88e4bb8b15cf16383b9a7e2a64de19928b16e5f7f25be0ad126c3833ace7f36f3c3d9a6836d1a4710b4995ec0c9f10001f7dfc6410b29e9d031f1d3b4b34e9b4dc3a8fb08b49a29892e68dce9309c67874ecc75d477b59e2fbf4347f3c445e49126822f4301eaee1259475cfb22566e69d9ae0d436e402f8d100439a9ca6a518d457a91087e83663c413e339a0d8d4c31c083303b46b2982015227bd7e126976d7b26a670ba78f21a8c95b05450ee149c0ae1fb7397d179c6e295d0fc57dab28e5e9bdc99acd8596a928d6ebd97316b8c60cf657bc4ca1ffe8b9a445724842cb38681acc5d5eba455d5fa19cc8c5cac15a46d6a72c9b64983a686edff27b3669d46c005879949b1980a1456e8a85fe4969acd56415f144405ed99afb16d9d652fce35b9c800b8e217517690bed18e00051868dfe8acb5b10ff49d733316bcc7b8ba77265cda37e5faed1307f8a69338090f532f463f1a9740bbcc58851bc5c85b1a129596898667e55a6882f4d0d97c456697dbe282345dec80d76443e1ec7602f523607534f429d603bc087f9b189b15e9c389456ddc04b425a553fb7ec0fa0488b85afa75f624a4cd25f8454b620b0b4fd084a6f6750dcb0a6f3ceeb033fb9dd0f253a53bc4e1dfc7f03b5000cf1fa9c5f0ecbab3257146030f77f30b160b76262b8d3de2510e0984b8192caa7856a69b93f5f53db8190bb70c7daa2b052c56d38a644eb2c69d316d505848d9258c8934b1b870844e543b771f4969e25c8e9a5f825b9aaeeac6ff1cc4e956504fd07f834800413e22da22dfdc4a0c218dadd0442d305cb436dca3d835402e0362b12d02e52ae84c2e80c9fcd7a47efd6c4bc654c8148c47a2ae50f89e729676b4ee79c96991cb4484679eb8eda3517407dd402f0d1b48fcc9551275df982e34e1ee7dd2bb646b9f2ed45bc7e770cbce36566eced4dc3ddf8665232d029e9487d64848c10e8cd2b01415d3e80519cc9b2ff3218d6f239691e4800", 0x1000}}, 0x1006) creat(&(0x7f0000000040)='./file0\x00', 0xc0) 11:48:35 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x6}]}) open(0x0, 0x0, 0x0) 11:48:35 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x9d00, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:35 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x7400000000000000) [ 1022.752954][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1022.753020][ T27] audit: type=1326 audit(1697456915.616:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19139 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 1022.822914][T19145] batadv0: entered promiscuous mode [ 1022.839316][ T27] audit: type=1326 audit(1697456915.646:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19141 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:48:35 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) [ 1022.957893][T19145] batadv_slave_0: entered promiscuous mode [ 1022.965050][T19145] batadv_slave_0: left promiscuous mode [ 1023.028788][T19145] batadv0: left promiscuous mode 11:48:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000980)={0x0, 0x2, &(0x7f0000000880)='*S'}) [ 1023.274530][T19142] batadv0: entered promiscuous mode [ 1023.371665][T19142] batadv_slave_0: entered promiscuous mode [ 1023.378473][T19142] batadv_slave_0: left promiscuous mode [ 1023.430832][T19142] batadv0: left promiscuous mode 11:48:36 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x3a000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:36 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x6}]}) open(0x0, 0x0, 0x0) 11:48:36 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xaa02, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:36 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000ac0)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) 11:48:36 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x7a00000000000000) [ 1023.802515][T19155] batadv0: entered promiscuous mode [ 1023.868293][T19155] batadv_slave_0: entered promiscuous mode [ 1023.875328][T19155] batadv_slave_0: left promiscuous mode [ 1023.906886][ T27] audit: type=1326 audit(1697456916.696:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19156 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 11:48:36 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000840)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @remote}, r2}}, 0x48) [ 1023.956546][T19155] batadv0: left promiscuous mode [ 1024.051612][ T27] audit: type=1326 audit(1697456916.876:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19162 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1024.088287][T19160] batadv0: entered promiscuous mode [ 1024.159570][T19160] batadv_slave_0: entered promiscuous mode [ 1024.160748][T19160] batadv_slave_0: left promiscuous mode [ 1024.187396][T19160] batadv0: left promiscuous mode 11:48:37 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000015c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) 11:48:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000001180)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 11:48:37 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x3f000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:37 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xd605, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:37 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x6}]}) open(0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) 11:48:37 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x8001000000000000) [ 1025.211500][ T27] audit: type=1326 audit(1697456918.076:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19169 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 1025.273178][T19175] batadv0: entered promiscuous mode 11:48:38 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000017c0)={0x7, 0x8}, 0x10) [ 1025.304558][ T27] audit: type=1326 audit(1697456918.156:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19172 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1025.341872][T19175] batadv_slave_0: entered promiscuous mode [ 1025.349491][T19175] batadv_slave_0: left promiscuous mode 11:48:38 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000019180)) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000), 0x0) read$dsp(r0, &(0x7f0000002280)=""/4110, 0x100e) [ 1025.409156][T19175] batadv0: left promiscuous mode [ 1025.530060][T19171] batadv0: entered promiscuous mode [ 1025.585834][T19171] batadv_slave_0: entered promiscuous mode [ 1025.592754][T19171] batadv_slave_0: left promiscuous mode 11:48:38 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x40000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1025.647755][T19171] batadv0: left promiscuous mode 11:48:38 executing program 3: munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x3) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) [ 1025.936583][T19187] batadv0: entered promiscuous mode 11:48:38 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xdc02, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:38 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000003b80), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101180) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) [ 1026.001698][T19187] batadv_slave_0: entered promiscuous mode [ 1026.008515][T19187] batadv_slave_0: left promiscuous mode [ 1026.028056][T19187] batadv0: left promiscuous mode 11:48:38 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x1b, 0x0, 0x1}, {}, {0x6}, {0x3, 0xa6, 0x3e, 0x5}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x6, &(0x7f0000000000)=[{0x2ee, 0x2, 0xff, 0x100}, {0x8000, 0xff, 0x6, 0x5}, {0x0, 0x6, 0x0, 0x80000000}, {0x7ff, 0x4, 0x6, 0x80000001}, {0x5, 0x9, 0x20, 0x5}, {0x81, 0x81, 0x2, 0x9823}]}) open(0x0, 0x0, 0x0) 11:48:39 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xaa02000000000000) [ 1026.280923][T19191] batadv0: entered promiscuous mode 11:48:39 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x40110000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:39 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010102}, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)}, 0x700) 11:48:39 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000019180)) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000), 0x0) read$dsp(r0, &(0x7f0000002280)=""/4110, 0x100e) [ 1026.380712][T19191] batadv_slave_0: entered promiscuous mode [ 1026.387993][T19191] batadv_slave_0: left promiscuous mode [ 1026.432271][T19191] batadv0: left promiscuous mode 11:48:39 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x1b, 0x0, 0x1}, {}, {0x6}, {0x3, 0xa6, 0x3e, 0x5}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x6, &(0x7f0000000000)=[{0x2ee, 0x2, 0xff, 0x100}, {0x8000, 0xff, 0x6, 0x5}, {0x0, 0x6, 0x0, 0x80000000}, {0x7ff, 0x4, 0x6, 0x80000001}, {0x5, 0x9, 0x20, 0x5}, {0x81, 0x81, 0x2, 0x9823}]}) open(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x1b, 0x0, 0x1}, {}, {0x6}, {0x3, 0xa6, 0x3e, 0x5}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x6, &(0x7f0000000000)=[{0x2ee, 0x2, 0xff, 0x100}, {0x8000, 0xff, 0x6, 0x5}, {0x0, 0x6, 0x0, 0x80000000}, {0x7ff, 0x4, 0x6, 0x80000001}, {0x5, 0x9, 0x20, 0x5}, {0x81, 0x81, 0x2, 0x9823}]}) (async) open(0x0, 0x0, 0x0) (async) [ 1026.612905][ T27] audit: type=1326 audit(1697456919.386:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:48:39 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xf403, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1026.705347][T19200] batadv0: entered promiscuous mode [ 1026.772532][T19200] batadv_slave_0: entered promiscuous mode [ 1026.779368][T19200] batadv_slave_0: left promiscuous mode [ 1026.803061][T19200] batadv0: left promiscuous mode [ 1026.974335][T19206] batadv0: entered promiscuous mode 11:48:39 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x1b, 0x0, 0x1}, {}, {0x6}, {0x3, 0xa6, 0x3e, 0x5}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x1b, 0x0, 0x1}, {}, {0x6}, {0x3, 0xa6, 0x3e, 0x5}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x6, &(0x7f0000000000)=[{0x2ee, 0x2, 0xff, 0x100}, {0x8000, 0xff, 0x6, 0x5}, {0x0, 0x6, 0x0, 0x80000000}, {0x7ff, 0x4, 0x6, 0x80000001}, {0x5, 0x9, 0x20, 0x5}, {0x81, 0x81, 0x2, 0x9823}]}) open(0x0, 0x0, 0x0) 11:48:39 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x48000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1027.012947][T19206] batadv_slave_0: entered promiscuous mode [ 1027.019818][T19206] batadv_slave_0: left promiscuous mode [ 1027.028947][T19206] batadv0: left promiscuous mode [ 1027.284116][T19211] batadv0: entered promiscuous mode [ 1027.365396][T19211] batadv_slave_0: entered promiscuous mode [ 1027.375114][T19211] batadv_slave_0: left promiscuous mode 11:48:40 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xff7f, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:40 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2000000000000242, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6, 0x1}]}) open(0x0, 0x0, 0x0) 11:48:40 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xe168110000000000) [ 1027.500469][T19211] batadv0: left promiscuous mode 11:48:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x76e2}]}]}, 0x44}}, 0x0) 11:48:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001000)=@nat={'nat\x00', 0x19, 0x0, 0x0, [], 0x0, 0x0, 0x0}, 0x138) [ 1027.785788][T19215] batadv0: entered promiscuous mode [ 1027.793088][ T27] audit: type=1326 audit(1697456920.606:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19217 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:48:40 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2000000000000242, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6, 0x1}]}) open(0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) [ 1027.849672][T19215] batadv_slave_0: entered promiscuous mode [ 1027.860397][T19215] batadv_slave_0: left promiscuous mode 11:48:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'ip6gretap0\x00', 0x400}) [ 1027.897899][T19215] batadv0: left promiscuous mode 11:48:40 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4a000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1028.261986][T19227] batadv0: entered promiscuous mode 11:48:41 executing program 3: sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000018c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={0x0, 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 11:48:41 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x3ffff, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1028.349248][T19227] batadv_slave_0: entered promiscuous mode [ 1028.356339][T19227] batadv_slave_0: left promiscuous mode 11:48:41 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2000000000000242, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6, 0x1}]}) open(0x0, 0x0, 0x0) 11:48:41 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f0000001980)=@o_path={0x0}, 0x18) [ 1028.390638][T19227] batadv0: left promiscuous mode [ 1028.574815][T19231] batadv0: entered promiscuous mode 11:48:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xeaffffff00000000) [ 1028.619808][T19231] batadv_slave_0: entered promiscuous mode [ 1028.635419][T19231] batadv_slave_0: left promiscuous mode 11:48:41 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="03", 0x1}], 0x1, &(0x7f0000000340)=[{0x18, 0x0, 0x0, "01"}, {0x10}], 0x28}, 0x0) [ 1028.666367][T19231] batadv0: left promiscuous mode 11:48:41 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4c000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x12}, 0x48) 11:48:41 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) r1 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x26, 0xfffffffe}}, './file0\x00'}) [ 1028.981093][T19243] batadv0: entered promiscuous mode 11:48:41 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x40000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1029.014888][ T27] audit: type=1326 audit(1697456921.806:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19239 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:48:41 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002040)={@map=0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 11:48:42 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x90) [ 1029.103537][T19243] batadv_slave_0: entered promiscuous mode [ 1029.110537][T19243] batadv_slave_0: left promiscuous mode [ 1029.126246][ T27] audit: type=1326 audit(1697456921.926:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19246 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 1029.238860][T19243] batadv0: left promiscuous mode [ 1029.300107][T19251] batadv0: entered promiscuous mode [ 1029.313289][T19251] batadv_slave_0: entered promiscuous mode [ 1029.320068][T19251] batadv_slave_0: left promiscuous mode 11:48:42 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4e110000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:42 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002800)={0x0}, 0x10) [ 1029.379281][T19251] batadv0: left promiscuous mode 11:48:42 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000600)={&(0x7f0000000040)=@caif=@rfm={0x25, 0x0, "f87fc675569207c5d5df1e4927bb8396"}, 0x80, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000340)=[{0x18, 0x0, 0x0, "01"}, {0x10}], 0x28}, 0x0) [ 1029.641945][T19258] batadv0: entered promiscuous mode 11:48:42 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) [ 1029.731469][T19258] batadv_slave_0: entered promiscuous mode [ 1029.738277][T19258] batadv_slave_0: left promiscuous mode [ 1029.759272][T19258] batadv0: left promiscuous mode 11:48:42 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x80000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:42 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xfeffffff00000000) 11:48:42 executing program 5: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x5) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)=r0) openat$cgroup_freezer_state(r1, &(0x7f00000006c0), 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)}, 0x10) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000900)='memory.pressure\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@cgroup, 0x24, 0x0, 0x8, &(0x7f0000000940)=[0x0], 0x1, 0x0, 0x0, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0xfffffff7, 0xed, &(0x7f0000000bc0)=""/237, 0x41000, 0x3e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x90) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000ec0), 0x2, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000f00)='io.pressure\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000fc0)='io.pressure\x00', 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001180)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000011c0)='cgroup.controllers\x00', 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001240)='memory.events.local\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001480)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2f4d9, 0xffffffffffffffff, 0x0, &(0x7f0000001440)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) 11:48:42 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) open(0x0, 0x0, 0x0) (async) r1 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x26, 0xfffffffe}}, './file0\x00'}) 11:48:42 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x60000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1030.082632][ T27] audit: type=1326 audit(1697456922.896:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19264 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1030.100442][T19265] batadv0: entered promiscuous mode 11:48:43 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="03", 0x1}, {&(0x7f0000000100)="a2", 0x1}, {0x0}], 0x3, &(0x7f0000000340)=[{0x18, 0x0, 0x0, "01"}, {0x10}], 0x28}, 0x0) 11:48:43 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) [ 1030.263735][T19265] batadv_slave_0: entered promiscuous mode [ 1030.277704][T19265] batadv_slave_0: left promiscuous mode [ 1030.303398][ T27] audit: type=1326 audit(1697456923.076:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19270 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 1030.354673][T19265] batadv0: left promiscuous mode 11:48:43 executing program 3: openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz1\x00', 0x200002, 0x0) 11:48:43 executing program 5: ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0xa, 0x0, 0x2, &(0x7f0000002080)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) [ 1030.597349][T19275] batadv0: entered promiscuous mode [ 1030.637193][T19275] batadv_slave_0: entered promiscuous mode [ 1030.644552][T19275] batadv_slave_0: left promiscuous mode 11:48:43 executing program 3: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001180)='syz1\x00', 0x1ff) [ 1030.696782][T19275] batadv0: left promiscuous mode 11:48:43 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x100000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:43 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xffffff7f00000000) 11:48:43 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x65580000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:43 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000f40)={@ifindex, 0xffffffffffffffff, 0x0, 0x28, 0x0, @prog_id}, 0x20) [ 1031.058746][T19288] batadv0: entered promiscuous mode 11:48:44 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async) r1 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x26, 0xfffffffe}}, './file0\x00'}) [ 1031.166645][T19288] batadv_slave_0: entered promiscuous mode [ 1031.173616][T19288] batadv_slave_0: left promiscuous mode [ 1031.230104][T19288] batadv0: left promiscuous mode [ 1031.317109][ T27] audit: type=1326 audit(1697456924.106:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19292 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:48:44 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000011c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) [ 1031.407917][T19291] batadv0: entered promiscuous mode 11:48:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x40, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x48) 11:48:44 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xe0ffff, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1031.501157][T19291] batadv_slave_0: entered promiscuous mode [ 1031.508483][T19291] batadv_slave_0: left promiscuous mode [ 1031.511000][ T27] audit: type=1326 audit(1697456924.326:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19296 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0x0 [ 1031.637143][T19291] batadv0: left promiscuous mode 11:48:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) [ 1031.747578][T19303] batadv0: entered promiscuous mode [ 1031.767291][T19303] batadv_slave_0: entered promiscuous mode [ 1031.774313][T19303] batadv_slave_0: left promiscuous mode 11:48:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x8fb9, 0x6}, 0x48) [ 1031.837464][T19303] batadv0: left promiscuous mode 11:48:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x68000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:44 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x0) 11:48:45 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xffffffff00000000) 11:48:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1032.149411][T19310] batadv0: entered promiscuous mode [ 1032.182745][T19310] batadv_slave_0: entered promiscuous mode [ 1032.189551][T19310] batadv_slave_0: left promiscuous mode [ 1032.223960][T19310] batadv0: left promiscuous mode 11:48:45 executing program 5: openat$tun(0xffffffffffffff9c, 0x0, 0x496040, 0x0) 11:48:45 executing program 2: ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r0 = memfd_secret(0x80000) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x2, 0xfffffffe}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x4, 0x40, 0x8, 0x9}, {0x4, 0x2, 0x4, 0x1ff}]}) [ 1032.391040][ T27] audit: type=1326 audit(1697456925.206:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19313 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1032.392217][T19315] batadv0: entered promiscuous mode 11:48:45 executing program 3: bpf$BPF_MAP_FREEZE(0x22, 0x0, 0x0) 11:48:45 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x6c000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:45 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001f80), 0x20) [ 1032.619700][ T27] audit: type=1326 audit(1697456925.446:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19319 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0xffff0000 [ 1032.658297][T19315] batadv_slave_0: entered promiscuous mode [ 1032.665275][T19315] batadv_slave_0: left promiscuous mode [ 1032.681285][T19315] batadv0: left promiscuous mode [ 1032.842465][T19324] batadv0: entered promiscuous mode 11:48:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1032.887727][T19324] batadv_slave_0: entered promiscuous mode [ 1032.896275][T19324] batadv_slave_0: left promiscuous mode [ 1032.943532][T19324] batadv0: left promiscuous mode 11:48:45 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000030c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 11:48:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, 0x0, 0x0) [ 1033.142158][T19328] batadv0: entered promiscuous mode [ 1033.181360][T19328] batadv_slave_0: entered promiscuous mode [ 1033.188161][T19328] batadv_slave_0: left promiscuous mode [ 1033.225906][T19328] batadv0: left promiscuous mode 11:48:46 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x6c030000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:46 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0xffffffffff600000) 11:48:46 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) 11:48:46 executing program 3: bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="12"}, 0x50) 11:48:46 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x3000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1033.576329][T19335] batadv0: entered promiscuous mode [ 1033.612656][ T27] audit: type=1326 audit(1697456926.406:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19333 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1033.642253][T19335] batadv_slave_0: entered promiscuous mode [ 1033.655253][T19335] batadv_slave_0: left promiscuous mode [ 1033.723063][T19335] batadv0: left promiscuous mode [ 1033.882295][T19342] batadv0: entered promiscuous mode [ 1033.894971][T19342] batadv_slave_0: entered promiscuous mode [ 1033.902402][T19342] batadv_slave_0: left promiscuous mode [ 1033.909702][T19342] batadv0: left promiscuous mode 11:48:47 executing program 2: ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) (async) r0 = memfd_secret(0x80000) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x2, 0xfffffffe}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x4, 0x40, 0x8, 0x9}, {0x4, 0x2, 0x4, 0x1ff}]}) 11:48:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002d40)={0x18, 0x5, &(0x7f0000002ac0)=@raw=[@map_val, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, @call, @exit], &(0x7f0000002b40)='syzkaller\x00', 0x4, 0x94, &(0x7f0000002b80)=""/148}, 0x90) 11:48:47 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002d40)={0x18, 0x3, &(0x7f0000002ac0)=@raw=[@map_val, @jmp], &(0x7f0000002b40)='syzkaller\x00', 0x4, 0x94, &(0x7f0000002b80)=""/148}, 0x90) 11:48:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x6e030000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:47 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) r0 = open(0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000000c0)={0xadf, &(0x7f0000000040)="3415d66ecd4d7f4fab492e5239e64407c0d0819823bf6e7dd365a341980ccff1ea64910f03791f8a19be3a5742c039ced4a0ca"}) 11:48:47 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002040)={@map=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)}, 0x40) [ 1034.939401][T19348] batadv0: entered promiscuous mode 11:48:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) [ 1034.990928][ T27] audit: type=1326 audit(1697456927.776:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19346 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1035.013863][T19348] batadv_slave_0: entered promiscuous mode [ 1035.021250][T19348] batadv_slave_0: left promiscuous mode [ 1035.082744][T19348] batadv0: left promiscuous mode 11:48:48 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=[{0x10}, {0x10}], 0x20}, 0x0) [ 1035.248286][T19351] batadv0: entered promiscuous mode 11:48:48 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="03", 0x1}], 0x1, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "01e74f09b946c48741b84057f0601cc591"}], 0x28}, 0x0) [ 1035.292721][T19351] batadv_slave_0: entered promiscuous mode [ 1035.299533][T19351] batadv_slave_0: left promiscuous mode [ 1035.323659][T19351] batadv0: left promiscuous mode 11:48:48 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x5000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:48 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x71030000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1035.805459][T19364] batadv0: entered promiscuous mode [ 1035.836445][T19364] batadv_slave_0: entered promiscuous mode [ 1035.843606][T19364] batadv_slave_0: left promiscuous mode [ 1035.859593][T19364] batadv0: left promiscuous mode [ 1035.930039][T19365] batadv0: entered promiscuous mode [ 1035.950006][T19365] batadv_slave_0: entered promiscuous mode [ 1035.956982][T19365] batadv_slave_0: left promiscuous mode [ 1036.007786][T19365] batadv0: left promiscuous mode [ 1036.027363][ T27] audit: type=1326 audit(1697456928.856:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19366 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0xffff0000 11:48:49 executing program 2: ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) (async) r0 = memfd_secret(0x80000) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x2, 0xfffffffe}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x4, 0x40, 0x8, 0x9}, {0x4, 0x2, 0x4, 0x1ff}]}) 11:48:49 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000004740), 0x20) 11:48:49 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x0) (async) r0 = open(0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000000c0)={0xadf, &(0x7f0000000040)="3415d66ecd4d7f4fab492e5239e64407c0d0819823bf6e7dd365a341980ccff1ea64910f03791f8a19be3a5742c039ced4a0ca"}) 11:48:49 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x6000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x74000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:49 executing program 5: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 1037.002294][ T27] audit: type=1326 audit(1697456929.816:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19371 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1037.007860][T19379] batadv0: entered promiscuous mode 11:48:49 executing program 3: bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000001f40), 0x4) 11:48:50 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="03", 0x1}, {&(0x7f0000000100)="a2", 0x1}], 0x2}, 0x0) [ 1037.133499][T19379] batadv_slave_0: entered promiscuous mode [ 1037.140501][T19379] batadv_slave_0: left promiscuous mode [ 1037.260974][T19379] batadv0: left promiscuous mode 11:48:50 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=[{0x18, 0x0, 0x0, "a4"}, {0x10}], 0x28}, 0x0) [ 1037.359258][T19376] batadv0: entered promiscuous mode 11:48:50 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x7000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1037.412368][T19376] batadv_slave_0: entered promiscuous mode [ 1037.419153][T19376] batadv_slave_0: left promiscuous mode 11:48:50 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 1037.498794][T19376] batadv0: left promiscuous mode 11:48:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000bc0)={'veth0_to_batadv\x00'}) [ 1037.700569][T19388] batadv0: entered promiscuous mode [ 1037.734007][T19388] batadv_slave_0: entered promiscuous mode [ 1037.747963][T19388] batadv_slave_0: left promiscuous mode [ 1037.802412][T19388] batadv0: left promiscuous mode [ 1038.087165][ T27] audit: type=1326 audit(1697456930.916:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d067cae9 code=0xffff0000 11:48:51 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002040)={@map=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002680)) 11:48:51 executing program 5: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002d40)={0x0, 0x2, &(0x7f0000002ac0)=@raw=[@alu={0x0, 0x1}, @exit], &(0x7f0000002b40)='syzkaller\x00', 0x4}, 0x90) 11:48:51 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) r0 = open(0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000000c0)={0xadf, &(0x7f0000000040)="3415d66ecd4d7f4fab492e5239e64407c0d0819823bf6e7dd365a341980ccff1ea64910f03791f8a19be3a5742c039ced4a0ca"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async) open(0x0, 0x0, 0x0) (async) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000000c0)={0xadf, &(0x7f0000000040)="3415d66ecd4d7f4fab492e5239e64407c0d0819823bf6e7dd365a341980ccff1ea64910f03791f8a19be3a5742c039ced4a0ca"}) (async) 11:48:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x8fb9, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, 0x48) 11:48:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x7a000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:51 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x8000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1038.948548][T19404] batadv0: entered promiscuous mode 11:48:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x18}, 0x48) [ 1038.981527][ T27] audit: type=1326 audit(1697456931.776:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19397 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:48:51 executing program 5: bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={0x0}, 0x18) [ 1039.043974][T19404] batadv_slave_0: entered promiscuous mode [ 1039.050930][T19404] batadv_slave_0: left promiscuous mode [ 1039.120657][T19404] batadv0: left promiscuous mode [ 1039.138978][ T27] audit: type=1326 audit(1697456931.926:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19397 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:48:52 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x25, 0x40}, {0x6}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r1) poll(&(0x7f0000000040)=[{r0, 0x40}, {r0, 0x8000}, {r1, 0x1119}], 0x3, 0x1) open(0x0, 0x0, 0x0) [ 1039.246092][T19405] batadv0: entered promiscuous mode 11:48:52 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002d40)={0x18, 0x4, &(0x7f0000002ac0)=@raw=[@map_val, @alu={0x0, 0x0, 0x3}, @call], &(0x7f0000002b40)='syzkaller\x00', 0x4, 0x94, &(0x7f0000002b80)=""/148}, 0x90) [ 1039.344201][T19405] batadv_slave_0: entered promiscuous mode [ 1039.353383][T19405] batadv_slave_0: left promiscuous mode 11:48:52 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002d40)={0x18, 0x6, &(0x7f0000002ac0)=@raw=[@jmp, @map_idx, @alu={0x7}, @call, @exit], &(0x7f0000002b40)='syzkaller\x00', 0x4, 0x94, &(0x7f0000002b80)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002c40), 0x8}, 0x90) 11:48:52 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x7c100000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1039.478457][T19405] batadv0: left promiscuous mode [ 1039.821084][T19422] batadv0: entered promiscuous mode [ 1039.878932][T19422] batadv_slave_0: entered promiscuous mode [ 1039.886014][T19422] batadv_slave_0: left promiscuous mode [ 1039.937799][T19422] batadv0: left promiscuous mode 11:48:52 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000001380)=""/4081, 0x26, 0xff1, 0x1}, 0x20) 11:48:52 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @union]}}, &(0x7f0000001380)=""/4081, 0x32, 0xff1, 0x1}, 0x20) 11:48:52 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@map, 0xffffffffffffffff, 0x11, 0x0, 0x0, @link_id}, 0x20) 11:48:52 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x25, 0x40}, {0x6}]}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r1) (async) poll(&(0x7f0000000040)=[{r0, 0x40}, {r0, 0x8000}, {r1, 0x1119}], 0x3, 0x1) (async) open(0x0, 0x0, 0x0) 11:48:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x9000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:53 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x7d100000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1040.329444][T19431] batadv0: entered promiscuous mode 11:48:53 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x5, 0x7f, 0x2800, 0x81, 0x0, 0x1}, 0x48) 11:48:53 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000001380)=""/4081, 0x3e, 0xff1, 0x1}, 0x20) [ 1040.389697][T19431] batadv_slave_0: entered promiscuous mode [ 1040.396906][T19431] batadv_slave_0: left promiscuous mode 11:48:53 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x57}]}}, &(0x7f0000001380)=""/4081, 0x2a, 0xff1, 0x1}, 0x20) [ 1040.500652][T19431] batadv0: left promiscuous mode 11:48:53 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x25, 0x40}, {0x6}]}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r1) (async) poll(&(0x7f0000000040)=[{r0, 0x40}, {r0, 0x8000}, {r1, 0x1119}], 0x3, 0x1) (async) open(0x0, 0x0, 0x0) [ 1040.734813][T19443] batadv0: entered promiscuous mode 11:48:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_team\x00', 0x20}) 11:48:53 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xa000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1040.793913][T19443] batadv_slave_0: entered promiscuous mode [ 1040.800921][T19443] batadv_slave_0: left promiscuous mode [ 1040.882085][T19443] batadv0: left promiscuous mode 11:48:53 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @func_proto, @union]}}, &(0x7f0000001380)=""/4081, 0x4a, 0xff1, 0x1}, 0x20) 11:48:53 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f00000013c0)={0x2, &(0x7f0000001380)=[{0x8000, 0xf9, 0x7, 0xfe}, {0x2, 0x5, 0x7f, 0x100}]}) pwritev(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="b30abe51b62ba87fed63784207c97ddae148dc868dbca6f8d8296c805691f0903c6957e493e4809ca4106f878f0981d1b9a3a68b5bb42117b49c2a33a1f63fd1c992e77b6c37f7e4d2932574153b4f78981302b3c75d6a21bfe55b41fa0837e3686008", 0x63}, {&(0x7f0000001140)="21abafbd578b27b1b3ca2d966f27cbaf452cd7053e71b3183bf900be7c4fd28c7773fe62dccd9fe6774a69261fc59f84816de7bb", 0x34}, {&(0x7f0000001180)="f57571691bde8c2a75842c95afb6cfaecbaffd64170101964981864486df573777542765ece8d141fba4ca2848f03e74cbdd", 0x32}, {&(0x7f00000011c0)="73280a284c97485cbdbf4796c9e334ae0f11567d1bf53b0a4fd530c104def7678b52bf5875bfd7c713f44b127fd01636d2c02762ef91740f1b660b71fca2970aac48cec74fb645e0152dbf8dee82d99be41c21414cb2c8326fb5b16914f260d80c79b9ce6c1dd005d23495c8a950abae011a35f636a5082c7c3c805c4e8cecf99b5f557e6325ceb2358d6641754ea05ad8c43f69df57599f9df573624535337561fc42e34b4be61fc117aa9eea40f12cdd", 0xb1}, {&(0x7f0000001280)="c14d", 0x2}, {&(0x7f00000012c0)="01aa23f555e1680020a4fbbf33c3cb6898da70746b4d6bfb019f5763926074620f83aa96ecdf2b9fae9614783315cc7e031e207ef7431ea877dfbc286161cd44", 0x40}], 0x7, 0x8001, 0xf032) open(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x80880, 0x42) 11:48:53 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x5, 0x7f, 0x2800, 0x81, 0x0, 0x1}, 0x48) [ 1041.055985][T19453] batadv0: entered promiscuous mode 11:48:54 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x7e100000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1041.113505][T19453] batadv_slave_0: entered promiscuous mode [ 1041.126896][T19453] batadv_slave_0: left promiscuous mode [ 1041.170086][T19453] batadv0: left promiscuous mode [ 1041.220405][ T27] audit: type=1326 audit(1697456934.016:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19455 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:48:54 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0xd, 0x2}]}]}}, &(0x7f0000001380)=""/4081, 0x36, 0xff1, 0x1}, 0x20) 11:48:54 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@map, 0xffffffffffffffff, 0xc, 0x0, 0x0, @link_id}, 0x20) [ 1041.450298][T19463] batadv0: entered promiscuous mode 11:48:54 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xb000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1041.506471][T19463] batadv_slave_0: entered promiscuous mode [ 1041.513408][T19463] batadv_slave_0: left promiscuous mode [ 1041.581235][T19463] batadv0: left promiscuous mode 11:48:54 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xe}, {0xd}, {0xf, 0x3}]}, @union={0x5}]}}, &(0x7f0000001380)=""/4081, 0x62, 0xff1, 0x1}, 0x20) 11:48:54 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x5, 0x7f, 0x2800, 0x81, 0x0, 0x1}, 0x48) [ 1041.800299][T19469] batadv0: entered promiscuous mode 11:48:54 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@datasec={0x0, 0x1, 0x0, 0x6, 0x2, [{0xfffffffc}], "26b8"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "5aa7"}]}}, &(0x7f0000001380)=""/4094, 0x42, 0xffe, 0x1}, 0x20) [ 1041.928311][T19469] batadv_slave_0: entered promiscuous mode [ 1041.936677][T19469] batadv_slave_0: left promiscuous mode 11:48:54 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x81000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:54 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x3f00) 11:48:54 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f00000013c0)={0x2, &(0x7f0000001380)=[{0x8000, 0xf9, 0x7, 0xfe}, {0x2, 0x5, 0x7f, 0x100}]}) (async) pwritev(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="b30abe51b62ba87fed63784207c97ddae148dc868dbca6f8d8296c805691f0903c6957e493e4809ca4106f878f0981d1b9a3a68b5bb42117b49c2a33a1f63fd1c992e77b6c37f7e4d2932574153b4f78981302b3c75d6a21bfe55b41fa0837e3686008", 0x63}, {&(0x7f0000001140)="21abafbd578b27b1b3ca2d966f27cbaf452cd7053e71b3183bf900be7c4fd28c7773fe62dccd9fe6774a69261fc59f84816de7bb", 0x34}, {&(0x7f0000001180)="f57571691bde8c2a75842c95afb6cfaecbaffd64170101964981864486df573777542765ece8d141fba4ca2848f03e74cbdd", 0x32}, {&(0x7f00000011c0)="73280a284c97485cbdbf4796c9e334ae0f11567d1bf53b0a4fd530c104def7678b52bf5875bfd7c713f44b127fd01636d2c02762ef91740f1b660b71fca2970aac48cec74fb645e0152dbf8dee82d99be41c21414cb2c8326fb5b16914f260d80c79b9ce6c1dd005d23495c8a950abae011a35f636a5082c7c3c805c4e8cecf99b5f557e6325ceb2358d6641754ea05ad8c43f69df57599f9df573624535337561fc42e34b4be61fc117aa9eea40f12cdd", 0xb1}, {&(0x7f0000001280)="c14d", 0x2}, {&(0x7f00000012c0)="01aa23f555e1680020a4fbbf33c3cb6898da70746b4d6bfb019f5763926074620f83aa96ecdf2b9fae9614783315cc7e031e207ef7431ea877dfbc286161cd44", 0x40}], 0x7, 0x8001, 0xf032) (async, rerun: 32) open(0x0, 0x0, 0x0) (rerun: 32) open(&(0x7f0000000040)='./file0\x00', 0x80880, 0x42) [ 1042.090971][T19469] batadv0: left promiscuous mode 11:48:55 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x1}]}]}}, &(0x7f0000001380)=""/4081, 0x32, 0xff1, 0x1}, 0x20) [ 1042.316833][T19479] batadv0: entered promiscuous mode 11:48:55 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xc000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:55 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef={0x2}]}, {0x0, [0x0]}}, &(0x7f0000000380)=""/4096, 0x27, 0x1000, 0x1}, 0x20) [ 1042.406673][T19479] batadv_slave_0: entered promiscuous mode [ 1042.417099][T19479] batadv_slave_0: left promiscuous mode [ 1042.443671][ T27] audit: type=1326 audit(1697456935.226:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19480 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1042.484118][T19479] batadv0: left promiscuous mode 11:48:55 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x5, 0x7f, 0x2800, 0x81, 0x0, 0x1}, 0x48) 11:48:55 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @union={0x0, 0x0, 0x0, 0xf}]}}, &(0x7f0000001380)=""/4081, 0x32, 0xff1, 0x1}, 0x20) [ 1042.724001][T19489] batadv0: entered promiscuous mode 11:48:55 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000001380)=""/4081, 0x26, 0xff1, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r0, 0x20, &(0x7f0000000700)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/70, 0x46}}, 0x10) [ 1042.768359][T19489] batadv_slave_0: entered promiscuous mode [ 1042.776754][T19489] batadv_slave_0: left promiscuous mode 11:48:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x81ffffff, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1042.872236][T19489] batadv0: left promiscuous mode 11:48:55 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}, @func_proto, @typedef={0x3, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000001380)=""/4081, 0x4d, 0xff1, 0x4}, 0x20) 11:48:56 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x303, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000f00)={0x0, 0x0, 0x5, &(0x7f0000000c80)={0x5, 0xf, 0x5}}) [ 1043.198675][T19497] batadv0: entered promiscuous mode 11:48:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xd000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1043.286155][T19497] batadv_slave_0: entered promiscuous mode [ 1043.293183][T19497] batadv_slave_0: left promiscuous mode [ 1043.348924][T19497] batadv0: left promiscuous mode 11:48:56 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f00000013c0)={0x2, &(0x7f0000001380)=[{0x8000, 0xf9, 0x7, 0xfe}, {0x2, 0x5, 0x7f, 0x100}]}) pwritev(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="b30abe51b62ba87fed63784207c97ddae148dc868dbca6f8d8296c805691f0903c6957e493e4809ca4106f878f0981d1b9a3a68b5bb42117b49c2a33a1f63fd1c992e77b6c37f7e4d2932574153b4f78981302b3c75d6a21bfe55b41fa0837e3686008", 0x63}, {&(0x7f0000001140)="21abafbd578b27b1b3ca2d966f27cbaf452cd7053e71b3183bf900be7c4fd28c7773fe62dccd9fe6774a69261fc59f84816de7bb", 0x34}, {&(0x7f0000001180)="f57571691bde8c2a75842c95afb6cfaecbaffd64170101964981864486df573777542765ece8d141fba4ca2848f03e74cbdd", 0x32}, {&(0x7f00000011c0)="73280a284c97485cbdbf4796c9e334ae0f11567d1bf53b0a4fd530c104def7678b52bf5875bfd7c713f44b127fd01636d2c02762ef91740f1b660b71fca2970aac48cec74fb645e0152dbf8dee82d99be41c21414cb2c8326fb5b16914f260d80c79b9ce6c1dd005d23495c8a950abae011a35f636a5082c7c3c805c4e8cecf99b5f557e6325ceb2358d6641754ea05ad8c43f69df57599f9df573624535337561fc42e34b4be61fc117aa9eea40f12cdd", 0xb1}, {&(0x7f0000001280)="c14d", 0x2}, {&(0x7f00000012c0)="01aa23f555e1680020a4fbbf33c3cb6898da70746b4d6bfb019f5763926074620f83aa96ecdf2b9fae9614783315cc7e031e207ef7431ea877dfbc286161cd44", 0x40}], 0x7, 0x8001, 0xf032) open(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x80880, 0x42) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f00000013c0)={0x2, &(0x7f0000001380)=[{0x8000, 0xf9, 0x7, 0xfe}, {0x2, 0x5, 0x7f, 0x100}]}) (async) pwritev(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="b30abe51b62ba87fed63784207c97ddae148dc868dbca6f8d8296c805691f0903c6957e493e4809ca4106f878f0981d1b9a3a68b5bb42117b49c2a33a1f63fd1c992e77b6c37f7e4d2932574153b4f78981302b3c75d6a21bfe55b41fa0837e3686008", 0x63}, {&(0x7f0000001140)="21abafbd578b27b1b3ca2d966f27cbaf452cd7053e71b3183bf900be7c4fd28c7773fe62dccd9fe6774a69261fc59f84816de7bb", 0x34}, {&(0x7f0000001180)="f57571691bde8c2a75842c95afb6cfaecbaffd64170101964981864486df573777542765ece8d141fba4ca2848f03e74cbdd", 0x32}, {&(0x7f00000011c0)="73280a284c97485cbdbf4796c9e334ae0f11567d1bf53b0a4fd530c104def7678b52bf5875bfd7c713f44b127fd01636d2c02762ef91740f1b660b71fca2970aac48cec74fb645e0152dbf8dee82d99be41c21414cb2c8326fb5b16914f260d80c79b9ce6c1dd005d23495c8a950abae011a35f636a5082c7c3c805c4e8cecf99b5f557e6325ceb2358d6641754ea05ad8c43f69df57599f9df573624535337561fc42e34b4be61fc117aa9eea40f12cdd", 0xb1}, {&(0x7f0000001280)="c14d", 0x2}, {&(0x7f00000012c0)="01aa23f555e1680020a4fbbf33c3cb6898da70746b4d6bfb019f5763926074620f83aa96ecdf2b9fae9614783315cc7e031e207ef7431ea877dfbc286161cd44", 0x40}], 0x7, 0x8001, 0xf032) (async) open(0x0, 0x0, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x80880, 0x42) (async) [ 1043.531071][T19503] batadv0: entered promiscuous mode 11:48:56 executing program 3: prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffb000/0x3000)=nil) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 11:48:56 executing program 5: mkdir(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f00000027c0)={0x74, 0x0, 0xffea12c6863b19d}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 1043.589270][T19503] batadv_slave_0: entered promiscuous mode [ 1043.596260][T19503] batadv_slave_0: left promiscuous mode [ 1043.632538][T19503] batadv0: left promiscuous mode [ 1043.643159][ T27] audit: type=1326 audit(1697456936.486:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:48:56 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x88470000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1043.698119][ T27] audit: type=1326 audit(1697456936.546:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1043.729370][ T33] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1043.765116][T19510] binder: 19508:19510 ioctl 6628 0 returned -22 11:48:56 executing program 3: munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) 11:48:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xe000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1044.016636][ T33] usb 3-1: Using ep0 maxpacket: 8 [ 1044.024944][T19514] batadv0: entered promiscuous mode 11:48:56 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffffffffffffffc8}}]}}, 0x0) [ 1044.113266][T19514] batadv_slave_0: entered promiscuous mode [ 1044.120085][T19514] batadv_slave_0: left promiscuous mode [ 1044.160496][T19514] batadv0: left promiscuous mode [ 1044.240716][ T33] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.252315][ T33] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.275648][T19518] batadv0: entered promiscuous mode 11:48:57 executing program 3: prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffb000/0x3000)=nil) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'ip6gretap0\x00', 0x400}) r2 = openat$sw_sync_info(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup3(r2, r0, 0x0) [ 1044.316403][T19518] batadv_slave_0: entered promiscuous mode [ 1044.323536][T19518] batadv_slave_0: left promiscuous mode 11:48:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x88480000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1044.358983][T19518] batadv0: left promiscuous mode 11:48:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x40, 0x2, 0x73, 0x20}, {0xb8ef, 0x7d, 0x81, 0x4}, {0x3, 0x4, 0x2, 0x9}]}) open(0x0, 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000100), 0x5, 0x410000) finit_module(r0, &(0x7f0000000140)='#\x00', 0x2) [ 1044.510714][ T775] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1044.511467][ T33] usb 3-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.40 [ 1044.527902][ T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.536525][ T33] usb 3-1: Product: syz [ 1044.540967][ T33] usb 3-1: Manufacturer: syz [ 1044.545764][ T33] usb 3-1: SerialNumber: syz [ 1044.663326][T19524] batadv0: entered promiscuous mode [ 1044.716109][T19524] batadv_slave_0: entered promiscuous mode [ 1044.723114][T19524] batadv_slave_0: left promiscuous mode [ 1044.738051][ T27] audit: type=1326 audit(1697456937.556:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19525 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1044.761704][T19524] batadv0: left promiscuous mode [ 1044.921694][ T775] usb 6-1: config index 0 descriptor too short (expected 65480, got 72) [ 1044.942118][ T33] usbhid 3-1:1.0: can't add hid device: -22 [ 1044.948650][ T33] usbhid: probe of 3-1:1.0 failed with error -22 [ 1044.980909][ T33] usb 3-1: USB disconnect, device number 65 [ 1045.123409][ T775] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1045.135820][ T775] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.145368][ T775] usb 6-1: Product: syz [ 1045.149742][ T775] usb 6-1: Manufacturer: syz [ 1045.154653][ T775] usb 6-1: SerialNumber: syz [ 1045.213914][ T775] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 11:48:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d00)=@security={'security\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0xffffffff, 0x448, 0x448, 0x448, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xf0, 0x90, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'sit0\x00'}}, @common=@ttl={{0x28}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) 11:48:58 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xf000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x88a8ffff, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:58 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000440)=[@register_looper], 0x1, 0x0, &(0x7f0000000480)='S'}) 11:48:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x40, 0x2, 0x73, 0x20}, {0xb8ef, 0x7d, 0x81, 0x4}, {0x3, 0x4, 0x2, 0x9}]}) open(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$audion(&(0x7f0000000100), 0x5, 0x410000) finit_module(r0, &(0x7f0000000140)='#\x00', 0x2) [ 1045.637061][T19535] batadv0: entered promiscuous mode [ 1045.681413][T19535] batadv_slave_0: entered promiscuous mode [ 1045.688225][T19535] batadv_slave_0: left promiscuous mode 11:48:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 1045.747709][T19535] batadv0: left promiscuous mode 11:48:58 executing program 3: sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x41188100, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000027c0)) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1045.846181][ T27] audit: type=1326 audit(1697456938.646:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19538 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1045.901198][T14546] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1045.950091][T19536] batadv0: entered promiscuous mode [ 1045.974200][T19536] batadv_slave_0: entered promiscuous mode [ 1045.981232][T19536] batadv_slave_0: left promiscuous mode [ 1046.003708][T19536] batadv0: left promiscuous mode 11:48:58 executing program 2: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x21) sched_setaffinity(0x0, 0x0, 0x0) syz_clone(0x0, &(0x7f0000000600)="c05e329b273766e963", 0x9, 0x0, &(0x7f0000000800), 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086607, &(0x7f0000000040)) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000008c0)={0xc4190080, 0x0, &(0x7f0000000440), &(0x7f0000000540), {}, &(0x7f0000000700)=""/182, 0xb6, &(0x7f00000007c0)=""/16, 0x0}, 0x58) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x3) [ 1046.121816][ T33] usb 6-1: USB disconnect, device number 9 11:48:59 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000007c0)={0x0, 0x2bdb26b275a7b872, 0x0, 0x0, @vifc_lcl_ifindex, @dev}, 0x10) 11:48:59 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x10000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:59 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x303, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x2}}}}}]}}]}}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11:48:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x9d000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:48:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x40, 0x2, 0x73, 0x20}, {0xb8ef, 0x7d, 0x81, 0x4}, {0x3, 0x4, 0x2, 0x9}]}) (async) open(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$audion(&(0x7f0000000100), 0x5, 0x410000) finit_module(r0, &(0x7f0000000140)='#\x00', 0x2) 11:48:59 executing program 2: socketpair(0x10, 0x0, 0xb4d, &(0x7f0000000000)) [ 1047.018916][T19559] batadv0: entered promiscuous mode [ 1047.033022][ T27] audit: type=1326 audit(1697456939.826:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19553 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1047.055234][T14546] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1047.068189][T14546] ath9k_htc: Failed to initialize the device 11:48:59 executing program 2: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086607, &(0x7f0000000040)) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) [ 1047.118370][T19559] batadv_slave_0: entered promiscuous mode [ 1047.125280][T19559] batadv_slave_0: left promiscuous mode [ 1047.132195][ T33] usb 6-1: ath9k_htc: USB layer deinitialized [ 1047.160748][T19559] batadv0: left promiscuous mode [ 1047.341481][T19556] batadv0: entered promiscuous mode [ 1047.349860][ T775] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1047.407601][T19556] batadv_slave_0: entered promiscuous mode [ 1047.414639][T19556] batadv_slave_0: left promiscuous mode [ 1047.455484][T19556] batadv0: left promiscuous mode 11:49:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [0x8, 0x0, 0x0, 0x0, 0x1f09, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x0, 0x31, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x1], [0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x401, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa36b, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe113, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x200, 0x9]}, 0x45c) 11:49:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xb8030000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1047.610878][ T775] usb 4-1: Using ep0 maxpacket: 8 [ 1047.753945][T19571] batadv0: entered promiscuous mode [ 1047.801558][T19571] batadv_slave_0: entered promiscuous mode [ 1047.808374][T19571] batadv_slave_0: left promiscuous mode [ 1047.818866][ T775] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1047.830261][ T775] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 11:49:00 executing program 5: ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0xa3, 0x0, &(0x7f0000000080)}) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x200, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000200)={r2, r0, 0x1f}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2480, 0x0) io_setup(0x10000, &(0x7f0000000280)) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x14000, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) io_cancel(0x0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000300)="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", 0x1000, 0x3ff, 0x0, 0x0, r4}, &(0x7f0000001380)) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, 0x0) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000001540)={[0x0, 0x10001, 0x6, 0x8, 0x64c88632, 0x0, 0x80000000, 0x100, 0x4, 0x0, 0x7, 0x5, 0x1000, 0x40a, 0xfff, 0x6, 0x8, 0x1, 0x6, 0xfffffffd, 0x1, 0x3, 0x6, 0x0, 0x1, 0xfffffff8, 0x27, 0x5, 0x3, 0x2, 0x8000, 0x9, 0x6, 0x9, 0x2, 0x2, 0x748, 0x3, 0x7fff, 0x6, 0x5, 0x2, 0x6, 0x7, 0x8000, 0x9, 0x3ff, 0xffffffff, 0x0, 0x0, 0x7, 0x100, 0x8302, 0x10000, 0x9, 0x3, 0xffff0000, 0xffffffe1, 0x0, 0x58ba1363, 0xa7, 0x5, 0x40, 0x47bf, 0xbf1, 0x1, 0x8000, 0x1, 0xe522, 0x3, 0xfff, 0xf11a, 0x80000001, 0x200, 0x2, 0x2, 0x1000, 0x80, 0x5, 0x3, 0x1000, 0xf3, 0x0, 0x0, 0x7, 0x3f, 0xffff0000, 0xffffffff, 0x9e, 0x9, 0x100, 0x0, 0x9, 0xbd39, 0x1, 0x0, 0x9, 0x80000000, 0x9, 0xe74b, 0x6, 0x4, 0x6, 0xba, 0x7, 0x6, 0x0, 0x5, 0x1ff, 0xd7bf, 0xd7b1, 0x7c, 0x0, 0x6, 0x1ff, 0x9, 0x6, 0x0, 0x3f, 0x3, 0x1, 0x3, 0x0, 0x5, 0x40, 0x0, 0x9, 0x1f, 0x7fff, 0x5, 0x4, 0x3ff, 0x7, 0x3f, 0x0, 0x1c9, 0x40, 0x0, 0x3, 0x164, 0x7ff, 0x8, 0x1ff, 0x9, 0x1ff, 0x6, 0x8, 0x0, 0x9, 0x1, 0x1, 0x3, 0x400, 0x2, 0x0, 0x800, 0x4, 0x8000, 0x9, 0xfffff001, 0x1, 0x7fffffff, 0xffffffff, 0x6, 0x0, 0x0, 0x7, 0x7a3a, 0x3, 0x4, 0x5, 0x0, 0xffffff7f, 0x0, 0x8, 0x6, 0xb83, 0x1ff, 0x4, 0xc2ac, 0x1, 0x1, 0x8, 0xb, 0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6, 0x0, 0x3, 0x200, 0x6, 0x1, 0x0, 0xffffffff, 0xfff, 0x9, 0x55, 0x80000001, 0x401, 0x80, 0x0, 0x6, 0x0, 0xaf, 0xd73, 0x7, 0x10001, 0x8, 0x0, 0x6c, 0x2, 0x0, 0x6, 0x7, 0x2, 0x6, 0x81, 0x45, 0x3, 0x9, 0xb5, 0x80000000, 0x4, 0x0, 0x0, 0x1, 0x4, 0x0, 0x8, 0xa2af, 0x1000, 0x4, 0x6, 0x4, 0x3, 0x401, 0xff, 0x3, 0x4, 0x3, 0x5, 0x3, 0x200, 0x3aa, 0x16, 0x1, 0x2, 0x81, 0x1, 0xa, 0x4, 0x9, 0x2, 0x6, 0x7f6, 0x9, 0x400, 0x7, 0x8, 0xaf, 0xfffffffa, 0x6235, 0xfffffffc, 0x0, 0x0, 0x4, 0x7ff, 0x1, 0x401, 0x395, 0x2, 0x3, 0x781b, 0xe4, 0x0, 0x8, 0x0, 0x2, 0x5, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4875, 0x0, 0xfff, 0x4, 0x7, 0x0, 0x5, 0x3, 0x5, 0x2, 0x2, 0x40, 0x7fff, 0xfff, 0x7fffffff, 0x9, 0xdada, 0x4, 0x3ff, 0x800, 0x80, 0x9, 0x3f, 0xffffff60, 0x0, 0x3ff, 0x400, 0x4, 0x2, 0x0, 0x10001, 0x5, 0x7, 0x8, 0x0, 0x6, 0x5, 0xfffffffa, 0xc7, 0x5, 0x3, 0x1, 0x200, 0x8000, 0x6, 0xd, 0x0, 0x8, 0x8, 0x0, 0x9, 0x6, 0x4a0a, 0x1, 0x4, 0x2, 0x9, 0x2, 0xffff, 0xffffffff, 0x5, 0x1, 0x2, 0x7fff, 0x5, 0x0, 0x1, 0x9, 0x0, 0x1ff, 0x2, 0x7ff, 0xa898, 0x2, 0x3f, 0x7ff, 0x0, 0x800, 0x4, 0x10001, 0x0, 0xf0000000, 0xbf4, 0x0, 0x87, 0x80000000, 0x1, 0x6, 0x1000, 0x0, 0x0, 0x5, 0x0, 0x365f, 0x147ec515, 0x3f, 0xdc, 0x0, 0x0, 0x5, 0x8d2, 0x3f, 0x0, 0x0, 0x2, 0x7f, 0x3, 0x0, 0x6ad, 0x6, 0x8001, 0x2, 0x1, 0xfffffffa, 0x0, 0x0, 0x3, 0x13, 0x7, 0x5, 0x101, 0x5, 0x0, 0x6, 0x5, 0x0, 0x6, 0x3f, 0x1, 0x0, 0x7, 0xdba, 0x10000, 0x8c3, 0x3, 0x0, 0x2, 0xec8, 0x222c, 0x7, 0x4, 0x74686f58, 0x1, 0x0, 0x582, 0x5, 0x8, 0x5, 0x5, 0x0, 0x2, 0x5, 0x8, 0x2c, 0x70, 0x735, 0xfffffff9, 0x8702, 0x9, 0xffff4eaf, 0x1000, 0xfffffffb, 0x8, 0x5, 0x4, 0xe3, 0x8001, 0x80000001, 0x9, 0x4f0e, 0x200, 0x4, 0xfff, 0x0, 0x460, 0x5, 0xaa, 0x63, 0x0, 0x8, 0x95a, 0xedf7, 0x7, 0x6, 0x5, 0x0, 0x6, 0x7ff, 0x0, 0x6cb2, 0x8, 0x2, 0x1f, 0x101, 0xb3b, 0x7, 0x5, 0x0, 0xfffffff9, 0x1000, 0x3f, 0x5, 0x1f, 0x0, 0x60d0b2df, 0x116cb6d3, 0x1, 0xff, 0x5, 0x3, 0x3ff, 0x0, 0x0, 0x4, 0xff, 0x0, 0x7, 0x0, 0x3, 0x59f, 0x6, 0x401, 0xc89f, 0x0, 0x6, 0x32f2, 0x40, 0x10000000, 0x6, 0x4, 0x0, 0x0, 0x10001, 0x6c1b, 0x1, 0x1, 0x6, 0x8000, 0x7, 0x7f, 0x5, 0x0, 0x40, 0x0, 0x0, 0x400, 0x8, 0x800, 0xff3, 0x67a6702d, 0x81, 0x3f, 0x0, 0x62, 0x3, 0xff, 0x0, 0x0, 0x8, 0x9, 0x8, 0xfffffc01, 0xc46, 0x9, 0x2, 0x5, 0x123b, 0x8, 0x0, 0x0, 0x100, 0x3, 0x81, 0x9, 0x3, 0x101, 0x4, 0xfffffffa, 0x4, 0x200, 0x0, 0xffffffff, 0x6, 0x80000000, 0xfffffc00, 0x6, 0x5, 0x3, 0x3, 0x3, 0x6, 0x1, 0xd074, 0x1, 0x1, 0xfff, 0x714, 0x3, 0x0, 0x0, 0x0, 0x800, 0x87, 0x10001, 0x81, 0x4, 0x0, 0x3, 0x6, 0x6d7a7181, 0x4, 0x3, 0x9, 0x9bb1, 0x1ff, 0x8, 0x80000000, 0x4, 0x10000, 0xffff, 0x3, 0x6, 0x0, 0x0, 0x9, 0x7fff, 0x1000, 0x4, 0x5a3, 0x5, 0x1, 0x6, 0x9, 0xfffffff9, 0x401, 0x1ff, 0x0, 0x0, 0xe4e, 0x3ff, 0x0, 0x7, 0xfff, 0x6, 0x7f, 0x7, 0x9, 0x5, 0x3, 0x7, 0x3ff, 0x5, 0xe897, 0x0, 0x2, 0x7, 0xfffffffa, 0x4, 0x0, 0x0, 0xb8, 0x7f, 0x8, 0xfffffffe, 0x81, 0xa619, 0x7f, 0x8, 0x3, 0x4, 0x5, 0x1, 0x0, 0x4, 0x7, 0x2, 0x6, 0x1, 0x6, 0x0, 0x0, 0x8, 0x7, 0x401, 0x9, 0x392a, 0x2, 0x0, 0x808, 0xc03e, 0x1, 0x1, 0x3, 0x6, 0x1, 0x4, 0x81, 0x7f, 0x7ff, 0x8, 0x6, 0x4, 0xa1e, 0x2, 0x5, 0x7c4, 0x7, 0xfff, 0x0, 0x3, 0x10000, 0xe9, 0x0, 0x80000001, 0xca2, 0xfffffff7, 0x2, 0x4f, 0x4, 0xc56, 0x12d8, 0x9, 0x0, 0x0, 0x800, 0x8, 0x4, 0x0, 0x0, 0x65a0, 0x0, 0x0, 0xfff, 0x4015, 0x3, 0xffffffff, 0x7, 0x0, 0xfffffffb, 0xabb0, 0x1eb, 0x8000, 0x1000, 0x5, 0x6, 0x8001, 0x8, 0x0, 0xc77, 0x4, 0x3, 0x1, 0x81, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x80, 0xba, 0x5, 0x3, 0x0, 0xfffeffff, 0x1, 0x81, 0x0, 0x80, 0x40, 0x6, 0x3f, 0x401, 0x1, 0x88c5, 0xffffffff, 0x20, 0x4880, 0x83, 0x0, 0x3, 0x8, 0x2, 0x6, 0x7, 0xa7, 0x0, 0x0, 0x0, 0x1ff, 0x400000, 0x8, 0x1ff, 0x8, 0x0, 0xffff, 0x2, 0x4, 0x0, 0x8000, 0x3, 0x2, 0x5, 0x5, 0x4, 0x100, 0x4, 0x462, 0x6, 0x0, 0x4, 0x400, 0x0, 0x800, 0x0, 0x20, 0x4, 0x1, 0xffffffff, 0x0, 0x2, 0x4, 0x100, 0x2, 0xd, 0x2, 0x3, 0x7fffffff, 0x7fff, 0x0, 0xa1, 0x20, 0xc4, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe78f77a, 0x0, 0x0, 0x0, 0x2, 0x450000, 0xffffffff, 0x3b22893d, 0x7, 0x10000, 0x8001, 0x7ff, 0x6, 0x0, 0x10000, 0x1, 0x5, 0x9, 0x96, 0x1, 0x9, 0x0, 0x5b51, 0xffff, 0x8, 0x5, 0xba9, 0x2, 0x40, 0x893, 0x81, 0xffffff01, 0x1800000, 0x1, 0x7, 0xd3e3, 0x8001, 0x5, 0x8000, 0x6, 0xffff, 0x4, 0x1, 0x1, 0xfffffffd, 0x101, 0x9, 0xff, 0x94, 0x8001, 0x0, 0x5, 0x5, 0xffffffff, 0x5, 0xe45, 0x6, 0x6, 0x101, 0xa7, 0xca, 0x14, 0x6, 0x1f, 0x0, 0x40000, 0x3f, 0x3, 0x3eba, 0xfbd, 0x5, 0x0, 0xc0000000, 0xffff603c, 0xffffffff, 0xffffffff, 0x3ff, 0x400, 0x0, 0x1000, 0x80, 0x6f, 0xffffff6d, 0x0, 0x0, 0x7f, 0x40, 0x7, 0x0, 0x1, 0x2, 0x3, 0x3, 0x1, 0x0, 0x8a6, 0x9, 0x0, 0x0, 0x5, 0xffffaa3e, 0x401, 0xfb64, 0x416, 0x6, 0x9, 0x0, 0x0, 0x5a9, 0x7, 0x7, 0x5, 0x0, 0x5, 0x5, 0x0, 0x7, 0x1, 0xfffffffe, 0x4, 0xfffffffc, 0x401, 0x2, 0x1000, 0x8000, 0x10600000, 0x8, 0x101, 0xffff, 0x4f97, 0x0, 0x18, 0x0, 0x3, 0x0, 0x1ff, 0x6, 0x0, 0x80, 0xfacc, 0x1000, 0xfff, 0x3, 0x3, 0x7, 0x5, 0x9dc, 0x3, 0x1, 0x0, 0x6, 0x4, 0x0, 0x100, 0x2, 0x7, 0x2, 0x1, 0xfffa, 0x1, 0x6a5, 0xf5, 0xfff, 0x200, 0xffff, 0x9, 0x100, 0x2, 0x3, 0x40, 0xffffffe1, 0xe2, 0x2, 0x6, 0x1, 0x0, 0x4, 0x5, 0x0, 0x7fffffff, 0x200, 0x10000, 0x10000, 0x1, 0xff, 0x400, 0x0, 0x8, 0x6, 0x0, 0x80, 0xd22, 0x9]}) r5 = syz_open_dev$vcsn(0x0, 0x9, 0xa00) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r5, 0x80184153, &(0x7f0000002b00)={0x0, &(0x7f0000002ac0)=[&(0x7f0000002580), &(0x7f00000025c0)="b7cac5374fc021f06b8913a753a7abfef3bac44fddb4ce3d2b17bd04a9446a2dc6e6297cbcdc9608ebf6d9baa796674c89b66e4c65efd42a025073b902066771f468d507751d4bcdae0aed6c2ed02dc2ccf7067159afd5ef0cf256768359af72ee2c339fd8aa340822cf7ae63bf1ebc460862668ce1618826915d3beb42f7d", &(0x7f0000002640)="7a71113373222c023f2e6ccc15813c4f11c53a1f9178fa0d414d4e23d56c3b9f24682aa8387fee697f9ba8dd3ee78c91d864c6de96d355844f6e3f473a0aa1b7248a44259e6cad231db416e88818b6a7948ccaa9c308cdd8fb19f6b61cc82a7f7559a2fbfcb1dfcad610ff5b15e52bcd8ce5bfe35d779c6ea20332163b93a2d8031a7db2432058001633b7887923256c188c96f09b9176cfd56d0f0df00a62933cd5587db47de2d0d795a07a75244f44ec128c4781cd70a3cca607af835c7f19800dbad9a65b146c91d02f6804466b5004a22218da341bd723daf31adb0e2bef4c7fbfea1e44", &(0x7f0000002740)="c0daf2021571818fd5ba0800fc8a805c767468bfb7321564518ff63f1d685f746892641846ee6c6e10faa741adb3a5afadc2a5c316a9f18c10e44b7244f072a2c22cd9371fdd54d6673b02b4afe7f84b2334b5cc22ba18f4912d812fc47c7d027a0fe7cbcf534111fd21050b1cfefbdf8cd23ab6ce30c88d08134c41eefe410ff6bfbf", &(0x7f0000002800)="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", &(0x7f0000002900)="f26d5531b7b14bcb30587edcb7d4fea7dde9d4461263aecb436e8589b0ec8840a19cbf008dee9940d34ed2b0cc3dadfffb6556f9398c52d81684a6f92340f3e35ecd5437efaf8eece25f74c56bd61eb0d363cef4a3503f000eb551861d51ce46d0b1bcd538c7299d1346e96acacda6cf0d2828bd1f44ffd57e15939c8d8372a97b6105c597a6e80b0a1933bde4b2c6595f0e3b316fa9b98718806da475dada9fbfa54ced88cd", &(0x7f00000029c0)="6fddce69c68122460423aa3ff2490fdfc44b30c0bc14ce52d48a749eb1dd14018d2f17e51509db0c17e839b405acc37948962b33d0b6", &(0x7f0000002a40)="8719fc04bd0cbc3a253ed35f6a57748d7501f35e6131abd8ed0bd373be4fe3fa6615032390bba2fb4009900b1d8432bf3c8215175db23cbaa8be65b9aafbba90502e0e1e5dbd51504cbfb3087d523d77541b3e986ed7116332cc5ef7c213"]}) openat$vsock(0xffffffffffffff9c, &(0x7f0000002c80), 0x247c40, 0x0) pipe(&(0x7f00000030c0)={0xffffffffffffffff}) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000003200)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003140)={0x50, 0x0, 0xb, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0xc, 0x1, '\\\'%^-%@\x00'}, @NFTA_COMPAT_NAME={0xe, 0x1, '/dev/vcsu\x00'}, @NFTA_COMPAT_NAME={0xf, 0x1, '/dev/vsock\x00'}]}, 0x50}}, 0x20000001) 11:49:00 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockname$unix(r0, 0x0, 0x0) 11:49:00 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x0) 11:49:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x11000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1047.931227][T19571] batadv0: left promiscuous mode 11:49:01 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x303, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000f00)={0x0, 0x0, 0x19, &(0x7f0000000c80)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}) [ 1048.191435][ T27] audit: type=1326 audit(1697456940.986:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19575 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1048.201229][ T775] usb 4-1: string descriptor 0 read error: -22 [ 1048.221061][ T775] usb 4-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.40 [ 1048.230454][ T775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.281152][T19579] batadv0: entered promiscuous mode [ 1048.380354][T19579] batadv_slave_0: entered promiscuous mode [ 1048.387180][T19579] batadv_slave_0: left promiscuous mode [ 1048.421267][ T775] usbhid 4-1:1.0: can't add hid device: -22 [ 1048.427808][ T775] usbhid: probe of 4-1:1.0 failed with error -22 [ 1048.491413][T19579] batadv0: left promiscuous mode [ 1048.734230][ T775] usb 4-1: USB disconnect, device number 13 [ 1048.990674][ T33] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1049.270558][ T33] usb 3-1: Using ep0 maxpacket: 8 11:49:02 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)}, 0xfffffffffffffece) 11:49:02 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xc3ffffff, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'sit0\x00', 0x0}) 11:49:02 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x12000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:02 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x0) [ 1049.476410][T19589] batadv0: entered promiscuous mode [ 1049.501616][ T33] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1049.539463][T19589] batadv_slave_0: entered promiscuous mode [ 1049.546433][T19589] batadv_slave_0: left promiscuous mode 11:49:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xc, &(0x7f0000000d00)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0xffffffff, 0x448, 0x448, 0x448, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) [ 1049.565304][ T27] audit: type=1326 audit(1697456942.356:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19586 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1049.589122][T19589] batadv0: left promiscuous mode [ 1049.669641][T19588] batadv0: entered promiscuous mode [ 1049.711426][ T33] usb 3-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.40 [ 1049.720977][ T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.732184][ T33] usb 3-1: Product: syz [ 1049.736555][ T33] usb 3-1: Manufacturer: syz [ 1049.741989][ T33] usb 3-1: SerialNumber: syz [ 1049.775053][T19588] batadv_slave_0: entered promiscuous mode [ 1049.782017][T19588] batadv_slave_0: left promiscuous mode [ 1049.802345][T19588] batadv0: left promiscuous mode 11:49:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x0, "964c506f392fc1f6cf16a2c884b50a90295e17"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xa) [ 1049.859171][ T33] usbhid 3-1:1.0: couldn't find an input interrupt endpoint 11:49:02 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pselect6(0x40, &(0x7f0000000000)={0xc}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:49:02 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xd6050000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:02 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1b020000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1050.075263][ T33] usb 3-1: USB disconnect, device number 66 [ 1050.302078][T19601] batadv0: entered promiscuous mode [ 1050.351533][T19601] batadv_slave_0: entered promiscuous mode [ 1050.358345][T19601] batadv_slave_0: left promiscuous mode [ 1050.401304][T19601] batadv0: left promiscuous mode 11:49:03 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async) open(0x0, 0x0, 0x0) [ 1050.509106][T19602] batadv0: entered promiscuous mode [ 1050.573527][T19602] batadv_slave_0: entered promiscuous mode [ 1050.580844][T19602] batadv_slave_0: left promiscuous mode [ 1050.626825][T19602] batadv0: left promiscuous mode 11:49:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@empty}, 0xa, @in6=@mcast1, 0x0, 0x4}}, 0xe8) 11:49:03 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c00)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x0, 0x1f0, 0x1f0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @multicast2, 0x0, 0xff, 'veth0_to_bridge\x00', 'wlan1\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @common=@CLUSTERIP={0x60}}, {{@ip={@empty, @private, 0x0, 0x0, 'bond_slave_1\x00', 'pimreg\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) 11:49:03 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xf0ffffff, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:03 executing program 3: ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r0, 0x4068aea3, &(0x7f00000000c0)={0xa3, 0x0, &(0x7f0000000080)}) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x200, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r2, &(0x7f0000000200)={r3, r1, 0x1f}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2480, 0x0) io_setup(0x10000, &(0x7f0000000280)=0x0) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x14000, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001300)={r4}, 0x8) io_cancel(r5, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0xd3, r6, &(0x7f0000000300)="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", 0x1000, 0x3ff, 0x0, 0x0, r7}, &(0x7f0000001380)) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x14, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000804) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000001500)=0xd000) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000001540)={[0x422d, 0x10001, 0x6, 0x8, 0x64c88632, 0x0, 0x80000000, 0x100, 0x4, 0x0, 0x7, 0x5, 0x1000, 0x40a, 0xfff, 0x6, 0x8, 0x1, 0x6, 0xfffffffd, 0x1, 0x3, 0x6, 0x0, 0x1, 0xfffffff8, 0x27, 0x5, 0x3, 0x2, 0x0, 0x9, 0x6, 0x9, 0x2, 0x2, 0x748, 0x3, 0x7fff, 0x6, 0x5, 0x0, 0x6, 0x7, 0x8000, 0x9, 0x3ff, 0xffffffff, 0x2, 0xfe2b, 0x7, 0x100, 0x8302, 0x10000, 0x9, 0x3, 0xffff0000, 0xffffffe1, 0x0, 0x58ba1363, 0xa7, 0x5, 0x40, 0x47bf, 0xbf1, 0x1, 0x8000, 0x1, 0xe522, 0x3, 0xfff, 0xf11a, 0x80000001, 0x200, 0x2, 0x2, 0x1000, 0x80, 0x5, 0x3, 0x1000, 0xf3, 0x6, 0x0, 0x7, 0x3f, 0xffff0000, 0xffffffff, 0x9e, 0x9, 0x100, 0x0, 0x9, 0xbd39, 0x1, 0x0, 0x9, 0x80000000, 0x9, 0xe74b, 0x6, 0x4, 0x6, 0xba, 0x7, 0x6, 0x6, 0x5, 0x1ff, 0xd7bf, 0xd7b1, 0x7c, 0x0, 0x6, 0x1ff, 0x9, 0x6, 0x1f, 0x3f, 0x3, 0x1, 0x3, 0x0, 0x5, 0x40, 0x7, 0x9, 0x1f, 0x7fff, 0x5, 0x4, 0x3ff, 0x7, 0x3f, 0x2, 0x1c9, 0x40, 0x0, 0x3, 0x164, 0x7ff, 0x8, 0x1ff, 0x9, 0x1ff, 0x6, 0x8, 0x0, 0x9, 0x1, 0x1, 0x3, 0x400, 0x2, 0x0, 0x800, 0x4, 0x8000, 0x9, 0xfffff001, 0x1, 0x7fffffff, 0xffffffff, 0x0, 0x7, 0x5, 0x7, 0x7a3a, 0x3, 0x4, 0x5, 0x80, 0xffffff7f, 0x8, 0x8, 0x6, 0xb83, 0x1ff, 0x4, 0xc2ac, 0x1, 0x1, 0x8, 0xb, 0x8, 0x2, 0xc828, 0x2, 0x0, 0xfffffffd, 0x1, 0x6, 0x0, 0x3, 0x200, 0x6, 0x1, 0xdfe, 0xffffffff, 0xfff, 0x9, 0x55, 0x80000001, 0x401, 0x80, 0x8, 0x6, 0x1, 0xaf, 0xd73, 0x7, 0x10001, 0x8, 0x46, 0x6c, 0x2, 0x0, 0x6, 0x7, 0x2, 0x6, 0x81, 0x45, 0x3, 0x9, 0xb5, 0x80000000, 0x4, 0x0, 0x3ff, 0x1, 0x4, 0x5, 0x8, 0xa2af, 0x1000, 0x4, 0x6, 0x4, 0x3, 0x401, 0xff, 0x3, 0x4, 0x3, 0x5, 0x3, 0x200, 0x3aa, 0x16, 0x1, 0x2, 0x81, 0x1, 0xa, 0x4, 0x9, 0x2, 0x6, 0x7f6, 0x9, 0x400, 0x7, 0x8, 0xaf, 0xfffffffa, 0x6235, 0xfffffffc, 0x8, 0x400, 0x4, 0x7ff, 0x1, 0x401, 0x395, 0x2, 0x3, 0x781b, 0xe4, 0x0, 0x8, 0x0, 0x2, 0x5, 0x4, 0x2, 0x9, 0x1f, 0x1, 0x0, 0x0, 0x8, 0x4875, 0x0, 0xfff, 0x4, 0x7, 0x4, 0x5, 0x3, 0x5, 0x2, 0x2, 0x40, 0x7fff, 0xfff, 0x7fffffff, 0x9, 0xdada, 0x4, 0x3ff, 0x800, 0x80, 0x9, 0x3f, 0xffffff60, 0x4000000, 0x3ff, 0x400, 0x4, 0x2, 0x0, 0x10001, 0x5, 0x7, 0x8, 0x681, 0x6, 0x5, 0xfffffffa, 0xc7, 0x5, 0x3, 0x1, 0x200, 0x8000, 0x6, 0xd, 0x8, 0x8, 0x8, 0x0, 0x9, 0x6, 0x4a0a, 0x1, 0x4, 0x2, 0x9, 0x2, 0xffff, 0xffffffff, 0x5, 0x1, 0x2, 0x7fff, 0x5, 0x0, 0x1, 0x9, 0x0, 0x1ff, 0x2, 0x7ff, 0xa898, 0x2, 0x3f, 0x7ff, 0x0, 0x800, 0x4, 0x10001, 0xeb16, 0xf0000000, 0xbf4, 0x1ff, 0x87, 0x80000000, 0x1, 0x6, 0x1000, 0x8, 0x0, 0x5, 0x3, 0x365f, 0x147ec515, 0x3f, 0xdc, 0x3da0, 0x6, 0x5, 0x8d2, 0x3f, 0xffffffff, 0x1, 0x2, 0x7f, 0x3, 0x0, 0x6ad, 0x6, 0x8001, 0x2, 0x1, 0xfffffffa, 0x0, 0x0, 0x3, 0x13, 0x7, 0x5, 0x101, 0x5, 0x0, 0x6, 0x5, 0x2, 0x6, 0x3f, 0x1, 0x80, 0x7, 0xdba, 0x10000, 0x8c3, 0x3, 0x3af1, 0x2, 0xec8, 0x222c, 0x7, 0x4, 0x74686f58, 0x1, 0x80, 0x582, 0x5, 0x8, 0x5, 0x5, 0x1000, 0x2, 0x5, 0x8, 0x2c, 0x70, 0x735, 0xfffffff9, 0x8702, 0x9, 0xffff4eaf, 0x1000, 0xfffffffb, 0x8, 0x5, 0x4, 0xe3, 0x8001, 0x80000001, 0x9, 0x4f0e, 0x200, 0x4, 0xfff, 0x410d90b7, 0x460, 0x5, 0x0, 0x63, 0x3, 0x8, 0x95a, 0xedf7, 0x7, 0x6, 0x5, 0x0, 0x0, 0x7ff, 0x6, 0x6cb2, 0x8, 0x2, 0x1f, 0x101, 0xb3b, 0x7, 0x5, 0x0, 0xfffffff9, 0x1000, 0x3f, 0x5, 0x1f, 0x4, 0x60d0b2df, 0x116cb6d3, 0x1, 0xff, 0x5, 0x0, 0x3ff, 0x200, 0x0, 0x4, 0xff, 0x80000001, 0x7, 0x7, 0x3, 0x59f, 0x6, 0x401, 0xc89f, 0x0, 0x6, 0x32f2, 0x40, 0x10000000, 0x6, 0x4, 0x5, 0x4, 0x10001, 0x6c1b, 0x1, 0x1, 0x6, 0x8000, 0x7, 0x7f, 0x5, 0x0, 0x40, 0x3f, 0x5, 0x400, 0x8, 0x800, 0xff3, 0x67a6702d, 0x81, 0x3f, 0x9d13, 0x62, 0x3, 0xff, 0x0, 0x1c00000, 0x8, 0x9, 0x8, 0xfffffc01, 0xc46, 0x9, 0x2, 0x5, 0x123b, 0x8, 0x0, 0x40, 0x100, 0x3, 0x81, 0x9, 0x3, 0x101, 0x4, 0xfffffffa, 0x4, 0x200, 0x5, 0xffffffff, 0x6, 0x80000000, 0xfffffc00, 0x6, 0x5, 0x3, 0x3, 0x3, 0x6, 0x1, 0xd074, 0x1, 0x1, 0xfff, 0x714, 0x3, 0xdfde, 0x0, 0x0, 0x800, 0x87, 0x10001, 0x81, 0x4, 0x0, 0x3, 0x6, 0x6d7a7181, 0x4, 0x3, 0x9, 0x9bb1, 0x1ff, 0x8, 0x80000000, 0x4, 0x10000, 0xffff, 0x3, 0x6, 0x0, 0x0, 0x9, 0x7fff, 0x1000, 0x4, 0x5a3, 0x5, 0x1, 0x6, 0x9, 0xfffffff9, 0x401, 0x1ff, 0x0, 0x0, 0xe4e, 0x3ff, 0x9, 0x7, 0xfff, 0x6, 0x7f, 0x7, 0x9, 0x5, 0x3, 0x7, 0x3ff, 0x5, 0xe897, 0x4, 0x2, 0x7, 0xfffffffa, 0x4, 0x0, 0x3, 0xb8, 0x7f, 0x8, 0xfffffffe, 0x81, 0xa619, 0x7f, 0x8, 0x3, 0x4, 0x5, 0x1, 0x0, 0x4, 0x7, 0x2, 0x6, 0x1, 0x6, 0x8, 0x6, 0x8, 0x7, 0x401, 0x9, 0x392a, 0x2, 0x8, 0x808, 0xc03e, 0x1, 0x1, 0x3, 0x6, 0x1, 0x4, 0x81, 0x7f, 0x7ff, 0x8, 0x6, 0x4, 0xa1e, 0x2, 0x5, 0x7c4, 0x7, 0xfff, 0x1e1, 0x3, 0x10000, 0xe9, 0x0, 0x80000001, 0xca2, 0xfffffff7, 0x2, 0x4f, 0x4, 0xc56, 0x12d8, 0x9, 0x9, 0x0, 0x800, 0x8, 0x4, 0x2, 0x80, 0x65a0, 0x0, 0x7, 0xfff, 0x4015, 0x3, 0xffffffff, 0x7, 0x1, 0xfffffffb, 0xabb0, 0x1eb, 0x8000, 0x1000, 0x5, 0x6, 0x8001, 0x8, 0x0, 0xc77, 0x4, 0x3, 0x1, 0x81, 0x6, 0x18fc59b, 0xffff4751, 0x3, 0x0, 0x1, 0x80, 0xba, 0x5, 0x3, 0x239, 0xfffeffff, 0x1, 0x81, 0xb15, 0x80, 0x40, 0x6, 0x3f, 0x401, 0x1, 0x88c5, 0xffffffff, 0x20, 0x4880, 0x83, 0x0, 0x3, 0x8, 0x2, 0x6, 0x7, 0xa7, 0x5, 0x200, 0x40, 0x1ff, 0x400000, 0x8, 0x1ff, 0x8, 0x5, 0xffff, 0x2, 0x4, 0x1, 0x8000, 0x3, 0x2, 0x5, 0x5, 0x4, 0x100, 0x4, 0x462, 0x6, 0x8, 0x4, 0x400, 0x4, 0x800, 0x663, 0x20, 0x4, 0x1, 0xffffffff, 0x0, 0x2, 0x4, 0x100, 0x2, 0xd, 0x2, 0x3, 0x7fffffff, 0x7fff, 0x0, 0xa1, 0x20, 0xc4, 0x7ff, 0xffffffff, 0x7, 0xfff, 0x0, 0x3a7, 0xe78f77a, 0x0, 0xdddb, 0xff, 0x2, 0x450000, 0xffffffff, 0x3b22893d, 0x7, 0x10000, 0x8001, 0x7ff, 0x6, 0xffffffff, 0x10000, 0x1, 0x5, 0x9, 0x96, 0x1, 0x9, 0x0, 0x5b51, 0xffff, 0x8, 0x5, 0xba9, 0x2, 0x40, 0x893, 0x81, 0xffffff01, 0x1800000, 0x1, 0x7, 0xd3e3, 0x8001, 0x5, 0x8000, 0x6, 0xffff, 0x4, 0x1, 0x1, 0xfffffffd, 0x101, 0x9, 0xff, 0x94, 0x8001, 0x0, 0x5, 0x5, 0xffffffff, 0x5, 0xe45, 0x6, 0x6, 0x101, 0xa7, 0xca, 0x14, 0x6, 0x1f, 0x0, 0x40000, 0x3f, 0x3, 0x3eba, 0xfbd, 0x5, 0x80, 0xc0000000, 0xffff603c, 0xffffffff, 0xffffffff, 0x3ff, 0x400, 0x0, 0x1000, 0x80, 0x6f, 0xffffff6d, 0x0, 0x0, 0x7f, 0x40, 0x7, 0x3, 0x1, 0x2, 0x3, 0x3, 0x1, 0x5, 0x8a6, 0x9, 0x6, 0xa2, 0x5, 0xffffaa3e, 0x401, 0xfb64, 0x416, 0x6, 0x9, 0x0, 0x0, 0x5a9, 0x7, 0x7, 0x5, 0x0, 0x5, 0x5, 0xfffffe00, 0x7, 0x1, 0xfffffffe, 0x4, 0xfffffffc, 0x401, 0x2, 0x1000, 0x8000, 0x10600000, 0x8, 0x101, 0xffff, 0x4f97, 0xff, 0x18, 0x9, 0x3, 0x8ca0, 0x1ff, 0x6, 0x0, 0x80, 0xfacc, 0x1000, 0xfff, 0x3, 0x3, 0x7, 0x5, 0x9dc, 0x3, 0x1, 0x0, 0x6, 0x4, 0x0, 0x100, 0x2, 0x7, 0x2, 0x1, 0xfffa, 0x1, 0x6a5, 0xf5, 0xfff, 0x200, 0xffff, 0x9, 0x100, 0x2, 0x3, 0x40, 0xffffffe1, 0xe2, 0x2, 0x6, 0x1, 0x1, 0x4, 0x5, 0x8103, 0x7fffffff, 0x200, 0x10000, 0x10000, 0x1, 0xff, 0x400, 0x1b, 0x8, 0x6, 0x4, 0x80, 0xd22, 0x9]}) r8 = syz_open_dev$vcsn(&(0x7f0000002540), 0x9, 0xa00) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r8, 0x80184153, &(0x7f0000002b00)={0x0, &(0x7f0000002ac0)=[&(0x7f0000002580)="486eecab7d565c3ba194d8c1e1a07722a6b3", &(0x7f00000025c0)="b7cac5374fc021f06b8913a753a7abfef3bac44fddb4ce3d2b17bd04a9446a2dc6e6297cbcdc9608ebf6d9baa796674c89b66e4c65efd42a025073b902066771f468d507751d4bcdae0aed6c2ed02dc2ccf7067159afd5ef0cf256768359af72ee2c339fd8aa340822cf7ae63bf1ebc460862668ce1618826915d3beb42f7d", &(0x7f0000002640)="7a71113373222c023f2e6ccc15813c4f11c53a1f9178fa0d414d4e23d56c3b9f24682aa8387fee697f9ba8dd3ee78c91d864c6de96d355844f6e3f473a0aa1b7248a44259e6cad231db416e88818b6a7948ccaa9c308cdd8fb19f6b61cc82a7f7559a2fbfcb1dfcad610ff5b15e52bcd8ce5bfe35d779c6ea20332163b93a2d8031a7db2432058001633b7887923256c188c96f09b9176cfd56d0f0df00a62933cd5587db47de2d0d795a07a75244f44ec128c4781cd70a3cca607af835c7f19800dbad9a65b146c91d02f6804466b5004a22218da341bd723daf31adb0e2bef4c7fbfea1e446a3f8f0ccae20368f466a55c23a0f1aa", &(0x7f0000002740)="c0daf2021571818fd5ba0800fc8a805c767468bfb7321564518ff63f1d685f746892641846ee6c6e10faa741adb3a5afadc2a5c316a9f18c10e44b7244f072a2c22cd9371fdd54d6673b02b4afe7f84b2334b5cc22ba18f4912d812fc47c7d027a0fe7cbcf534111fd21050b1cfefbdf8cd23ab6ce30c88d08134c41eefe410ff6bfbf", &(0x7f0000002800)="e24b8418f7eee9351b70a44e3600e49a7548c9fad4262ab4fbb55524e645bec26d6ee38ed048abaae02d8ad71a334ddfde4db3913a02959db46b7a08cba796410ee36ce1887147ae82eb3b93b22dd9b8bbbb15e57cba46d23613452dace7bb1031885363440845be2e7e76819f18cec8f03f29338e28495b28433851340fc94f1ee26238b9a8dda1fe6e2b57423f8ccbe0cdf4c48e33034cfd395e7ddcdab31f081cda6edac4ed2755cca239c027e43df4dec7bfcf964ea00a1b33067217b142dc9165bb185494136b58ddb3179d98a603bda57e54851dc4bab60053b272be18358a05c4a0a45cc6bcab6e462468071f65074b1cb37d062940482e", &(0x7f0000002900)="f26d5531b7b14bcb30587edcb7d4fea7dde9d4461263aecb436e8589b0ec8840a19cbf008dee9940d34ed2b0cc3dadfffb6556f9398c52d81684a6f92340f3e35ecd5437efaf8eece25f74c56bd61eb0d363cef4a3503f000eb551861d51ce46d0b1bcd538c7299d1346e96acacda6cf0d2828bd1f44ffd57e15939c8d8372a97b6105c597a6e80b0a1933bde4b2c6595f0e3b316fa9b98718806da475dada9fbfa54ced88cd", 0x0, &(0x7f0000002a40)="8719fc04bd0cbc3a253ed35f6a57748d7501f35e6131abd8ed0bd373be4fe3fa6615032390bba2fb4009900b1d8432bf3c8215175db23cbaa8be65b9aafbba90502e0e1e5dbd51504cbfb3087d523d77541b3e986ed7116332cc5ef7c213275a5d4b3bf17dea236f6a842b2676acb5af520c9a3e28352926f5d45451b3"]}) openat$vsock(0xffffffffffffff9c, &(0x7f0000002c80), 0x247c40, 0x0) pipe(&(0x7f00000030c0)={0xffffffffffffffff}) sendmsg$NFNL_MSG_COMPAT_GET(r9, &(0x7f0000003200)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003140)={0x58, 0x0, 0xb, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0xc, 0x1, '\\\'%^-%@\x00'}, @NFTA_COMPAT_NAME={0xe, 0x1, '/dev/vcsu\x00'}, @NFTA_COMPAT_NAME={0xf, 0x1, '/dev/vsock\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4048000}, 0x20000001) [ 1050.790655][ T27] audit: type=1326 audit(1697456943.566:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19605 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:49:03 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x1, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x2000, 0x130) [ 1051.016803][T19613] x_tables: duplicate underflow at hook 2 11:49:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1e020000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:03 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x50043, 0x0) [ 1051.165088][T19611] batadv0: entered promiscuous mode [ 1051.172682][ T27] audit: type=1326 audit(1697456943.956:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19614 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:49:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000140)={@private, @local, @local}, 0xc) [ 1051.200615][T19611] batadv_slave_0: entered promiscuous mode [ 1051.201480][T19611] batadv_slave_0: left promiscuous mode 11:49:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d00)=@security={'security\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0xffffffff, 0x448, 0x448, 0x448, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xf0, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'sit0\x00'}}, @common=@ttl={{0x28}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) [ 1051.230804][T19611] batadv0: left promiscuous mode [ 1051.430617][T19622] batadv0: entered promiscuous mode 11:49:04 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfdffffff, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1051.576304][T19622] batadv_slave_0: entered promiscuous mode [ 1051.583215][T19622] batadv_slave_0: left promiscuous mode 11:49:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@private}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @dev}}}, 0xe8) [ 1051.683665][T19622] batadv0: left promiscuous mode [ 1051.905638][T19628] batadv0: entered promiscuous mode 11:49:04 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x20000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1052.023700][T19628] batadv_slave_0: entered promiscuous mode [ 1052.030797][T19628] batadv_slave_0: left promiscuous mode 11:49:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2d, &(0x7f0000000d00)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0xffffffff, 0x448, 0x448, 0x448, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) 11:49:05 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/key-users\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 11:49:05 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x1, 0x1}, {0x5}, {0x6}]}) (async) open(0x0, 0x2000, 0x130) [ 1052.155894][T19628] batadv0: left promiscuous mode 11:49:05 executing program 3: openat$incfs(0xffffffffffffff9c, &(0x7f0000000580)='.pending_reads\x00', 0x80140, 0x0) [ 1052.367337][T19632] batadv0: entered promiscuous mode [ 1052.429410][T19632] batadv_slave_0: entered promiscuous mode [ 1052.436388][T19632] batadv_slave_0: left promiscuous mode [ 1052.447882][T19632] batadv0: left promiscuous mode 11:49:05 executing program 5: unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x200) [ 1052.471235][ T27] audit: type=1326 audit(1697456945.326:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19636 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:49:05 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x1, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x2000, 0x130) 11:49:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfeffffff, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:05 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) 11:49:05 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000200)='.log\x00', 0x40, 0x0) 11:49:05 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x21100000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1052.884196][ T27] audit: type=1326 audit(1697456945.646:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19644 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1052.985480][T19647] batadv0: entered promiscuous mode 11:49:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0xe) [ 1053.046182][T19647] batadv_slave_0: entered promiscuous mode [ 1053.053585][T19647] batadv_slave_0: left promiscuous mode [ 1053.106598][T19647] batadv0: left promiscuous mode 11:49:06 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r0, 0x0, 0xc, 0x0, &(0x7f0000003580)) 11:49:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x18, &(0x7f0000000d00)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0xffffffff, 0x448, 0x448, 0x448, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) [ 1053.327584][T19653] batadv0: entered promiscuous mode 11:49:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xff600000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1053.451340][T19653] batadv_slave_0: entered promiscuous mode [ 1053.458162][T19653] batadv_slave_0: left promiscuous mode 11:49:06 executing program 5: io_pgetevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0xf7]}, 0x8}) [ 1053.581156][T19653] batadv0: left promiscuous mode 11:49:06 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000f80)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) [ 1053.849265][T19661] batadv0: entered promiscuous mode [ 1053.893533][T19661] batadv_slave_0: entered promiscuous mode [ 1053.900462][T19661] batadv_slave_0: left promiscuous mode 11:49:06 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$hiddev(r0, &(0x7f0000000000)=""/187, 0xbb) 11:49:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x8, 0x40, 0x35, 0x6}, {0x4, 0x3, 0x4, 0xd6}, {0x4dbb, 0x81, 0x20}, {0x401, 0x23, 0x4, 0x10000}, {0x435c, 0x5, 0x5d, 0x3}]}) open(0x0, 0x0, 0x0) 11:49:06 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x303, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000e00)=@lang_id={0x4}}, {0x50, &(0x7f0000000e40)=@string={0x50, 0x3, "617e32a2188fc443b1d3959fff87f11ebf11f6f6958684aa8842de19c1191bd009f9b705797d0beb6c074970ee4a44cac78d003cdc846147a4d0025e4143c8b137585bab7a362e2c7377f71fa0d8"}}]}) [ 1054.020776][T19661] batadv0: left promiscuous mode 11:49:06 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x22000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1054.281311][ T27] audit: type=1326 audit(1697456947.046:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19665 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:49:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x1a, &(0x7f0000000d00)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0xffffffff, 0x448, 0x448, 0x448, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) [ 1054.358544][T19672] binder: 19668:19672 ioctl c00c620f 0 returned -14 [ 1054.503616][T19674] batadv0: entered promiscuous mode [ 1054.511791][T14546] usb 6-1: new high-speed USB device number 10 using dummy_hcd 11:49:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xff7f0000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1054.610434][T19674] batadv_slave_0: entered promiscuous mode [ 1054.617239][T19674] batadv_slave_0: left promiscuous mode 11:49:07 executing program 3: io_setup(0xe5, &(0x7f0000000000)=0x0) io_getevents(r0, 0x3, 0x0, 0x0, 0x0) [ 1054.728629][T19674] batadv0: left promiscuous mode [ 1054.770570][T14546] usb 6-1: Using ep0 maxpacket: 8 [ 1054.890946][T14546] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 11:49:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x0, 0x200, 0x200, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "effbb1c875fddfc9a1aedb481eafef293752fe965b13cf52e6217da120a4"}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 'ip_vti0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) [ 1055.099691][T19678] batadv0: entered promiscuous mode [ 1055.120952][T14546] usb 6-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.40 [ 1055.130507][T14546] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.138754][T14546] usb 6-1: Product: syz [ 1055.143287][T14546] usb 6-1: Manufacturer: 繡ꈲ輘䏄펱龕蟿ựᆿ蚕ꪄ䊈᧞ᧁ퀛契ַ絹ݬ灉䫮쩄跇㰀蓜䝡키市䍁뇈堷꭛㙺Ⱞ睳ῷ [ 1055.162401][T14546] usb 6-1: SerialNumber: syz 11:49:08 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x8, 0x40, 0x35, 0x6}, {0x4, 0x3, 0x4, 0xd6}, {0x4dbb, 0x81, 0x20}, {0x401, 0x23, 0x4, 0x10000}, {0x435c, 0x5, 0x5d, 0x3}]}) (async) open(0x0, 0x0, 0x0) 11:49:08 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x22100000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1055.248217][T19678] batadv_slave_0: entered promiscuous mode [ 1055.263868][T19678] batadv_slave_0: left promiscuous mode [ 1055.329451][T14546] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 1055.388339][T19678] batadv0: left promiscuous mode 11:49:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x21, &(0x7f0000000d00)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0xffffffff, 0x448, 0x448, 0x448, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) [ 1055.529462][T14546] usb 6-1: USB disconnect, device number 10 [ 1055.594426][ T27] audit: type=1326 audit(1697456948.396:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19685 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:49:08 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000440)=[@register_looper], 0x0, 0x0, 0x0}) [ 1055.746616][T19684] batadv0: entered promiscuous mode 11:49:08 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xffff0300, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:08 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xffffffffffffffc3, 0x0, &(0x7f0000000440)=[@register_looper, @release], 0x86, 0x0, &(0x7f0000000480)="531491f732d3e4866ece173d2cda06c73daf77a3d5c88e409ead539cfcf1d2c3067dffed598f2b8d9b099e969c304015dcc5b91df4a19fc21c4b84ec2f4c865d724d8c7a046c7ce40523bf05c26a8e85df6010b0cdafc602b8d526001bd6809ff83c6a2585fea0fae6cd46c1cc751d7ca1726bc90e4f8f87a7b85c6ea9e5e6b403dcc9fd1c22"}) [ 1055.911507][T19684] batadv_slave_0: entered promiscuous mode [ 1055.918305][T19684] batadv_slave_0: left promiscuous mode [ 1055.996065][T19684] batadv0: left promiscuous mode 11:49:09 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @release], 0x1, 0x0, &(0x7f0000000480)='S'}) 11:49:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x1a, 0x0, 0x0) [ 1056.315165][T19694] batadv0: entered promiscuous mode 11:49:09 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x23100000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:09 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x8, 0x40, 0x35, 0x6}, {0x4, 0x3, 0x4, 0xd6}, {0x4dbb, 0x81, 0x20}, {0x401, 0x23, 0x4, 0x10000}, {0x435c, 0x5, 0x5d, 0x3}]}) open(0x0, 0x0, 0x0) 11:49:09 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@ifindex, 0xffffffffffffffff, 0x23, 0x0, 0x0, @prog_id}, 0x20) [ 1056.459116][T19694] batadv_slave_0: entered promiscuous mode [ 1056.466088][T19694] batadv_slave_0: left promiscuous mode [ 1056.602452][T19694] batadv0: left promiscuous mode 11:49:09 executing program 5: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)={@loopback}) 11:49:09 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x303, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000f00)={0x0, 0x0, 0xb, &(0x7f0000000c80)={0x5, 0xf, 0xb, 0x2, [@generic={0x3}, @generic={0x3, 0x10, 0x2}]}}) [ 1056.848007][ T27] audit: type=1326 audit(1697456949.616:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19702 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1056.942360][T19701] batadv0: entered promiscuous mode 11:49:09 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xffffa888, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x6, &(0x7f0000000d00)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0xffffffff, 0x448, 0x448, 0x448, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) 11:49:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private}}}}) [ 1057.151477][T19701] batadv_slave_0: entered promiscuous mode [ 1057.158287][T19701] batadv_slave_0: left promiscuous mode [ 1057.305478][T19701] batadv0: left promiscuous mode [ 1057.331288][ T5072] usb 4-1: new high-speed USB device number 14 using dummy_hcd 11:49:10 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) [ 1057.633118][T19716] batadv0: entered promiscuous mode [ 1057.650374][ T5072] usb 4-1: Using ep0 maxpacket: 8 11:49:10 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0xa, &(0x7f0000000240)=[{0x8, 0x3b, 0xb, 0x3}, {0x2, 0x3, 0x0, 0x4}, {0x3, 0x4, 0xca, 0x8}, {0x9, 0x2, 0x0, 0xe6bc}, {0xd8b, 0x80, 0x3f, 0x8}, {0x3, 0x9, 0x8, 0x711}, {0x2, 0x9, 0x3, 0x7}, {0x7fff, 0x7, 0x5, 0x1}, {0x8, 0x2, 0x0, 0x6}, {0x7ff, 0x30, 0x3, 0xfffffff7}]}) r1 = open(0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000700)={@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, {&(0x7f0000000600)=""/144, 0x90}, &(0x7f00000006c0), 0x10}, 0xa0) recvfrom$unix(r1, &(0x7f0000000300)=""/91, 0x5b, 0x2000, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x4, 0x4}}, './file0\x00'}) sendto$unix(r5, &(0x7f0000000540)="028701a8cb55e565dfcc910d255b75be7025b9476320b83b17f0a6d435ba52094644af7815e4483b6d1480520175886d91622d9e74e218", 0x37, 0x200000c0, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) recvfrom$unix(r2, &(0x7f00000000c0)=""/210, 0xd2, 0x40000101, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r6 = socket$nl_rdma(0x10, 0x3, 0x14) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ppoll(&(0x7f0000000400)=[{r6, 0x86}], 0x1, &(0x7f0000000480)={r7, r8+60000000}, &(0x7f00000004c0)={[0x1c00000000000000]}, 0x8) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0xd8, 0x1, 0x9, 0x2}, {0x2, 0x2, 0x81, 0x9}, {0xbb, 0x6, 0x1, 0x10001}]}, 0x10) 11:49:10 executing program 5: io_setup(0x8, &(0x7f0000000cc0)=0x0) io_submit(r0, 0x0, 0x0) io_cancel(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1057.803521][T19716] batadv_slave_0: entered promiscuous mode [ 1057.811299][T19716] batadv_slave_0: left promiscuous mode [ 1057.831736][T19716] batadv0: left promiscuous mode 11:49:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x23120000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1057.861552][ T5072] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 11:49:10 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept4$inet(r0, 0x0, 0x0, 0x40000) [ 1058.110943][ T27] audit: type=1326 audit(1697456950.846:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19720 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1058.113256][T19725] batadv0: entered promiscuous mode [ 1058.153994][ T5072] usb 4-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.40 [ 1058.163462][ T5072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.171868][ T5072] usb 4-1: Product: syz [ 1058.176229][ T5072] usb 4-1: Manufacturer: syz [ 1058.181098][ T5072] usb 4-1: SerialNumber: syz [ 1058.272342][T19725] batadv_slave_0: entered promiscuous mode [ 1058.279238][T19725] batadv_slave_0: left promiscuous mode 11:49:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf9) [ 1058.348765][ T5072] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 11:49:11 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xffffe000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1058.550798][T19725] batadv0: left promiscuous mode [ 1058.577292][T15139] usb 4-1: USB disconnect, device number 14 11:49:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x15, &(0x7f0000000d00)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0xffffffff, 0x448, 0x448, 0x448, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) [ 1058.879341][T19732] batadv0: entered promiscuous mode [ 1058.965024][T19732] batadv_slave_0: entered promiscuous mode [ 1058.973683][T19732] batadv_slave_0: left promiscuous mode 11:49:12 executing program 3: openat2$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f0000000580)={0x100c1}, 0x18) 11:49:12 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0xa, &(0x7f0000000240)=[{0x8, 0x3b, 0xb, 0x3}, {0x2, 0x3, 0x0, 0x4}, {0x3, 0x4, 0xca, 0x8}, {0x9, 0x2, 0x0, 0xe6bc}, {0xd8b, 0x80, 0x3f, 0x8}, {0x3, 0x9, 0x8, 0x711}, {0x2, 0x9, 0x3, 0x7}, {0x7fff, 0x7, 0x5, 0x1}, {0x8, 0x2, 0x0, 0x6}, {0x7ff, 0x30, 0x3, 0xfffffff7}]}) r1 = open(0x0, 0x0, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) (async) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) (async) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000700)={@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, {&(0x7f0000000600)=""/144, 0x90}, &(0x7f00000006c0), 0x10}, 0xa0) (async) recvfrom$unix(r1, &(0x7f0000000300)=""/91, 0x5b, 0x2000, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x4, 0x4}}, './file0\x00'}) sendto$unix(r5, &(0x7f0000000540)="028701a8cb55e565dfcc910d255b75be7025b9476320b83b17f0a6d435ba52094644af7815e4483b6d1480520175886d91622d9e74e218", 0x37, 0x200000c0, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) (async) recvfrom$unix(r2, &(0x7f00000000c0)=""/210, 0xd2, 0x40000101, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) (async) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ppoll(&(0x7f0000000400)=[{r6, 0x86}], 0x1, &(0x7f0000000480)={r7, r8+60000000}, &(0x7f00000004c0)={[0x1c00000000000000]}, 0x8) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0xd8, 0x1, 0x9, 0x2}, {0x2, 0x2, 0x81, 0x9}, {0xbb, 0x6, 0x1, 0x10001}]}, 0x10) 11:49:12 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x24000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:12 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in=@dev, @in6=@empty}}, {{@in=@local}, 0x0, @in=@dev}}, 0xe8) [ 1059.283365][T19732] batadv0: left promiscuous mode 11:49:12 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000007f40), 0x4000, 0x0) [ 1059.404725][T19741] batadv0: entered promiscuous mode [ 1059.498995][ T27] audit: type=1326 audit(1697456952.286:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19737 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1059.514263][T19741] batadv_slave_0: entered promiscuous mode [ 1059.528654][T19741] batadv_slave_0: left promiscuous mode 11:49:12 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xffffff7f, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x8000, {{0x2, 0x0, @multicast1}}}, 0x88) [ 1059.694184][T19741] batadv0: left promiscuous mode 11:49:12 executing program 3: r0 = socket(0x1, 0x3, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 11:49:12 executing program 2: prlimit64(0x0, 0x7, &(0x7f00000002c0), 0x0) socket(0x1, 0x3, 0x0) 11:49:12 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0xa, &(0x7f0000000240)=[{0x8, 0x3b, 0xb, 0x3}, {0x2, 0x3, 0x0, 0x4}, {0x3, 0x4, 0xca, 0x8}, {0x9, 0x2, 0x0, 0xe6bc}, {0xd8b, 0x80, 0x3f, 0x8}, {0x3, 0x9, 0x8, 0x711}, {0x2, 0x9, 0x3, 0x7}, {0x7fff, 0x7, 0x5, 0x1}, {0x8, 0x2, 0x0, 0x6}, {0x7ff, 0x30, 0x3, 0xfffffff7}]}) r1 = open(0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000700)={@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, {&(0x7f0000000600)=""/144, 0x90}, &(0x7f00000006c0), 0x10}, 0xa0) recvfrom$unix(r1, &(0x7f0000000300)=""/91, 0x5b, 0x2000, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x4, 0x4}}, './file0\x00'}) sendto$unix(r5, &(0x7f0000000540)="028701a8cb55e565dfcc910d255b75be7025b9476320b83b17f0a6d435ba52094644af7815e4483b6d1480520175886d91622d9e74e218", 0x37, 0x200000c0, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) (async) sendto$unix(r5, &(0x7f0000000540)="028701a8cb55e565dfcc910d255b75be7025b9476320b83b17f0a6d435ba52094644af7815e4483b6d1480520175886d91622d9e74e218", 0x37, 0x200000c0, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) recvfrom$unix(r2, &(0x7f00000000c0)=""/210, 0xd2, 0x40000101, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r6 = socket$nl_rdma(0x10, 0x3, 0x14) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ppoll(&(0x7f0000000400)=[{r6, 0x86}], 0x1, &(0x7f0000000480)={r7, r8+60000000}, &(0x7f00000004c0)={[0x1c00000000000000]}, 0x8) (async) ppoll(&(0x7f0000000400)=[{r6, 0x86}], 0x1, &(0x7f0000000480)={r7, r8+60000000}, &(0x7f00000004c0)={[0x1c00000000000000]}, 0x8) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0xd8, 0x1, 0x9, 0x2}, {0x2, 0x2, 0x81, 0x9}, {0xbb, 0x6, 0x1, 0x10001}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0xd8, 0x1, 0x9, 0x2}, {0x2, 0x2, 0x81, 0x9}, {0xbb, 0x6, 0x1, 0x10001}]}, 0x10) [ 1060.159074][ T27] audit: type=1326 audit(1697456952.946:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19756 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1060.212285][T19752] batadv0: entered promiscuous mode 11:49:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x29, &(0x7f0000000d00)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0xffffffff, 0x448, 0x448, 0x448, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) 11:49:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) 11:49:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x0, "964c570a000000000000a20b5bb70a90295e17"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xb) 11:49:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x24100000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1060.334610][T19752] batadv_slave_0: entered promiscuous mode [ 1060.341710][T19752] batadv_slave_0: left promiscuous mode [ 1060.394440][T19752] batadv0: left promiscuous mode 11:49:13 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xffffff81, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:13 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c00)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x1f0, 0x1f0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'wlan1\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@ip={@empty, @private, 0x0, 0x0, 'bond_slave_1\x00', 'pimreg\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) 11:49:13 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x303, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000e00)=@lang_id={0x4}}, {0x0, 0x0}]}) [ 1060.742733][T19768] batadv0: entered promiscuous mode [ 1060.849964][T19768] batadv_slave_0: entered promiscuous mode [ 1060.856985][T19768] batadv_slave_0: left promiscuous mode 11:49:13 executing program 2: prlimit64(0x0, 0x7, &(0x7f00000002c0), 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 1060.944052][T19768] batadv0: left promiscuous mode 11:49:13 executing program 0: pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000000140)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x11) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x0) 11:49:14 executing program 5: r0 = socket(0x1, 0x3, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280), &(0x7f0000000240)=0xffffffcc) [ 1061.132371][T19774] batadv0: entered promiscuous mode [ 1061.223322][T19774] batadv_slave_0: entered promiscuous mode [ 1061.230585][T19774] batadv_slave_0: left promiscuous mode 11:49:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x24120000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1061.280729][T19774] batadv0: left promiscuous mode 11:49:14 executing program 2: prlimit64(0x0, 0x7, &(0x7f00000002c0), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001900), 0x0, 0x0) [ 1061.364892][ T27] audit: type=1326 audit(1697456954.186:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19777 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1061.481021][T15139] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1061.509243][T19783] batadv0: entered promiscuous mode 11:49:14 executing program 5: prlimit64(0x0, 0x7, &(0x7f00000002c0), 0x0) syz_open_procfs$userns(0x0, &(0x7f00000000c0)) [ 1061.549109][T19783] batadv_slave_0: entered promiscuous mode [ 1061.556297][T19783] batadv_slave_0: left promiscuous mode [ 1061.583167][T19783] batadv0: left promiscuous mode 11:49:14 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xffffffc3, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1061.770492][T15139] usb 4-1: Using ep0 maxpacket: 8 11:49:14 executing program 5: prlimit64(0x0, 0x7, &(0x7f00000002c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) 11:49:14 executing program 2: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) 11:49:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1061.900690][T15139] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.915350][T15139] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.966224][T19789] batadv0: entered promiscuous mode [ 1062.061071][T19789] batadv_slave_0: entered promiscuous mode [ 1062.067874][T19789] batadv_slave_0: left promiscuous mode [ 1062.169765][T19789] batadv0: left promiscuous mode 11:49:15 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000280), 0x0, 0x80240) [ 1062.399343][T19796] batadv0: entered promiscuous mode [ 1062.408112][T15139] usb 4-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.40 [ 1062.417652][T15139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.429471][T15139] usb 4-1: Product: syz [ 1062.434276][T15139] usb 4-1: SerialNumber: syz [ 1062.483549][T19796] batadv_slave_0: entered promiscuous mode [ 1062.492501][T19796] batadv_slave_0: left promiscuous mode [ 1062.516071][T19796] batadv0: left promiscuous mode [ 1062.775975][T15139] usbhid 4-1:1.0: can't add hid device: -22 [ 1062.783246][T15139] usbhid: probe of 4-1:1.0 failed with error -22 [ 1062.805131][T15139] usb 4-1: USB disconnect, device number 15 11:49:16 executing program 3: prlimit64(0x0, 0x7, &(0x7f00000002c0), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 11:49:16 executing program 5: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) 11:49:16 executing program 0: pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000000140)) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x11) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async) open(0x0, 0x0, 0x0) 11:49:16 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r0) 11:49:16 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x2f000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:16 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffff0, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1063.407629][T19807] batadv0: entered promiscuous mode 11:49:16 executing program 2: prlimit64(0x0, 0x7, &(0x7f00000002c0), 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 1063.440538][ T27] audit: type=1326 audit(1697456956.246:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19800 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1063.500323][T19807] batadv_slave_0: entered promiscuous mode [ 1063.507132][T19807] batadv_slave_0: left promiscuous mode 11:49:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003b00)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 11:49:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5423, 0x0) [ 1063.571766][T19807] batadv0: left promiscuous mode 11:49:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5429, 0x0) [ 1063.726158][T19806] batadv0: entered promiscuous mode [ 1063.744207][T19806] batadv_slave_0: entered promiscuous mode [ 1063.755262][T19806] batadv_slave_0: left promiscuous mode [ 1063.816794][T19806] batadv0: left promiscuous mode 11:49:16 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffffd, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x4b37, 0x0) [ 1064.170978][T19823] batadv0: entered promiscuous mode 11:49:17 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x3a000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:17 executing program 2: prctl$PR_SET_MM(0x1b, 0x0, &(0x7f0000ffd000/0x2000)=nil) [ 1064.306614][T19823] batadv_slave_0: entered promiscuous mode [ 1064.315160][T19823] batadv_slave_0: left promiscuous mode 11:49:17 executing program 0: pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000000140)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x11) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x0) [ 1064.383299][T19823] batadv0: left promiscuous mode 11:49:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x0, "0e34efca7311ac045c084f80cdee32532922ad"}) [ 1064.626658][ T27] audit: type=1326 audit(1697456957.456:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19830 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1064.667465][T19829] batadv0: entered promiscuous mode [ 1064.691669][T19829] batadv_slave_0: entered promiscuous mode [ 1064.698538][T19829] batadv_slave_0: left promiscuous mode 11:49:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x4b4d, 0x0) 11:49:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x5419, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) [ 1064.771207][T19829] batadv0: left promiscuous mode 11:49:17 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffffe, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:17 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) 11:49:17 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x80086601, 0x0) [ 1065.097151][T19843] batadv0: entered promiscuous mode 11:49:18 executing program 2: ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 11:49:18 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x3f000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1065.143103][T19843] batadv_slave_0: entered promiscuous mode [ 1065.149906][T19843] batadv_slave_0: left promiscuous mode [ 1065.196302][T19843] batadv0: left promiscuous mode 11:49:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5408, 0x0) 11:49:18 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xffffffff, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5422, 0x0) [ 1065.491019][T19852] batadv0: entered promiscuous mode 11:49:18 executing program 5: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 11:49:18 executing program 3: mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) [ 1065.613565][T19852] batadv_slave_0: entered promiscuous mode [ 1065.622233][T19852] batadv_slave_0: left promiscuous mode [ 1065.702110][T19852] batadv0: left promiscuous mode [ 1065.870930][T19855] batadv0: entered promiscuous mode 11:49:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) 11:49:18 executing program 5: memfd_create(&(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x2) [ 1065.958196][T19855] batadv_slave_0: entered promiscuous mode [ 1065.965481][T19855] batadv_slave_0: left promiscuous mode 11:49:18 executing program 3: mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x930, 0x0, 0x80033, 0xffffffffffffffff, 0x0) [ 1066.031474][T19855] batadv0: left promiscuous mode 11:49:18 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x40000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1066.239467][T19867] batadv0: entered promiscuous mode 11:49:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5414, 0x0) 11:49:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x4b4b, 0x0) [ 1066.295705][T19867] batadv_slave_0: entered promiscuous mode [ 1066.302594][T19867] batadv_slave_0: left promiscuous mode [ 1066.329192][T19867] batadv0: left promiscuous mode 11:49:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x5608, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) 11:49:19 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000001080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000080)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) dup(r6) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000240)={0xffff, 0x0, &(0x7f0000000200)=[r5, r1, r6, r2]}, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000001100)={r3}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8100) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000001c0)={r3, 0x3, r7, 0xfffffeff}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000040)=0x3) 11:49:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x40110000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x4b6a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) [ 1066.685063][ T27] audit: type=1326 audit(1697456959.466:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19872 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:49:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x4b3d, 0x0) [ 1066.812651][T19880] batadv0: entered promiscuous mode 11:49:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x560e, 0x0) [ 1066.907170][T19880] batadv_slave_0: entered promiscuous mode [ 1066.915173][T19880] batadv_slave_0: left promiscuous mode [ 1066.982129][T19880] batadv0: left promiscuous mode 11:49:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x0, 0x0}) [ 1067.112750][T19881] batadv0: entered promiscuous mode 11:49:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x540f, 0x0) 11:49:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x2, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1067.228098][T19881] batadv_slave_0: entered promiscuous mode [ 1067.241808][T19881] batadv_slave_0: left promiscuous mode 11:49:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x802c542a, 0x0) [ 1067.361930][T19881] batadv0: left promiscuous mode 11:49:20 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000800), 0x4c, 0x0) 11:49:20 executing program 5: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000100)) r0 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000800000/0x800000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) [ 1067.677158][T19897] batadv0: entered promiscuous mode [ 1067.814454][T19897] batadv_slave_0: entered promiscuous mode [ 1067.821424][T19897] batadv_slave_0: left promiscuous mode [ 1067.879251][T19897] batadv0: left promiscuous mode 11:49:20 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000001080)={0x0}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000080)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) dup(r6) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000240)={0xffff, 0x0, &(0x7f0000000200)=[r5, r1, r6, r2]}, 0x4) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000001100)={r3}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8100) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000001c0)={r3, 0x3, r7, 0xfffffeff}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000040)=0x3) 11:49:20 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x48000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:20 executing program 3: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000000c0)='!%,@\',\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000100)='!%,@\',\x00') 11:49:20 executing program 5: prctl$PR_SET_MM(0x35, 0x0, &(0x7f0000ffd000/0x2000)=nil) 11:49:20 executing program 2: prctl$PR_SET_MM(0x2, 0x20000000, &(0x7f0000ffd000/0x2000)=nil) [ 1068.182916][T19908] batadv0: entered promiscuous mode 11:49:21 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x3, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5406, 0x0) [ 1068.253507][T19908] batadv_slave_0: entered promiscuous mode [ 1068.268373][T19908] batadv_slave_0: left promiscuous mode 11:49:21 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) 11:49:21 executing program 3: prctl$PR_SET_MM(0xd, 0x0, &(0x7f0000ffd000/0x2000)=nil) [ 1068.350884][T19908] batadv0: left promiscuous mode 11:49:21 executing program 5: mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) [ 1068.631304][T19919] batadv0: entered promiscuous mode 11:49:21 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$snddsp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x0) 11:49:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000000c0)=""/228) [ 1068.764772][T19919] batadv_slave_0: entered promiscuous mode [ 1068.777768][T19919] batadv_slave_0: left promiscuous mode 11:49:21 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000001080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000080)) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) dup(r6) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000240)={0xffff, 0x0, &(0x7f0000000200)=[r5, r1, r6, r2]}, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000001100)={r3}) (async) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8100) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000001c0)={r3, 0x3, r7, 0xfffffeff}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000040)=0x3) 11:49:21 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4a000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5427, 0x0) [ 1068.930800][T19919] batadv0: left promiscuous mode [ 1069.064968][ T27] audit: type=1326 audit(1697456961.906:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19933 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:49:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000f40)={&(0x7f0000000d40), 0xc, &(0x7f0000000f00)={&(0x7f0000000000)={0x1c, r1, 0x837c8d293ef9a975, 0x0, 0x0, {{}, {@void}}, [@NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0xffffffffffffff84}]}, 0x1c}}, 0x0) 11:49:21 executing program 2: r0 = socket(0x1, 0x1, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) [ 1069.170957][T19932] batadv0: entered promiscuous mode 11:49:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x4, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1069.243729][T19932] batadv_slave_0: entered promiscuous mode [ 1069.250812][T19932] batadv_slave_0: left promiscuous mode 11:49:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x5457, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) [ 1069.312492][T19932] batadv0: left promiscuous mode 11:49:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f80)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x59}, @void, @void}}}, 0x1c}}, 0x0) 11:49:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x4020940d, &(0x7f0000000080)={0xae4, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) [ 1069.579065][T19948] batadv0: entered promiscuous mode 11:49:22 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4c000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:22 executing program 5: prctl$PR_SET_MM(0x36, 0x0, &(0x7f0000ffd000/0x2000)=nil) [ 1069.659025][T19948] batadv_slave_0: entered promiscuous mode [ 1069.666138][T19948] batadv_slave_0: left promiscuous mode 11:49:22 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x11, 0x7}, {0x5, 0xfe}, {0x16, 0x0, 0x2}]}) open(0x0, 0x0, 0x0) [ 1069.753859][T19948] batadv0: left promiscuous mode 11:49:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x4b2f, 0x0) [ 1069.938960][T19956] batadv0: entered promiscuous mode 11:49:22 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffff"]) [ 1069.975697][T19956] batadv_slave_0: entered promiscuous mode [ 1069.984451][T19956] batadv_slave_0: left promiscuous mode 11:49:22 executing program 5: mmap$snddsp_control(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x83000000) [ 1070.062100][T19956] batadv0: left promiscuous mode 11:49:22 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x11, 0x7}, {0x5, 0xfe}, {0x16, 0x0, 0x2}]}) (async) open(0x0, 0x0, 0x0) 11:49:23 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x5, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000f40)={&(0x7f0000000d40), 0xfffffffffffffe09, &(0x7f0000000f00)={&(0x7f0000000d80)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1c}}, 0x0) 11:49:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x560e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) [ 1070.398156][T19966] batadv0: entered promiscuous mode 11:49:23 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x4e110000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:23 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x11, 0x7}, {0x5, 0xfe}, {0x16, 0x0, 0x2}]}) open(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x11, 0x7}, {0x5, 0xfe}, {0x16, 0x0, 0x2}]}) (async) open(0x0, 0x0, 0x0) (async) [ 1070.472115][T19966] batadv_slave_0: entered promiscuous mode [ 1070.478914][T19966] batadv_slave_0: left promiscuous mode 11:49:23 executing program 5: prctl$PR_SET_MM(0x21, 0x0, &(0x7f0000ffd000/0x2000)=nil) [ 1070.542497][T19966] batadv0: left promiscuous mode 11:49:23 executing program 3: prctl$PR_SET_MM(0xf, 0x0, &(0x7f0000ffd000/0x2000)=nil) [ 1070.734800][T19976] batadv0: entered promiscuous mode 11:49:23 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0xe8, 0x81, 0x4}, {0x401, 0x92, 0x7, 0x100}]}) open(0x0, 0x0, 0x0) [ 1070.810783][T19976] batadv_slave_0: entered promiscuous mode [ 1070.821670][T19976] batadv_slave_0: left promiscuous mode 11:49:23 executing program 5: shmat(0x0, &(0x7f0000c00000/0x400000)=nil, 0x7000) [ 1070.881855][T19976] batadv0: left promiscuous mode 11:49:23 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x6, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:23 executing program 3: prctl$PR_SET_MM(0xf, 0x0, &(0x7f0000ffd000/0x2000)=nil) 11:49:23 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0xe8, 0x81, 0x4}, {0x401, 0x92, 0x7, 0x100}]}) open(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0xe8, 0x81, 0x4}, {0x401, 0x92, 0x7, 0x100}]}) (async) open(0x0, 0x0, 0x0) (async) 11:49:24 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x50000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000480)={0x0, 0x5b, &(0x7f0000000440)={&(0x7f0000000040)={0xff98, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8}]}, 0xfffffdef}}, 0x0) [ 1071.281087][T19988] batadv0: entered promiscuous mode [ 1071.366177][T19988] batadv_slave_0: entered promiscuous mode [ 1071.373183][T19988] batadv_slave_0: left promiscuous mode [ 1071.394438][T19988] batadv0: left promiscuous mode 11:49:24 executing program 2: shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x5000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) 11:49:24 executing program 3: prctl$PR_SET_MM(0xf, 0x0, &(0x7f0000ffd000/0x2000)=nil) [ 1071.516707][T19993] batadv0: entered promiscuous mode 11:49:24 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0xe8, 0x81, 0x4}, {0x401, 0x92, 0x7, 0x100}]}) (async) open(0x0, 0x0, 0x0) 11:49:24 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, r0, 0x0) 11:49:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x7, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1071.693665][T19993] batadv_slave_0: entered promiscuous mode [ 1071.701587][T19993] batadv_slave_0: left promiscuous mode 11:49:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x4b41, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) 11:49:24 executing program 3: prctl$PR_SET_MM(0xf, 0x0, &(0x7f0000ffd000/0x2000)=nil) [ 1071.863949][T19993] batadv0: left promiscuous mode 11:49:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}}, 0x0) 11:49:24 executing program 0: read$dsp(0xffffffffffffffff, &(0x7f00000001c0)=""/47, 0x2f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x805, 0x0, 0x0, 0xffff}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0xa59, 0x5, 0x7f, 0x8000}, {0x8, 0x9, 0xf5, 0x6}]}) open(0x0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x61c480, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x7300c1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000300)='I\xbf\x98X0\t{\x9bL\x96\x91\x88f\xe30\x99\xdb?\x13G\xcc;\xec\xa1\xceu\x86\xbf\x051\xf70\xa4J\rd\x87\xbb\xa1{n\xff&\xd0\x8d\xc0\xceGEV\x06\xfb\xf1F\xb4\xdc\xd2\x13f\x93\a7\xf7\xd2vyc\xba\xc8\x11\x83\xd2\x9ex\x00\x00\x02\x00\x00p24\xa4\xbb\xec\x8cf\xe2\x9c', &(0x7f0000000380)='./file0/file0\x00', 0xffffffffffffffff) 11:49:25 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0}) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) [ 1072.218848][T20005] batadv0: entered promiscuous mode [ 1072.324066][T20005] batadv_slave_0: entered promiscuous mode [ 1072.331057][T20005] batadv_slave_0: left promiscuous mode 11:49:25 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x60000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:25 executing program 5: shmat(0x0, &(0x7f00008df000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000d6f000/0x4000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x5000) 11:49:25 executing program 0: read$dsp(0xffffffffffffffff, &(0x7f00000001c0)=""/47, 0x2f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x805, 0x0, 0x0, 0xffff}, {0x6}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0xa59, 0x5, 0x7f, 0x8000}, {0x8, 0x9, 0xf5, 0x6}]}) (async) open(0x0, 0x0, 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) (async) open(&(0x7f00000002c0)='./file0\x00', 0x61c480, 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x7300c1, 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) (async) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000300)='I\xbf\x98X0\t{\x9bL\x96\x91\x88f\xe30\x99\xdb?\x13G\xcc;\xec\xa1\xceu\x86\xbf\x051\xf70\xa4J\rd\x87\xbb\xa1{n\xff&\xd0\x8d\xc0\xceGEV\x06\xfb\xf1F\xb4\xdc\xd2\x13f\x93\a7\xf7\xd2vyc\xba\xc8\x11\x83\xd2\x9ex\x00\x00\x02\x00\x00p24\xa4\xbb\xec\x8cf\xe2\x9c', &(0x7f0000000380)='./file0/file0\x00', 0xffffffffffffffff) [ 1072.383959][T20005] batadv0: left promiscuous mode 11:49:25 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/176) 11:49:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x4b4a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) [ 1072.609433][T20020] batadv0: entered promiscuous mode 11:49:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x8, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1072.693778][T20020] batadv_slave_0: entered promiscuous mode [ 1072.702198][T20020] batadv_slave_0: left promiscuous mode 11:49:25 executing program 5: mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) [ 1072.747093][T20020] batadv0: left promiscuous mode 11:49:25 executing program 3: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0xc202, 0x0) 11:49:25 executing program 0: read$dsp(0xffffffffffffffff, &(0x7f00000001c0)=""/47, 0x2f) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x805, 0x0, 0x0, 0xffff}, {0x6}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0xa59, 0x5, 0x7f, 0x8000}, {0x8, 0x9, 0xf5, 0x6}]}) open(0x0, 0x0, 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) (async) open(&(0x7f00000002c0)='./file0\x00', 0x61c480, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x7300c1, 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) (async) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000300)='I\xbf\x98X0\t{\x9bL\x96\x91\x88f\xe30\x99\xdb?\x13G\xcc;\xec\xa1\xceu\x86\xbf\x051\xf70\xa4J\rd\x87\xbb\xa1{n\xff&\xd0\x8d\xc0\xceGEV\x06\xfb\xf1F\xb4\xdc\xd2\x13f\x93\a7\xf7\xd2vyc\xba\xc8\x11\x83\xd2\x9ex\x00\x00\x02\x00\x00p24\xa4\xbb\xec\x8cf\xe2\x9c', &(0x7f0000000380)='./file0/file0\x00', 0xffffffffffffffff) [ 1072.937189][T20029] batadv0: entered promiscuous mode 11:49:25 executing program 2: prctl$PR_SET_MM(0x2f, 0x0, &(0x7f0000ffd000/0x2000)=nil) [ 1073.012428][T20029] batadv_slave_0: entered promiscuous mode [ 1073.019261][T20029] batadv_slave_0: left promiscuous mode 11:49:25 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x65580000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1073.079835][T20029] batadv0: left promiscuous mode 11:49:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x4b2f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) 11:49:26 executing program 5: prctl$PR_SET_MM(0x2a, 0x0, &(0x7f0000ffd000/0x2000)=nil) 11:49:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x9, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1073.404800][T20041] batadv0: entered promiscuous mode 11:49:26 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 1073.496183][T20041] batadv_slave_0: entered promiscuous mode [ 1073.503167][T20041] batadv_slave_0: left promiscuous mode 11:49:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0x7fffffffffffffff) 11:49:26 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1073.672594][T20041] batadv0: left promiscuous mode 11:49:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5401, 0x0) [ 1073.841538][T20048] batadv0: entered promiscuous mode [ 1073.886219][T20048] batadv_slave_0: entered promiscuous mode [ 1073.896905][T20048] batadv_slave_0: left promiscuous mode 11:49:26 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x2, 0x80, 0x9, 0x1}, {0xe1, 0x1, 0x0, 0x8}, {0x9, 0xff, 0x8, 0x2}, {0xd0bc, 0x40, 0x9, 0x26c24cbb}]}) r0 = open(0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001080)={0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000001100)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={r2, 0x7, 0x2fd}) 11:49:26 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x614a02, 0x0) 11:49:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x560f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) 11:49:26 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x68000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1074.047772][ T1214] ieee802154 phy0 wpan0: encryption failed: -22 [ 1074.054518][ T1214] ieee802154 phy1 wpan1: encryption failed: -22 [ 1074.121417][T20048] batadv0: left promiscuous mode [ 1074.212803][ T27] audit: type=1326 audit(1697456967.006:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20054 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1074.271179][T20062] batadv0: entered promiscuous mode 11:49:27 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) [ 1074.296724][T20062] batadv_slave_0: entered promiscuous mode [ 1074.310328][T20062] batadv_slave_0: left promiscuous mode [ 1074.345840][T20062] batadv0: left promiscuous mode 11:49:27 executing program 2: pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x4}, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) 11:49:27 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x5000) 11:49:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0xa, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5433, 0x0) 11:49:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x80045432, 0x0) 11:49:27 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x68020000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1074.804958][T20075] batadv0: entered promiscuous mode 11:49:27 executing program 2: prctl$PR_SET_MM(0x24, 0x0, &(0x7f0000ffd000/0x2000)=nil) [ 1074.904802][T20075] batadv_slave_0: entered promiscuous mode [ 1074.911746][T20075] batadv_slave_0: left promiscuous mode [ 1074.974811][T20075] batadv0: left promiscuous mode 11:49:27 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x2, 0x80, 0x9, 0x1}, {0xe1, 0x1, 0x0, 0x8}, {0x9, 0xff, 0x8, 0x2}, {0xd0bc, 0x40, 0x9, 0x26c24cbb}]}) r0 = open(0x0, 0x0, 0x0) (async, rerun: 64) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001080)={0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000080)) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000001100)={r2}) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={r2, 0x7, 0x2fd}) 11:49:27 executing program 5: pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x4}, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) [ 1075.099551][T20083] batadv0: entered promiscuous mode 11:49:28 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3e825d840773a0c0) 11:49:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) [ 1075.227307][T20083] batadv_slave_0: entered promiscuous mode [ 1075.234366][T20083] batadv_slave_0: left promiscuous mode 11:49:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0xb, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1075.390833][T20083] batadv0: left promiscuous mode [ 1075.401556][ T27] audit: type=1326 audit(1697456968.196:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20085 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:49:28 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x5000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 11:49:28 executing program 3: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) pipe2$9p(&(0x7f0000000300), 0x0) 11:49:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)) [ 1075.681292][T20095] batadv0: entered promiscuous mode [ 1075.738773][T20095] batadv_slave_0: entered promiscuous mode [ 1075.747343][T20095] batadv_slave_0: left promiscuous mode 11:49:28 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x2, 0x80, 0x9, 0x1}, {0xe1, 0x1, 0x0, 0x8}, {0x9, 0xff, 0x8, 0x2}, {0xd0bc, 0x40, 0x9, 0x26c24cbb}]}) (async) r0 = open(0x0, 0x0, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001080)={0x0}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000001100)={r2}) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={r2, 0x7, 0x2fd}) [ 1075.803204][T20095] batadv0: left promiscuous mode 11:49:28 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x6c000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:28 executing program 2: prctl$PR_SET_MM(0xe, 0x0, &(0x7f0000ffd000/0x2000)=nil) 11:49:28 executing program 3: prctl$PR_SET_MM(0x38, 0x0, &(0x7f0000ffd000/0x2000)=nil) 11:49:28 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x5000) mlock2(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0) [ 1076.021343][T20106] batadv0: entered promiscuous mode [ 1076.090797][ T27] audit: type=1326 audit(1697456968.876:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20103 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1076.121727][T20106] batadv_slave_0: entered promiscuous mode [ 1076.128534][T20106] batadv_slave_0: left promiscuous mode 11:49:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0xc, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1076.202070][T20106] batadv0: left promiscuous mode 11:49:29 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)) socket$inet6_mptcp(0xa, 0x1, 0x106) open(0x0, 0x0, 0x0) 11:49:29 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDSKBENT(r0, 0x4b47, 0x0) 11:49:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5412, 0x0) 11:49:29 executing program 5: r0 = socket(0x1, 0x3, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x100, 0x0, 0x0) [ 1076.542591][T20118] batadv0: entered promiscuous mode 11:49:29 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x74000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:29 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)) socket$inet6_mptcp(0xa, 0x1, 0x106) open(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) open(0x0, 0x0, 0x0) (async) 11:49:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5456, 0x0) 11:49:29 executing program 3: pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x4}, 0x0, 0x0, 0x0) [ 1076.663900][T20118] batadv_slave_0: entered promiscuous mode [ 1076.671292][T20118] batadv_slave_0: left promiscuous mode [ 1076.714178][T20118] batadv0: left promiscuous mode [ 1076.943669][T20130] batadv0: entered promiscuous mode [ 1076.959892][T20130] batadv_slave_0: entered promiscuous mode [ 1076.971519][T20130] batadv_slave_0: left promiscuous mode 11:49:29 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) open(0x0, 0x0, 0x0) 11:49:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x40049409, 0x0) 11:49:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0xd, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1077.047713][T20130] batadv0: left promiscuous mode 11:49:30 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOCK(r0, 0x0, 0x7ffffffff000) [ 1077.299833][T20138] batadv0: entered promiscuous mode 11:49:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) [ 1077.387539][T20138] batadv_slave_0: entered promiscuous mode [ 1077.394470][T20138] batadv_slave_0: left promiscuous mode 11:49:30 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000004, 0x10010, r0, 0xc329000) 11:49:30 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x7a000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1077.493108][T20138] batadv0: left promiscuous mode 11:49:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x4b67, 0x0) 11:49:30 executing program 3: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffd000/0x2000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00') [ 1077.706659][T20147] batadv0: entered promiscuous mode [ 1077.749465][T20147] batadv_slave_0: entered promiscuous mode [ 1077.757933][T20147] batadv_slave_0: left promiscuous mode [ 1077.762351][ T27] audit: type=1326 audit(1697456970.566:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20146 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:49:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x4b70, 0x0) 11:49:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0xe, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1077.809705][T20147] batadv0: left promiscuous mode 11:49:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000480)={0x0, 0x5b, &(0x7f0000000440)={&(0x7f0000000040)={0xff98, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8}]}, 0xff98}}, 0x0) 11:49:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x9}) [ 1078.121606][T20158] batadv0: entered promiscuous mode 11:49:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x81000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x4b49, 0x0) 11:49:31 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xaef5, 0x0, 0x0, 0x3ff, 0x0, "5ad2f0fc5927b8009e63be7878b37a2e081161"}) [ 1078.300963][T20158] batadv_slave_0: entered promiscuous mode [ 1078.307786][T20158] batadv_slave_0: left promiscuous mode 11:49:31 executing program 5: mlock2(&(0x7f0000ba9000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f00008f5000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000bce000/0x2000)=nil) [ 1078.443266][T20158] batadv0: left promiscuous mode 11:49:31 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async) open(0x0, 0x0, 0x0) (async) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000004, 0x10010, r0, 0xc329000) 11:49:31 executing program 2: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x2000)=nil) 11:49:31 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0) 11:49:31 executing program 5: mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) [ 1078.725262][T20166] batadv0: entered promiscuous mode [ 1078.773722][T20166] batadv_slave_0: entered promiscuous mode [ 1078.780750][T20166] batadv_slave_0: left promiscuous mode 11:49:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0xf, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5608, 0x0) [ 1078.882788][T20166] batadv0: left promiscuous mode [ 1079.030029][ T27] audit: type=1326 audit(1697456971.826:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20174 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1079.134739][T20182] batadv0: entered promiscuous mode 11:49:32 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 11:49:32 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) [ 1079.174653][T20182] batadv_slave_0: entered promiscuous mode [ 1079.181659][T20182] batadv_slave_0: left promiscuous mode 11:49:32 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x81ffffff, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:32 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0xc0189436, 0x0) [ 1079.280608][T20182] batadv0: left promiscuous mode [ 1079.616510][T20189] batadv0: entered promiscuous mode 11:49:32 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x80087601, 0x0) [ 1079.669161][T20189] batadv_slave_0: entered promiscuous mode [ 1079.676173][T20189] batadv_slave_0: left promiscuous mode [ 1079.717799][T20189] batadv0: left promiscuous mode 11:49:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x10, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:32 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000004, 0x10010, r0, 0xc329000) 11:49:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5606, 0x0) 11:49:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x5609, &(0x7f0000000080)={0xae4, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) 11:49:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)) [ 1080.057281][T20196] batadv0: entered promiscuous mode 11:49:33 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x88470000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1080.117757][T20196] batadv_slave_0: entered promiscuous mode [ 1080.125286][T20196] batadv_slave_0: left promiscuous mode 11:49:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5601, 0x0) [ 1080.215629][T20196] batadv0: left promiscuous mode 11:49:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x5602, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) 11:49:33 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) [ 1080.370707][ T27] audit: type=1326 audit(1697456973.126:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20201 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1080.393968][ T27] audit: type=1326 audit(1697456973.136:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20201 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1080.528095][T20209] batadv0: entered promiscuous mode [ 1080.598170][T20209] batadv_slave_0: entered promiscuous mode [ 1080.605357][T20209] batadv_slave_0: left promiscuous mode 11:49:33 executing program 3: shmctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 11:49:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x402c542b, 0x0) 11:49:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x11, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1080.687518][T20209] batadv0: left promiscuous mode 11:49:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x4b52, 0x0) [ 1081.067888][T20221] batadv0: entered promiscuous mode 11:49:34 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{0xbe39, 0x4, 0x9, 0x94}, {0x2000, 0x8, 0x1}, {0x9, 0x3f, 0x1, 0xd6}, {0x9, 0x0, 0xff, 0x4}, {0xd1e, 0x0, 0x7f, 0x4}, {0x5, 0x40, 0x9, 0x7}]}) open(0x0, 0x0, 0x0) 11:49:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x5412, &(0x7f0000000080)={0xae4, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) 11:49:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x541d, 0x0) 11:49:34 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x88480000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:34 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x10000}) [ 1081.121325][T20221] batadv_slave_0: entered promiscuous mode [ 1081.128095][T20221] batadv_slave_0: left promiscuous mode [ 1081.216686][T20221] batadv0: left promiscuous mode [ 1081.377800][T20227] batadv0: entered promiscuous mode [ 1081.379123][ T27] audit: type=1326 audit(1697456974.216:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20228 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1081.409799][T20227] batadv_slave_0: entered promiscuous mode [ 1081.417269][T20227] batadv_slave_0: left promiscuous mode [ 1081.435217][T20227] batadv0: left promiscuous mode 11:49:34 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 11:49:34 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x5000) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:49:34 executing program 5: r0 = socket(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 11:49:34 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x12, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:34 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x88a8ffff, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x560d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) [ 1081.831844][T20241] batadv0: entered promiscuous mode 11:49:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0xffffffff, 0x0, 0x0, "c3aa8decea8827d5079fdad702b18d8fe48d28"}) [ 1081.895018][T20241] batadv_slave_0: entered promiscuous mode [ 1081.902101][T20241] batadv_slave_0: left promiscuous mode [ 1081.934484][T20241] batadv0: left promiscuous mode [ 1082.089103][T20243] batadv0: entered promiscuous mode [ 1082.148730][T20243] batadv_slave_0: entered promiscuous mode [ 1082.157042][T20243] batadv_slave_0: left promiscuous mode [ 1082.229002][T20243] batadv0: left promiscuous mode 11:49:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x24, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:35 executing program 5: mremap(&(0x7f00008f5000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000bce000/0x2000)=nil) 11:49:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) 11:49:35 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{0xbe39, 0x4, 0x9, 0x94}, {0x2000, 0x8, 0x1}, {0x9, 0x3f, 0x1, 0xd6}, {0x9, 0x0, 0xff, 0x4}, {0xd1e, 0x0, 0x7f, 0x4}, {0x5, 0x40, 0x9, 0x7}]}) (async, rerun: 64) open(0x0, 0x0, 0x0) (rerun: 64) 11:49:35 executing program 3: prctl$PR_SET_MM(0x2c, 0x0, &(0x7f0000ffd000/0x2000)=nil) [ 1082.537409][ T27] audit: type=1326 audit(1697456975.326:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20251 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1082.585072][T20258] batadv0: entered promiscuous mode 11:49:35 executing program 5: r0 = socket(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 11:49:35 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, 0x68) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x8, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="75fffb00fd9d000000002d"], 0x1c}}, 0x0) [ 1082.618898][T20258] batadv_slave_0: entered promiscuous mode [ 1082.625982][T20258] batadv_slave_0: left promiscuous mode 11:49:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x560c, 0x0) [ 1082.682893][T20258] batadv0: left promiscuous mode 11:49:35 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x9d000000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x25, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x5410, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) 11:49:35 executing program 5: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\\\x00') 11:49:36 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) [ 1083.143838][T20266] batadv0: entered promiscuous mode [ 1083.223344][T20266] batadv_slave_0: entered promiscuous mode [ 1083.230121][T20266] batadv_slave_0: left promiscuous mode [ 1083.304359][T20266] batadv0: left promiscuous mode 11:49:36 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{0xbe39, 0x4, 0x9, 0x94}, {0x2000, 0x8, 0x1}, {0x9, 0x3f, 0x1, 0xd6}, {0x9, 0x0, 0xff, 0x4}, {0xd1e, 0x0, 0x7f, 0x4}, {0x5, 0x40, 0x9, 0x7}]}) (async) open(0x0, 0x0, 0x0) 11:49:36 executing program 5: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOCK(r0, &(0x7f00000000c0)={0x8}, 0x8) [ 1083.437882][T20268] batadv0: entered promiscuous mode 11:49:36 executing program 2: syz_open_dev$dri(&(0x7f00000001c0), 0xcf, 0x141042) [ 1083.571488][T20268] batadv_slave_0: entered promiscuous mode [ 1083.580077][T20268] batadv_slave_0: left promiscuous mode [ 1083.627991][ T27] audit: type=1326 audit(1697456976.426:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1083.656899][T20268] batadv0: left promiscuous mode 11:49:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x560e, &(0x7f0000000080)={0xae4, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) 11:49:36 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xaa020000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0) 11:49:36 executing program 2: prctl$PR_SET_MM(0x21, 0xb, &(0x7f0000ffd000/0x2000)=nil) [ 1083.947628][T20286] batadv0: entered promiscuous mode 11:49:36 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x2f, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1084.025549][T20286] batadv_slave_0: entered promiscuous mode [ 1084.036208][T20286] batadv_slave_0: left promiscuous mode 11:49:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x5409, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) [ 1084.109244][T20286] batadv0: left promiscuous mode 11:49:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x4b40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) [ 1084.290685][T20291] batadv0: entered promiscuous mode [ 1084.369115][T20291] batadv_slave_0: entered promiscuous mode [ 1084.376191][T20291] batadv_slave_0: left promiscuous mode 11:49:37 executing program 5: mmap$KVM_VCPU(&(0x7f0000fe6000/0x14000)=nil, 0x930, 0x0, 0xcd7762ea74d56bb3, 0xffffffffffffffff, 0x0) 11:49:37 executing program 0: ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x4, 0x1}, {0x45, 0x0, 0x5}, {0x6}]}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) open(0x0, 0x0, 0x0) [ 1084.448086][T20291] batadv0: left promiscuous mode 11:49:37 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xc3ffffff, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r0, &(0x7f0000001680)={&(0x7f0000000000)=@can, 0x80, 0x0}, 0x24000040) 11:49:37 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$snddsp(&(0x7f000092d000/0x1000)=nil, 0x1000, 0xe, 0x10, r0, 0x0) 11:49:37 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x3a, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1084.793666][T20299] batadv0: entered promiscuous mode 11:49:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000080)=']', 0x1}], 0x1}, 0x24000040) 11:49:37 executing program 0: ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x4, 0x1}, {0x45, 0x0, 0x5}, {0x6}]}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) open(0x0, 0x0, 0x0) [ 1084.939075][T20299] batadv_slave_0: entered promiscuous mode [ 1084.946254][T20299] batadv_slave_0: left promiscuous mode 11:49:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x5405, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) 11:49:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x4b48, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) [ 1085.090670][T20299] batadv0: left promiscuous mode 11:49:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5600, 0x0) 11:49:38 executing program 3: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) [ 1085.405737][T20309] batadv0: entered promiscuous mode 11:49:38 executing program 0: ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x4, 0x1}, {0x45, 0x0, 0x5}, {0x6}]}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) open(0x0, 0x0, 0x0) 11:49:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x8}, 0x0) 11:49:38 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xd6050000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1085.483856][T20309] batadv_slave_0: entered promiscuous mode [ 1085.491667][T20309] batadv_slave_0: left promiscuous mode [ 1085.557331][T20309] batadv0: left promiscuous mode 11:49:38 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x8000, 0x0) 11:49:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5435, 0x0) [ 1085.923174][T20324] batadv0: entered promiscuous mode [ 1085.978149][T20324] batadv_slave_0: entered promiscuous mode [ 1085.986016][T20324] batadv_slave_0: left promiscuous mode 11:49:38 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) 11:49:38 executing program 2: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x5000) 11:49:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x4b30, 0x0) 11:49:38 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x48, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1086.024325][T20324] batadv0: left promiscuous mode 11:49:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x4b3c, 0x0) 11:49:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, "926f235fb834c02f"}) [ 1086.307939][ T27] audit: type=1326 audit(1697456979.106:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20335 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1086.373711][T20338] batadv0: entered promiscuous mode 11:49:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x540d, 0x0) [ 1086.444914][T20338] batadv_slave_0: entered promiscuous mode [ 1086.451809][T20338] batadv_slave_0: left promiscuous mode 11:49:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r0, &(0x7f0000001680)={&(0x7f0000000000)=@can, 0x80, &(0x7f0000001180)=[{&(0x7f0000000080)=']', 0x1}], 0x1}, 0x24000040) 11:49:39 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xdc020000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1086.542837][T20338] batadv0: left promiscuous mode 11:49:39 executing program 3: mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) 11:49:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x4b4c, &(0x7f0000000080)={0xae4, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) [ 1086.809605][T20348] batadv0: entered promiscuous mode 11:49:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)=ANY=[]) [ 1086.852896][T20348] batadv_slave_0: entered promiscuous mode [ 1086.859710][T20348] batadv_slave_0: left promiscuous mode [ 1086.911747][T20348] batadv0: left promiscuous mode 11:49:39 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x4a, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:40 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async) open(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) (async) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) 11:49:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x4b64, 0x0) 11:49:40 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20801, 0x0) 11:49:40 executing program 5: pipe2$9p(0x0, 0x84880) [ 1087.296576][T20358] batadv0: entered promiscuous mode 11:49:40 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xf0ffffff, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x5601, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) [ 1087.414220][T20358] batadv_slave_0: entered promiscuous mode [ 1087.421156][T20358] batadv_slave_0: left promiscuous mode [ 1087.446218][T20358] batadv0: left promiscuous mode [ 1087.490356][ T27] audit: type=1326 audit(1697456980.246:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20362 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:49:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x5424, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) 11:49:40 executing program 2: memfd_create(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4) [ 1087.696011][T20369] batadv0: entered promiscuous mode 11:49:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x5609, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) 11:49:40 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x4c, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1087.793327][T20369] batadv_slave_0: entered promiscuous mode [ 1087.801194][T20369] batadv_slave_0: left promiscuous mode [ 1087.904916][T20369] batadv0: left promiscuous mode 11:49:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5415, 0x0) 11:49:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="75a900000000000000002d00000004"], 0x1c}}, 0x0) [ 1088.131647][T20378] batadv0: entered promiscuous mode [ 1088.173712][T20378] batadv_slave_0: entered promiscuous mode [ 1088.181635][T20378] batadv_slave_0: left promiscuous mode [ 1088.265959][T20378] batadv0: left promiscuous mode 11:49:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async) open(0x0, 0x0, 0x0) (async) pipe(&(0x7f0000000100)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) close(r1) (async) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) (async) 11:49:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x9b464c5c34303727, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) 11:49:41 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xf4030000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x4bfb, &(0x7f0000000080)={0xae4, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) 11:49:41 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x4, 0x10, r0, 0x83000000) [ 1088.558657][T20389] batadv0: entered promiscuous mode 11:49:41 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x60, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:41 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5452, 0x0) [ 1088.662912][T20389] batadv_slave_0: entered promiscuous mode [ 1088.669717][T20389] batadv_slave_0: left promiscuous mode 11:49:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSERGETLSR(r0, 0x80045440, 0x0) [ 1088.710974][T20389] batadv0: left promiscuous mode [ 1088.719086][ T27] audit: type=1326 audit(1697456981.526:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20386 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1088.895652][ T27] audit: type=1326 audit(1697456981.706:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20386 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:49:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xf}}}}}, 0x28}}, 0x0) [ 1088.976556][T20401] batadv0: entered promiscuous mode 11:49:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') open(0x0, 0x0, 0x0) 11:49:41 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfdffffff, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:42 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) lremovexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000001900)=@known='security.selinux\x00') [ 1089.075905][T20401] batadv_slave_0: entered promiscuous mode [ 1089.083783][T20401] batadv_slave_0: left promiscuous mode 11:49:42 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@bridge_delneigh={0x2c, 0x1c, 0x11c9605ad31efc73, 0x0, 0x0, {0x7, 0x0, 0x300, r2, 0x2, 0x5}, [@NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x2c}}, 0x0) [ 1089.181695][T20401] batadv0: left promiscuous mode 11:49:42 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x200002) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000010000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x32) sendfile(r2, r0, 0x0, 0x80001d00c0d0) [ 1089.318323][ T27] audit: type=1326 audit(1697456982.126:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20406 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1089.381852][T20414] batadv0: entered promiscuous mode 11:49:42 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x68, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:42 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@bridge_delneigh={0x2c, 0x1c, 0x11c9605ad31efc73, 0x0, 0x0, {0x7, 0x0, 0x300, r2, 0x2, 0xf}, [@NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x2c}}, 0x0) 11:49:42 executing program 3: syz_emit_ethernet(0xfffffcfc, &(0x7f0000000040)={@local, @broadcast, @val, {@ipv4}}, 0x0) [ 1089.480528][T20414] batadv_slave_0: entered promiscuous mode [ 1089.487322][T20414] batadv_slave_0: left promiscuous mode [ 1089.648270][T20414] batadv0: left promiscuous mode [ 1089.773878][T20419] bridge_slave_0: default FDB implementation only supports local addresses [ 1089.826355][T20420] batadv0: entered promiscuous mode 11:49:42 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x200002) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x32) sendfile(r1, r0, 0x0, 0x80001d00c0d0) 11:49:42 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 11:49:42 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3a, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) [ 1089.984252][T20420] batadv_slave_0: entered promiscuous mode [ 1089.991281][T20420] batadv_slave_0: left promiscuous mode [ 1090.060934][T20420] batadv0: left promiscuous mode 11:49:42 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfeffffff, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:43 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async, rerun: 64) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') (rerun: 64) open(0x0, 0x0, 0x0) 11:49:43 executing program 2: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000180)) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x6000) 11:49:43 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x8983, 0x0) [ 1090.414432][T20430] batadv0: entered promiscuous mode 11:49:43 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x6c, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1090.511847][T20430] batadv_slave_0: entered promiscuous mode [ 1090.520013][T20430] batadv_slave_0: left promiscuous mode [ 1090.529523][ T27] audit: type=1326 audit(1697456983.316:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20431 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f59bc27cae9 code=0x0 11:49:43 executing program 5: setresuid(0x0, 0xee01, 0xffffffffffffffff) [ 1090.641810][T20430] batadv0: left promiscuous mode 11:49:43 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x14, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x72, 0xa, 0xff00}, [@call={0x55}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 11:49:43 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={0x0}}, 0x0) [ 1090.866224][T20440] batadv0: entered promiscuous mode [ 1090.913748][T20440] batadv_slave_0: entered promiscuous mode [ 1090.920809][T20440] batadv_slave_0: left promiscuous mode 11:49:43 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xff600000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:43 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0x1a0, 0x1a0, 0x108, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) [ 1091.020528][T20440] batadv0: left promiscuous mode 11:49:44 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2d, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) [ 1091.227929][T20449] batadv0: entered promiscuous mode 11:49:44 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x8905, 0x0) [ 1091.309288][T20449] batadv_slave_0: entered promiscuous mode [ 1091.316359][T20449] batadv_slave_0: left promiscuous mode 11:49:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x74, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1091.381424][T20449] batadv0: left promiscuous mode 11:49:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') open(0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) 11:49:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x11, 0xb, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 11:49:44 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 11:49:44 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x39, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 11:49:44 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xff7f0000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1091.685208][T20457] batadv0: entered promiscuous mode [ 1091.695818][ T27] audit: type=1326 audit(1697456984.486:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20456 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1091.788685][T20457] batadv_slave_0: entered promiscuous mode [ 1091.795618][T20457] batadv_slave_0: left promiscuous mode 11:49:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x2, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) [ 1091.871198][T20457] batadv0: left promiscuous mode [ 1091.983534][T20468] batadv0: entered promiscuous mode 11:49:44 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4a, 0x0, 0x0) 11:49:44 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x8, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) [ 1092.005411][T20468] batadv_slave_0: entered promiscuous mode [ 1092.012499][T20468] batadv_slave_0: left promiscuous mode [ 1092.082692][T20468] batadv0: left promiscuous mode 11:49:45 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x7a, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:45 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3b, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 11:49:45 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x37, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) [ 1092.378773][T20477] batadv0: entered promiscuous mode 11:49:45 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3c, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) [ 1092.449821][T20477] batadv_slave_0: entered promiscuous mode [ 1092.456767][T20477] batadv_slave_0: left promiscuous mode 11:49:45 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) r1 = open(0x0, 0x0, 0x0) r2 = accept4$tipc(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x10, 0x800) fcntl$setlease(r2, 0x400, 0x2) close_range(r0, r0, 0x0) 11:49:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xffff0300, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1092.559344][T20477] batadv0: left promiscuous mode 11:49:45 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x11, 0x65, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 11:49:45 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x8000000, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) [ 1092.709065][T20483] batadv0: entered promiscuous mode 11:49:45 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00') write$yama_ptrace_scope(r0, 0x0, 0x0) [ 1092.767087][T20483] batadv_slave_0: entered promiscuous mode [ 1092.774129][T20483] batadv_slave_0: left promiscuous mode [ 1092.830699][ T27] audit: type=1326 audit(1697456985.626:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20485 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1092.871856][T20483] batadv0: left promiscuous mode 11:49:45 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x33, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 11:49:45 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x9d, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:45 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x32, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 11:49:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xd}, 0x48) 11:49:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1e, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) [ 1093.312146][T20498] batadv0: entered promiscuous mode 11:49:46 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x8903, 0x0) 11:49:46 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xffffa888, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1093.431387][T20498] batadv_slave_0: entered promiscuous mode [ 1093.438190][T20498] batadv_slave_0: left promiscuous mode [ 1093.491037][T20498] batadv0: left promiscuous mode 11:49:46 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async, rerun: 64) r1 = open(0x0, 0x0, 0x0) (rerun: 64) r2 = accept4$tipc(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x10, 0x800) fcntl$setlease(r2, 0x400, 0x2) (async) close_range(r0, r0, 0x0) 11:49:46 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xfffffffffffffca5, &(0x7f0000000040)={0x0, 0x3b}}, 0x0) 11:49:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2f, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) [ 1093.693457][T20507] batadv0: entered promiscuous mode 11:49:46 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x88, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) [ 1093.771271][T20507] batadv_slave_0: entered promiscuous mode [ 1093.778084][T20507] batadv_slave_0: left promiscuous mode [ 1093.840042][T20507] batadv0: left promiscuous mode 11:49:46 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:46 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x9}, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) [ 1094.021030][ T27] audit: type=1326 audit(1697456986.806:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f59bc27cae9 code=0x0 11:49:47 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x89a0, 0x0) 11:49:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x14, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 11:49:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xffffe000, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1094.230675][T20518] batadv0: entered promiscuous mode [ 1094.287009][T20518] batadv_slave_0: entered promiscuous mode [ 1094.294078][T20518] batadv_slave_0: left promiscuous mode [ 1094.322788][T20518] batadv0: left promiscuous mode [ 1094.422627][T20525] batadv0: entered promiscuous mode 11:49:47 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x1a0, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 11:49:47 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x8901, 0x0) 11:49:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x4, 0x5, 0x4}, 0x48) [ 1094.563708][T20525] batadv_slave_0: entered promiscuous mode [ 1094.570907][T20525] batadv_slave_0: left promiscuous mode [ 1094.643866][T20525] batadv0: left promiscuous mode 11:49:47 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async) r1 = open(0x0, 0x0, 0x0) r2 = accept4$tipc(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x10, 0x800) fcntl$setlease(r2, 0x400, 0x2) (async) close_range(r0, r0, 0x0) 11:49:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x2, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:47 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80108907, 0x0) 11:49:47 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x5411, 0x0) 11:49:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xffffff7f, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:47 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) [ 1095.034670][T20534] batadv0: entered promiscuous mode [ 1095.108220][ T27] audit: type=1326 audit(1697456987.916:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20535 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1095.128016][T20534] batadv_slave_0: entered promiscuous mode [ 1095.137825][T20534] batadv_slave_0: left promiscuous mode 11:49:48 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x8918, 0x0) [ 1095.222029][T20534] batadv0: left promiscuous mode 11:49:48 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x36, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 11:49:48 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_targets\x00') read$eventfd(r0, &(0x7f0000000080), 0x8) [ 1095.354294][T20546] batadv0: entered promiscuous mode 11:49:48 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) 11:49:48 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x3, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1095.433412][T20546] batadv_slave_0: entered promiscuous mode [ 1095.440683][T20546] batadv_slave_0: left promiscuous mode [ 1095.524698][T20546] batadv0: left promiscuous mode 11:49:48 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) write$cgroup_pressure(r0, 0x0, 0x0) [ 1095.755229][T20556] batadv0: entered promiscuous mode [ 1095.858544][T20556] batadv_slave_0: entered promiscuous mode [ 1095.865796][T20556] batadv_slave_0: left promiscuous mode 11:49:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="640100009412e675b3c5ee8f093fe3edfc39968e63eabed4e0f3096dc8ff0803c558a21481a4a773be523acfb65086a376c5950fbc7cd082f837e73bdb6c2bb1f7e3628ec90b60111db43375a2cf4b48d0417f4ca3a883850c9f567bf2e6a7616244206261de0078a0bb838589071eeaa9096006f5fe9c16d4cc15528c6602718d2b774fb935e313f95f4d60d5d9f1a64bf7fdfde1483a7cf7c3a18c734913b60207b7f6265c35509e5d98ceca262c2cc19b24c8147e1378526c3bf03c433894ac47ddbba0c083e0f4d92d2d68452ae2d4f00e8b2975e19bf9b78f7e78a2b112d62b5d93c5780877d2a461505afbf044c758945bf51c594a6120d0ac64dccdec5a0fbe441015439cee34df6c9edae1031076f86addd0eea28d547140654b2d9b507e8dc543220a9c50af97b95bdd4016097fddec3bdb8f2bb7451fac6a75a9fc57b90e752499e74b33eae929e3dd04180e5dd0a93c65b8ca12cf910e28ec466fd261ca20362a987cd5358ddbfbd3a74c22ea4ccb50c356ceedf69928cb824e73920ae4c6dbbf14d9258d513931e1b9fd60c4ae86f93e113bfef85bc78b5fb8004128bff224f67353893955bf6ff96ff5d4d8eda4629f3917e8fd2c51537779a9d74476a6c0fc13b22f8851ce3f9b738f5d365908d64174ad53d179b49a24ad18f65ccf3baacb88673d0d14522ae3aa017c622c6ba8238e92ab2feda8252180a6d316a10801a5f3ea15d4c8f88c754fa90ebfbbebc9a917b7ca3e3a37399fb2ce5f306dda711354357117a36bdd13e7d0f7456a014d54a880bc514beda93f7c98d075cf45eba8f1a3181fb590869b922821e9c0951294c382ed3379e9a850a88e8c81383025e9b474d3bc5eb43c397233991cf02496f1f21deb3dc6", @ANYRES16=r1, @ANYBLOB="01000000000000000000180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000300003000000000008000b000000000006001600000000000500120000000000060011000000000008000b0000000000"], 0x64}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x81}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4008050) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x0) 11:49:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x88, 0x40, 0x0, 0x0) 11:49:48 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x894c, 0x0) 11:49:48 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xffffff81, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:48 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x31, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) [ 1095.971499][T20556] batadv0: left promiscuous mode [ 1096.156642][T20562] batadv0: entered promiscuous mode 11:49:49 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4e, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 11:49:49 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2d, 0x0, 0x0) [ 1096.262440][ T27] audit: type=1326 audit(1697456989.076:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20565 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1096.282405][T20562] batadv_slave_0: entered promiscuous mode [ 1096.292130][T20562] batadv_slave_0: left promiscuous mode 11:49:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x4, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:49 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0xffffff7f}, 0x2}, 0x0) [ 1096.348887][T20562] batadv0: left promiscuous mode 11:49:49 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x8916, 0x0) [ 1096.627936][T20577] batadv0: entered promiscuous mode 11:49:49 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xffffffc3, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:49 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x48, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) [ 1096.706072][T20577] batadv_slave_0: entered promiscuous mode [ 1096.713078][T20577] batadv_slave_0: left promiscuous mode [ 1096.760064][T20577] batadv0: left promiscuous mode [ 1096.912456][T20582] batadv0: entered promiscuous mode [ 1096.984328][T20582] batadv_slave_0: entered promiscuous mode [ 1096.991406][T20582] batadv_slave_0: left promiscuous mode [ 1097.016275][T20582] batadv0: left promiscuous mode 11:49:49 executing program 3: r0 = epoll_create1(0x0) r1 = eventfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x1a000001a}) 11:49:49 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x18, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 11:49:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x5, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:49 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x1a0, 0x1a0, 0x108, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 11:49:49 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="01000000000000000000180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000300003000000000008000b000000000006001600000000000500120000000000060011000000000008000b0000000000"], 0x64}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x81}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4008050) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x0) [ 1097.316291][T20590] batadv0: entered promiscuous mode 11:49:50 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x42, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) [ 1097.368862][T20590] batadv_slave_0: entered promiscuous mode [ 1097.375867][T20590] batadv_slave_0: left promiscuous mode [ 1097.396142][ T27] audit: type=1326 audit(1697456990.216:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20588 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:49:50 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffff0, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1097.419292][ T27] audit: type=1326 audit(1697456990.216:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20588 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:49:50 executing program 5: timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f00000005c0)={{}, {0x77359400}}, 0x0) 11:49:50 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x12, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) [ 1097.475135][T20590] batadv0: left promiscuous mode 11:49:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x4, 0x5}, 0x48) [ 1097.772957][T20599] batadv0: entered promiscuous mode 11:49:50 executing program 5: setresuid(0x0, 0xee00, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:49:50 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1b, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) [ 1097.833495][T20599] batadv_slave_0: entered promiscuous mode [ 1097.840469][T20599] batadv_slave_0: left promiscuous mode [ 1097.871777][T20599] batadv0: left promiscuous mode 11:49:50 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x6, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:50 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xd0, 0x328, 0xd0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'netpci0\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "a94a487c6f3de3522eaa9efde463a332fd9a87c820f7a46e4a5db4097715"}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 11:49:51 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a80)='ns\x00') r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000003000/0x2000)=nil, 0x5000) [ 1098.191892][T20611] batadv0: entered promiscuous mode [ 1098.242538][T20611] batadv_slave_0: entered promiscuous mode [ 1098.249365][T20611] batadv_slave_0: left promiscuous mode 11:49:51 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffffd, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="640100009412e675b3c5ee8f093fe3edfc39968e63eabed4e0f3096dc8ff0803c558a21481a4a773be523acfb65086a376c5950fbc7cd082f837e73bdb6c2bb1f7e3628ec90b60111db43375a2cf4b48d0417f4ca3a883850c9f567bf2e6a7616244206261de0078a0bb838589071eeaa9096006f5fe9c16d4cc15528c6602718d2b774fb935e313f95f4d60d5d9f1a64bf7fdfde1483a7cf7c3a18c734913b60207b7f6265c35509e5d98ceca262c2cc19b24c8147e1378526c3bf03c433894ac47ddbba0c083e0f4d92d2d68452ae2d4f00e8b2975e19bf9b78f7e78a2b112d62b5d93c5780877d2a461505afbf044c758945bf51c594a6120d0ac64dccdec5a0fbe441015439cee34df6c9edae1031076f86addd0eea28d547140654b2d9b507e8dc543220a9c50af97b95bdd4016097fddec3bdb8f2bb7451fac6a75a9fc57b90e752499e74b33eae929e3dd04180e5dd0a93c65b8ca12cf910e28ec466fd261ca20362a987cd5358ddbfbd3a74c22ea4ccb50c356ceedf69928cb824e73920ae4c6dbbf14d9258d513931e1b9fd60c4ae86f93e113bfef85bc78b5fb8004128bff224f67353893955bf6ff96ff5d4d8eda4629f3917e8fd2c51537779a9d74476a6c0fc13b22f8851ce3f9b738f5d365908d64174ad53d179b49a24ad18f65ccf3baacb88673d0d14522ae3aa017c622c6ba8238e92ab2feda8252180a6d316a10801a5f3ea15d4c8f88c754fa90ebfbbebc9a917b7ca3e3a37399fb2ce5f306dda711354357117a36bdd13e7d0f7456a014d54a880bc514beda93f7c98d075cf45eba8f1a3181fb590869b922821e9c0951294c382ed3379e9a850a88e8c81383025e9b474d3bc5eb43c397233991cf02496f1f21deb3dc6", @ANYRES16=r1, @ANYBLOB="01000000000000000000180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000300003000000000008000b000000000006001600000000000500120000000000060011000000000008000b0000000000"], 0x64}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x81}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4008050) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x0) [ 1098.374579][T20611] batadv0: left promiscuous mode 11:49:51 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 11:49:51 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x8904, 0x0) [ 1098.543548][T20620] batadv0: entered promiscuous mode 11:49:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x11, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) [ 1098.605754][T20620] batadv_slave_0: entered promiscuous mode [ 1098.612832][T20620] batadv_slave_0: left promiscuous mode 11:49:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x7, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1098.700666][T20620] batadv0: left promiscuous mode 11:49:51 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x541b, 0x0) 11:49:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x0, 0x0, 0x5}, 0x48) 11:49:51 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) r1 = open(0x0, 0x0, 0x10) clock_gettime(0x0, &(0x7f0000000180)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ppoll(&(0x7f0000000040)=[{r0, 0x1000}, {r3, 0x98}], 0x2, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)={[0x4]}, 0x8) r4 = syz_open_pts(r1, 0x82900) fallocate(r4, 0x20, 0x8000000000000000, 0x6) setsockopt$inet_dccp_int(r1, 0x21, 0x5, &(0x7f0000000140)=0x7, 0x4) 11:49:51 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x5411, 0x0) [ 1099.093463][T20634] batadv0: entered promiscuous mode 11:49:52 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x890b, 0x0) 11:49:52 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00', {}, {}, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) [ 1099.179744][T20634] batadv_slave_0: entered promiscuous mode [ 1099.195699][T20634] batadv_slave_0: left promiscuous mode 11:49:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffffe, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1099.267163][ T27] audit: type=1326 audit(1697456992.036:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20635 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1099.315121][T20634] batadv0: left promiscuous mode 11:49:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, 0x10800002}, 0x32, &(0x7f0000000080)={0x0}}, 0x0) 11:49:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 11:49:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0xfede}}, 0x0) [ 1099.628751][T20647] batadv0: entered promiscuous mode [ 1099.719042][T20647] batadv_slave_0: entered promiscuous mode [ 1099.726140][T20647] batadv_slave_0: left promiscuous mode [ 1099.766557][T20647] batadv0: left promiscuous mode 11:49:52 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x8, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:52 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x30, 0x0, 0x0) 11:49:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0xf0ff7f}, 0x0) 11:49:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={0x0, 0xfede}}, 0x0) [ 1100.080326][T20657] batadv0: entered promiscuous mode [ 1100.112718][T20657] batadv_slave_0: entered promiscuous mode [ 1100.119599][T20657] batadv_slave_0: left promiscuous mode [ 1100.178428][T20657] batadv0: left promiscuous mode 11:49:53 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0xffffffff, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:49:53 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) r1 = open(0x0, 0x0, 0x10) clock_gettime(0x0, &(0x7f0000000180)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ppoll(&(0x7f0000000040)=[{r0, 0x1000}, {r3, 0x98}], 0x2, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)={[0x4]}, 0x8) r4 = syz_open_pts(r1, 0x82900) fallocate(r4, 0x20, 0x8000000000000000, 0x6) setsockopt$inet_dccp_int(r1, 0x21, 0x5, &(0x7f0000000140)=0x7, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async) open(0x0, 0x0, 0x10) (async) clock_gettime(0x0, &(0x7f0000000180)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ppoll(&(0x7f0000000040)=[{r0, 0x1000}, {r3, 0x98}], 0x2, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)={[0x4]}, 0x8) (async) syz_open_pts(r1, 0x82900) (async) fallocate(r4, 0x20, 0x8000000000000000, 0x6) (async) setsockopt$inet_dccp_int(r1, 0x21, 0x5, &(0x7f0000000140)=0x7, 0x4) (async) 11:49:53 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x0, 0x0, 0x1000}, 0x48) 11:49:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2c, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 11:49:53 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x1a0, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) [ 1100.447262][T20663] batadv0: entered promiscuous mode 11:49:53 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x9, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1100.491702][ T27] audit: type=1326 audit(1697456993.296:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20665 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1100.511945][T20663] batadv_slave_0: entered promiscuous mode [ 1100.525166][T20663] batadv_slave_0: left promiscuous mode 11:49:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x8000000, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) [ 1100.619681][T20663] batadv0: left promiscuous mode 11:49:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x16, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) [ 1100.809089][T20677] batadv0: entered promiscuous mode 11:49:53 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x200007a0, 0x0, 0x3f8, 0x1a0, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 11:49:53 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1100.895883][T20677] batadv_slave_0: entered promiscuous mode [ 1100.902880][T20677] batadv_slave_0: left promiscuous mode [ 1100.929503][T20677] batadv0: left promiscuous mode 11:49:53 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) r1 = open(0x0, 0x0, 0x10) clock_gettime(0x0, &(0x7f0000000180)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ppoll(&(0x7f0000000040)=[{r0, 0x1000}, {r3, 0x98}], 0x2, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)={[0x4]}, 0x8) (async) ppoll(&(0x7f0000000040)=[{r0, 0x1000}, {r3, 0x98}], 0x2, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)={[0x4]}, 0x8) r4 = syz_open_pts(r1, 0x82900) fallocate(r4, 0x20, 0x8000000000000000, 0x6) (async) fallocate(r4, 0x20, 0x8000000000000000, 0x6) setsockopt$inet_dccp_int(r1, 0x21, 0x5, &(0x7f0000000140)=0x7, 0x4) 11:49:54 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x8981, 0x0) 11:49:54 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0xa, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1101.277822][T20687] batadv0: entered promiscuous mode 11:49:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x44, 0x0, 0x9, 0x401, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @empty}}}]}]}, 0x44}}, 0x0) [ 1101.314145][T20687] batadv_slave_0: entered promiscuous mode [ 1101.321027][T20687] batadv_slave_0: left promiscuous mode [ 1101.367145][ T27] audit: type=1326 audit(1697456994.136:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20686 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1101.452888][T20687] batadv0: left promiscuous mode 11:49:54 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private1}}) [ 1101.653580][T20696] batadv0: entered promiscuous mode 11:49:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x18}, 0x48) [ 1101.753644][T20696] batadv_slave_0: entered promiscuous mode [ 1101.760694][T20696] batadv_slave_0: left promiscuous mode 11:49:54 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x2, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1101.849004][T20696] batadv0: left promiscuous mode 11:49:54 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x80, 0x1}, {0x5}, {0x6, 0xfe}]}) open(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) [ 1102.116832][T20704] batadv0: entered promiscuous mode [ 1102.161677][T20704] batadv_slave_0: entered promiscuous mode [ 1102.168496][T20704] batadv_slave_0: left promiscuous mode [ 1102.204109][T20704] batadv0: left promiscuous mode 11:50:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 11:50:01 executing program 5: pipe(&(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x104, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa00}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x7}, @NFTA_CHAIN_USERDATA={0x68, 0xc, "cfa489632859af1e966ba787d6cec7830f19071ff17e576568c81c8843a44151fa252991823fee6c2fc9f1f1af90e902fae66e02c24a1c960661a1c13c0ad919ce07b2ad53353cd3ebb67570060949585290f3c5baecb20a12d58c0fc1f1c55606f1fc84"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x4004860) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000002280)=@bloom_filter={0x1e, 0x1ff, 0x8000, 0x4, 0x40, 0x1, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0xd}, 0x48) 11:50:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0xb, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:01 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x80, 0x1}, {0x5}, {0x6, 0xfe}]}) open(0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 11:50:01 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x10, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0}, 0x90) 11:50:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x3, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1108.463352][T20711] batadv0: entered promiscuous mode 11:50:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 11:50:01 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x80, 0x1}, {0x5}, {0x6, 0xfe}]}) open(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x80, 0x1}, {0x5}, {0x6, 0xfe}]}) (async) open(0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) [ 1108.553645][T20711] batadv_slave_0: entered promiscuous mode [ 1108.560604][T20711] batadv_slave_0: left promiscuous mode [ 1108.586166][T20711] batadv0: left promiscuous mode 11:50:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000002280)=@base={0x1b, 0x0, 0x0, 0x6}, 0x48) 11:50:01 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r0, 0x0, 0x1013) [ 1108.749507][T20718] batadv0: entered promiscuous mode [ 1108.820993][T20718] batadv_slave_0: entered promiscuous mode [ 1108.827797][T20718] batadv_slave_0: left promiscuous mode 11:50:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) 11:50:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0xc, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1108.927648][T20718] batadv0: left promiscuous mode 11:50:01 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x36b7}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x1c403, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000000c0)={0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)={r4, 0x3, r6, 0xfffffffb, 0x80000}) open(0x0, 0x0, 0x0) 11:50:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000002280)=@base={0xb, 0x0, 0x0, 0x6}, 0x48) [ 1109.406513][ T27] audit: type=1326 audit(1697457002.216:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20736 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:50:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000009840)={&(0x7f0000000200)=@newtaction={0x1ec4, 0x30, 0x0, 0x0, 0x0, {}, [{0x1eb0, 0x1, [@m_ife={0x103c, 0x0, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x1001, 0x6, "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"}, {0xc}, {0xc}}}, @m_pedit={0xe70, 0x0, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20}]}, {0x21, 0x6, "12a4d46f216e88455182b7ea1a6319e4a579bc120951e5d8d8ec7191a5"}, {0xc}, {0xc}}}]}]}, 0x1ec4}}, 0x0) 11:50:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000002280)=@base={0x6}, 0x48) 11:50:02 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0xd, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:02 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x4, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x29c}}, 0x0) 11:50:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x0, 0x0, 0x0, 0x23e1, 0x1}, 0x48) 11:50:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1b, 0x0, 0x0, 0x0, 0x128}, 0x48) [ 1109.922435][T20751] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1109.932344][T20751] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1110.019411][T20754] batadv0: entered promiscuous mode [ 1110.071461][T20754] batadv_slave_0: entered promiscuous mode [ 1110.078260][T20754] batadv_slave_0: left promiscuous mode 11:50:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x28, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) [ 1110.119427][T20754] batadv0: left promiscuous mode 11:50:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x2c, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xf}, {0x0, 0xb}}, [{0x8}]}, 0x2c}}, 0x0) 11:50:03 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x29}, 0x20) [ 1110.368408][T20753] batadv0: entered promiscuous mode 11:50:03 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x36b7}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x1c403, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x1c403, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000000c0)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000000c0)={0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)={r4, 0x3, r6, 0xfffffffb, 0x80000}) open(0x0, 0x0, 0x0) [ 1110.424074][T20753] batadv_slave_0: entered promiscuous mode [ 1110.431060][T20753] batadv_slave_0: left promiscuous mode 11:50:03 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0xe, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1110.508113][T20753] batadv0: left promiscuous mode 11:50:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, 0x1, 0x3, 0x301}, 0x14}}, 0x0) 11:50:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x3}]}}, 0x0, 0x26}, 0x20) 11:50:03 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000100)=@raw=[@map_val, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000180)='syzkaller\x00', 0x5}, 0x90) [ 1110.788607][ T27] audit: type=1326 audit(1697457003.566:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20763 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1110.812735][ T27] audit: type=1326 audit(1697457003.586:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20763 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1110.863298][T20767] batadv0: entered promiscuous mode 11:50:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x5, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x14, 0x3, 0x1, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x44000) 11:50:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x7, 0x0, 0x0, 0x0, 0x128}, 0x48) 11:50:03 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x36b7}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x1c403, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000000c0)={0x0}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)={r4, 0x3, r6, 0xfffffffb, 0x80000}) (async) open(0x0, 0x0, 0x0) [ 1111.073824][T20767] batadv_slave_0: entered promiscuous mode [ 1111.081151][T20767] batadv_slave_0: left promiscuous mode 11:50:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x11, 0x4, [{}]}]}}, 0x0, 0x2e}, 0x20) [ 1111.154170][T20767] batadv0: left promiscuous mode [ 1111.559723][T20778] batadv0: entered promiscuous mode 11:50:04 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000500000000000000010000060400000003000000000000000000002e"], 0x0, 0x31}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r0, 0x20, &(0x7f0000000200)={&(0x7f0000000300)=""/177, 0xb1, 0x0, 0x0}}, 0x10) [ 1111.638055][ T27] audit: type=1326 audit(1697457004.466:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20781 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1111.640076][T20778] batadv_slave_0: entered promiscuous mode [ 1111.669367][T20778] batadv_slave_0: left promiscuous mode 11:50:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x14, 0x1, 0x2, 0x201}, 0x14}}, 0x0) 11:50:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x11}]}}, 0x0, 0x26}, 0x20) 11:50:04 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0xf, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1111.857525][T20778] batadv0: left promiscuous mode 11:50:04 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x3}]}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x31}, 0x20) 11:50:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x4b49, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "bb2aa8f7608f97ff6c884145dcd4c38ae94970"}) 11:50:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000080)={0xac, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x0, 0x7}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x7, 0x1}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xf4, 0xd0}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x8, 0x20}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x0, 0x5}}]}}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1bd}, @CTA_SYNPROXY_ISN={0x8}]}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x50}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000011}, 0x44000) [ 1112.166018][T20796] batadv0: entered promiscuous mode [ 1112.258629][T20796] batadv_slave_0: entered promiscuous mode [ 1112.265642][T20796] batadv_slave_0: left promiscuous mode 11:50:05 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x6, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000002280)=@base={0x16}, 0x48) [ 1112.527130][T20796] batadv0: left promiscuous mode 11:50:05 executing program 5: bpf$MAP_CREATE(0x7, &(0x7f0000000000)=@bloom_filter, 0x48) 11:50:05 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x5, 0x81, 0x81, 0xffffffff}]}, 0x10) preadv(r0, &(0x7f0000000140), 0x0, 0x3f, 0x7) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)=""/135, &(0x7f0000000200)=0x87) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x4, 0x5}, 0x4) open(0x0, 0x2000, 0x0) [ 1112.672605][T20805] batadv0: entered promiscuous mode [ 1112.724886][T20805] batadv_slave_0: entered promiscuous mode [ 1112.732661][T20805] batadv_slave_0: left promiscuous mode 11:50:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x10, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x2c, 0x2e, 0x1, 0x0, 0x0, {}, [{0x8}]}, 0x2c}}, 0x0) [ 1112.831148][T20805] batadv0: left promiscuous mode 11:50:05 executing program 2: bpf$MAP_CREATE(0x4, &(0x7f0000000000)=@bloom_filter, 0x48) [ 1112.995230][ T27] audit: type=1326 audit(1697457005.856:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20810 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:50:05 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0xd}, 0x48) [ 1113.040893][T20814] batadv0: entered promiscuous mode 11:50:06 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x7, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1113.145375][T20814] batadv_slave_0: entered promiscuous mode [ 1113.152928][T20814] batadv_slave_0: left promiscuous mode 11:50:06 executing program 3: syz_emit_ethernet(0x16, &(0x7f00000000c0)={@dev, @local, @void, {@llc_tr={0x11, {@snap={0x0, 0x0, "ad", "2ddbe0"}}}}}, 0x0) [ 1113.233600][T20814] batadv0: left promiscuous mode 11:50:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0x1, 0x0, 0x0, {}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) [ 1113.422977][T20823] batadv0: entered promiscuous mode 11:50:06 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg2\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@mcast1, 0x0, r2}) [ 1113.483745][T20823] batadv_slave_0: entered promiscuous mode [ 1113.492652][T20823] batadv_slave_0: left promiscuous mode 11:50:06 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001400)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000040)='GPL\x00'}, 0x90) 11:50:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x11, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1113.570677][T20823] batadv0: left promiscuous mode 11:50:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) [ 1113.888927][T20832] batadv0: entered promiscuous mode 11:50:06 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x5, 0x81, 0x81, 0xffffffff}]}, 0x10) preadv(r0, &(0x7f0000000140), 0x0, 0x3f, 0x7) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)=""/135, &(0x7f0000000200)=0x87) (async) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)=""/135, &(0x7f0000000200)=0x87) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x4, 0x5}, 0x4) open(0x0, 0x2000, 0x0) (async) open(0x0, 0x2000, 0x0) 11:50:06 executing program 3: socketpair(0x21, 0x0, 0x0, &(0x7f0000000600)) 11:50:06 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x8, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1113.944796][T20832] batadv_slave_0: entered promiscuous mode [ 1113.952539][T20832] batadv_slave_0: left promiscuous mode [ 1114.010804][T20832] batadv0: left promiscuous mode 11:50:06 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x3}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x31}, 0x20) 11:50:07 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000002280)=@base={0x18}, 0x48) [ 1114.205390][ T27] audit: type=1326 audit(1697457007.016:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20839 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1114.258352][T20841] batadv0: entered promiscuous mode 11:50:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x12, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1114.320482][T20841] batadv_slave_0: entered promiscuous mode [ 1114.327274][T20841] batadv_slave_0: left promiscuous mode 11:50:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000980)="10", 0x1}], 0x2}, 0x0) [ 1114.391559][T20841] batadv0: left promiscuous mode 11:50:07 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x0, 0x0, 0x463e}, 0x48) 11:50:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @local}}}]}]}, 0x58}}, 0x0) [ 1114.622737][T20851] batadv0: entered promiscuous mode 11:50:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000002280)=@base={0x0, 0x0, 0x0, 0x0, 0x4}, 0x48) 11:50:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x18}, 0x20) 11:50:07 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x9, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1114.728953][T20851] batadv_slave_0: entered promiscuous mode [ 1114.735953][T20851] batadv_slave_0: left promiscuous mode [ 1114.843801][T20851] batadv0: left promiscuous mode 11:50:07 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x5, 0x81, 0x81, 0xffffffff}]}, 0x10) (async) preadv(r0, &(0x7f0000000140), 0x0, 0x3f, 0x7) (async) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)=""/135, &(0x7f0000000200)=0x87) (async, rerun: 64) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x4, 0x5}, 0x4) (async, rerun: 64) open(0x0, 0x2000, 0x0) 11:50:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) [ 1115.038378][T20861] batadv0: entered promiscuous mode [ 1115.127542][T20861] batadv_slave_0: entered promiscuous mode [ 1115.134734][T20861] batadv_slave_0: left promiscuous mode 11:50:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f000000dc40)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @empty, 0x700}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x4040000) 11:50:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}}, 0x0) 11:50:08 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x24, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1115.193045][T20861] batadv0: left promiscuous mode [ 1115.371706][ T27] audit: type=1326 audit(1697457008.156:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20865 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:50:08 executing program 3: bpf$MAP_CREATE(0xf, &(0x7f0000000000)=@bloom_filter, 0x48) 11:50:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, 0x4, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, 0x34}}, 0x0) 11:50:08 executing program 2: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408006f0d240f0000000000000000000006471a010000190581aaae"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000280)="dd682e01c3d244930fe83dc61cb841e5c357fa6de9c0b9a7e770f51d989cb395c840142b4ae94b27d493e534b7de60516d12fb309a41c979abf8c50a06da7fd14a5390310bd81416b4e8fe7cbb78a9a1636420675652857db881ce94995ec7ef81", 0x61) [ 1115.712519][T20872] batadv0: entered promiscuous mode [ 1115.776540][T20872] batadv_slave_0: entered promiscuous mode [ 1115.783826][T20872] batadv_slave_0: left promiscuous mode [ 1115.859420][T20872] batadv0: left promiscuous mode 11:50:08 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0xa, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:08 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000080)={0x38}) 11:50:08 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) 11:50:08 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x25, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:09 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) r0 = open(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x80000000}}, '\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x1}, {0x10, 0xa}, {0x1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x805) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) dup(r5) pidfd_getfd(r2, r5, 0x0) 11:50:09 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x8}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}}) [ 1116.229118][T20883] batadv0: entered promiscuous mode [ 1116.315966][T20883] batadv_slave_0: entered promiscuous mode [ 1116.322891][T20883] batadv_slave_0: left promiscuous mode [ 1116.352529][T20883] batadv0: left promiscuous mode [ 1116.381931][ T33] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 1116.451370][ T27] audit: type=1326 audit(1697457009.286:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20888 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:50:09 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) [ 1116.501335][T20891] batadv0: entered promiscuous mode [ 1116.528750][T20891] batadv_slave_0: entered promiscuous mode [ 1116.536101][T20891] batadv_slave_0: left promiscuous mode 11:50:09 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0xb, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1116.619902][T20891] batadv0: left promiscuous mode [ 1116.778836][T20900] batadv0: entered promiscuous mode [ 1116.801927][ T33] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.812422][ T33] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1116.821683][ T33] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 1116.825496][T14546] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1116.831882][ T33] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 11:50:09 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x2f, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1116.832021][ T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:50:09 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000d80)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x2}]}, 0x18}}, 0x0) [ 1116.903946][T20900] batadv_slave_0: entered promiscuous mode [ 1116.910948][T20900] batadv_slave_0: left promiscuous mode [ 1116.945046][T20900] batadv0: left promiscuous mode [ 1117.052341][T20880] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1117.108399][ T33] hub 3-1:1.0: bad descriptor, ignoring hub [ 1117.114909][ T33] hub: probe of 3-1:1.0 failed with error -5 [ 1117.159510][T20902] batadv0: entered promiscuous mode [ 1117.168286][T14546] usb 4-1: Using ep0 maxpacket: 8 [ 1117.182637][ T33] cdc_wdm 3-1:1.0: skipping garbage [ 1117.188074][ T33] cdc_wdm 3-1:1.0: skipping garbage [ 1117.211340][T20904] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1117.251794][ T33] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1117.257931][ T33] cdc_wdm 3-1:1.0: Unknown control protocol [ 1117.263785][T20902] batadv_slave_0: entered promiscuous mode [ 1117.271765][T20902] batadv_slave_0: left promiscuous mode 11:50:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0xc, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1117.311234][T14546] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.322643][T14546] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.332900][T14546] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1117.342871][T14546] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1117.370028][T20880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1117.380133][T20880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1117.400932][T20902] batadv0: left promiscuous mode [ 1117.551652][T14546] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1117.561189][T14546] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.569466][T14546] usb 4-1: Product: syz [ 1117.574067][T14546] usb 4-1: Manufacturer: syz [ 1117.578870][T14546] usb 4-1: SerialNumber: syz [ 1117.597717][T20906] batadv0: entered promiscuous mode [ 1117.661755][T20906] batadv_slave_0: entered promiscuous mode [ 1117.668562][T20906] batadv_slave_0: left promiscuous mode [ 1117.709278][T20906] batadv0: left promiscuous mode [ 1117.753208][ T773] usb 3-1: USB disconnect, device number 67 [ 1117.946944][T14546] cdc_ncm 4-1:1.0: bind() failure [ 1117.964524][T14546] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1117.971881][T14546] cdc_ncm 4-1:1.1: bind() failure [ 1117.999150][T14546] usb 4-1: USB disconnect, device number 16 11:50:11 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x104, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf2, 0x2, 0x1, 0xff, 0xb0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "fc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0x7ff, 0x6e}, {0x6, 0x24, 0x1a, 0x73, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x6, 0x7f}, @country_functional={0xe, 0x24, 0x7, 0x24, 0x5, [0xffff, 0x0, 0xff4d, 0x5]}, @mdlm_detail={0x7f, 0x24, 0x13, 0x1, "20fb41f861baeb18ade339e18c54e6382f8896d396ddd872bafc473f501546fe3918fc16ae44db9e1760d5c36cf92f2ad8ec4d2eea608e2a040c4020533ed297bb8f0a1dc43bbdf321a04dfe46774b57e8ba8daa88443468452d002ce89245596df00f39bffa44bfcf1ccb53070095a08c74c96008da5c7b974d59"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x5, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x8, 0x2}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x81, 0x3, 0x0, 0x10}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x5, [{0x53, &(0x7f0000000200)=@string={0x53, 0x3, "03d8ae99ce62cf4031fa52d223e3502d86863463a989d0f4286495d5206930a1ac60211a201c6854a30ababdd53c15e36b130281ffe22bbeae1932fb4c76445601a523cb880122bb4ae397dd424b46e800"}}, {0xf, &(0x7f0000000280)=@string={0xf, 0x3, "1a829bacb7f6c30c442bf67926"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x442}}, {0xba, &(0x7f0000000300)=@string={0xba, 0x3, "bb005f2577d9ab49d744ea18d0346edda8278733a74ca652c35b3b08b7eb9caf654e5a566d72d37c9f271ac8f39e511872b24bf677e0268c8aeaabc6a8ae9e46049098b046b5827f2ebf9449d05aa3d7945efc862da7c6bdb4b9b9d634bd53b254960988edd804b03f6f7bc1eecb5f1b861d0574b07b5fe7451078f9d6932077530ee623ab462a3b7a42c3f27d2c9a54328e41b5d05c3c710361b330c555679aa1064aaf5747c4ba505b4c2920aa44e4df4a4cb36775654a"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x300a}}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) 11:50:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 11:50:11 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x3a, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async) r0 = open(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x80000000}}, '\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x1}, {0x10, 0xa}, {0x1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x805) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) dup(r5) (async) pidfd_getfd(r2, r5, 0x0) 11:50:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0xd, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1118.368432][T20915] batadv0: entered promiscuous mode [ 1118.396750][ T27] audit: type=1326 audit(1697457011.216:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20914 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1118.435975][T20915] batadv_slave_0: entered promiscuous mode [ 1118.443390][T20915] batadv_slave_0: left promiscuous mode [ 1118.458613][T20915] batadv0: left promiscuous mode 11:50:11 executing program 5: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="780230"], 0x10) r1 = socket(0x2, 0x2, 0x0) dup2(r0, r1) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x3, 0x4) recvmmsg(r0, &(0x7f0000002800), 0x10, 0x0, &(0x7f00000028c0)={0x3ff}) shutdown(r1, 0x0) 11:50:11 executing program 3: r0 = gettid() ioprio_set$pid(0x1, r0, 0x4004) [ 1118.555741][T20912] batadv0: entered promiscuous mode 11:50:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) r0 = open(0x0, 0x0, 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x80000000}}, '\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x1}, {0x10, 0xa}, {0x1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x805) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) dup(r5) (async) pidfd_getfd(r2, r5, 0x0) [ 1118.634176][T20912] batadv_slave_0: entered promiscuous mode [ 1118.647961][T20912] batadv_slave_0: left promiscuous mode 11:50:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0xe, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1118.689481][T20912] batadv0: left promiscuous mode [ 1118.690586][ T773] usb 3-1: new low-speed USB device number 68 using dummy_hcd 11:50:11 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) [ 1118.881155][ T27] audit: type=1326 audit(1697457011.716:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20926 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:50:11 executing program 5: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="780230"], 0x10) r1 = socket(0x2, 0x2, 0x0) dup2(r0, r1) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x3, 0x4) recvmmsg(r0, &(0x7f0000002800), 0x10, 0x0, &(0x7f00000028c0)={0x3ff}) shutdown(r1, 0x0) [ 1118.958951][T20929] batadv0: entered promiscuous mode 11:50:11 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r0, 0x5f984000) [ 1119.042313][T20929] batadv_slave_0: entered promiscuous mode [ 1119.055493][T20929] batadv_slave_0: left promiscuous mode [ 1119.131972][ T773] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 1119.143185][ T773] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 1119.156396][ T773] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 1119.200404][T20929] batadv0: left promiscuous mode [ 1119.373258][ T773] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1119.382894][ T773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.391334][ T773] usb 3-1: Product: т [ 1119.395600][ T773] usb 3-1: Manufacturer: 舚겛ೃ⭄秶 [ 1119.401792][ T773] usb 3-1: SerialNumber: »╟䦫䓗ᣪ㓐➨㎇䲧劦寃࠻꾜乥噚牭糓➟젚黳ᡑ뉲谦욫꺨䚞逄나땆羂뼮䦔嫐힣应蛼ꜭ뷆릴횹봴뉓陔蠉뀄漿셻쯮᭟ᶆ琅箰၅兩鏖眠๓⏦䚫㬪䉺ⱽ咚踲땁峐焼愃コ嗅驧ڡ꽊䝗뫄子⥌ꨠ䫟덌畧䩥 [ 1119.481547][T20916] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1119.788783][ T773] cdc_ncm 3-1:1.0: bind() failure [ 1119.803310][ T773] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1119.810503][ T773] cdc_ncm 3-1:1.1: bind() failure [ 1119.825122][ T773] usb 3-1: USB disconnect, device number 68 11:50:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$AUDIT_USER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3ed, 0x1}, 0x10}}, 0x0) 11:50:13 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x48, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}, 0x0) 11:50:13 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r0, 0x5f984000) 11:50:13 executing program 5: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="780230"], 0x10) r1 = socket(0x2, 0x2, 0x0) dup2(r0, r1) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x3, 0x4) recvmmsg(r0, &(0x7f0000002800), 0x10, 0x0, &(0x7f00000028c0)={0x3ff}) shutdown(r1, 0x0) 11:50:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0xf, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1120.363573][T20942] batadv0: entered promiscuous mode [ 1120.419375][T20942] batadv_slave_0: entered promiscuous mode [ 1120.426753][T20942] batadv_slave_0: left promiscuous mode [ 1120.441272][T20942] batadv0: left promiscuous mode 11:50:13 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r0, 0x5f984000) [ 1120.549754][T20951] batadv0: entered promiscuous mode 11:50:13 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xff, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x8}}}}}}}]}}, 0x0) 11:50:13 executing program 5: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="780230"], 0x10) r1 = socket(0x2, 0x2, 0x0) dup2(r0, r1) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x3, 0x4) recvmmsg(r0, &(0x7f0000002800), 0x10, 0x0, &(0x7f00000028c0)={0x3ff}) shutdown(r1, 0x0) [ 1120.590096][T20951] batadv_slave_0: entered promiscuous mode [ 1120.599351][T20951] batadv_slave_0: left promiscuous mode 11:50:13 executing program 2: openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0xb0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000300)=@string={0x2}}]}) [ 1120.653974][T20951] batadv0: left promiscuous mode 11:50:13 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x4a, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x10, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1120.949772][T20963] batadv0: entered promiscuous mode 11:50:13 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000028c0)={0x7, &(0x7f0000002880)=[{0xe000, 0xff, 0xfd, 0x4}, {0x10b, 0x3, 0x4, 0x9}, {0x6c0c, 0x1, 0xc0, 0x401}, {0x7, 0x1, 0x81, 0x3f}, {0xfff, 0x40, 0x1, 0x18}, {0x3, 0x2, 0x2}, {0xfff9, 0x40, 0xff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002940)={0x7, &(0x7f0000002900)=[{0x40, 0x8b, 0x1f, 0x4}, {0x6, 0x8, 0x9, 0x2}, {0x0, 0x4, 0x92}, {0x5, 0x2, 0x2, 0x7}, {0x8459, 0x1, 0x20, 0xfff}, {0x0, 0x1, 0x13, 0x8000000}, {0x3, 0x2, 0x80, 0x400}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x200, 0x0, 0x5, 0x6}, {0x0, 0xfa, 0xda, 0x7ff}]}) open(0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000002840)={&(0x7f0000000180)=@ieee802154, 0x80, &(0x7f0000001780)=[{&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/232, 0xe8}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/231, 0xe7}, {&(0x7f0000001540)=""/105, 0x69}, {&(0x7f00000015c0)=""/85, 0x55}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000001640)=""/154, 0x9a}, {&(0x7f0000001700)=""/86, 0x56}], 0xa, &(0x7f0000001840)=""/4096, 0x1000}, 0x40002003) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x99e, 0x0, 0x82, 0x10001}, {0x5, 0x3, 0xaf, 0x461}, {0xcfdd, 0x5, 0x40, 0x1}, {0x2, 0x5, 0x8, 0x7}, {0x5, 0x76, 0xb1, 0x2}, {0x9ab3, 0x85, 0x2, 0x10400}]}) [ 1121.043733][T20963] batadv_slave_0: entered promiscuous mode [ 1121.050823][T20963] batadv_slave_0: left promiscuous mode 11:50:13 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000d80)={0x2c, r0, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x2c}}, 0x0) [ 1121.140977][T20963] batadv0: left promiscuous mode [ 1121.224404][ T5072] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1121.260600][T14546] usb 3-1: new high-speed USB device number 69 using dummy_hcd 11:50:14 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x4c, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1121.324727][T20972] batadv0: entered promiscuous mode 11:50:14 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000d80)={0x2c, r0, 0x1, 0x0, 0x0, {0x2}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}}, 0x0) [ 1121.354494][T20972] batadv_slave_0: entered promiscuous mode [ 1121.361477][T20972] batadv_slave_0: left promiscuous mode [ 1121.452638][T20972] batadv0: left promiscuous mode [ 1121.500653][ T5072] usb 4-1: Using ep0 maxpacket: 8 [ 1121.574253][T14546] usb 3-1: Using ep0 maxpacket: 8 [ 1121.635117][T20977] batadv0: entered promiscuous mode [ 1121.665562][ T5072] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.669037][T20977] batadv_slave_0: entered promiscuous mode [ 1121.675896][ T5072] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1121.682567][T20977] batadv_slave_0: left promiscuous mode [ 1121.691517][ T5072] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 11:50:14 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000d80)={0x2c, r0, 0x1, 0x0, 0x0, {0x2}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}}, 0x0) [ 1121.771360][T14546] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1121.776587][T20977] batadv0: left promiscuous mode [ 1121.782729][T14546] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.798261][T14546] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1121.808406][T14546] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 11:50:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x11, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1121.823416][T14546] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1121.833819][T14546] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1121.969721][T20979] batadv0: entered promiscuous mode [ 1121.979576][ T5072] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1121.989158][ T5072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.997698][ T5072] usb 4-1: Product: syz [ 1122.002223][ T5072] usb 4-1: Manufacturer: syz [ 1122.007028][ T5072] usb 4-1: SerialNumber: syz 11:50:14 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x60, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1122.033077][T20979] batadv_slave_0: entered promiscuous mode [ 1122.039899][T20979] batadv_slave_0: left promiscuous mode [ 1122.052539][T20979] batadv0: left promiscuous mode [ 1122.141043][T14546] usb 3-1: string descriptor 0 read error: -22 [ 1122.147892][T14546] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1122.157411][T14546] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.361700][ T5072] cdc_ncm 4-1:1.0: bind() failure [ 1122.378187][ T5072] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1122.385771][ T5072] cdc_ncm 4-1:1.1: bind() failure [ 1122.393829][T20983] batadv0: entered promiscuous mode [ 1122.468209][ T5072] usb 4-1: USB disconnect, device number 17 [ 1122.478967][T20983] batadv_slave_0: entered promiscuous mode [ 1122.485882][T20983] batadv_slave_0: left promiscuous mode [ 1122.511313][T14546] cdc_ncm 3-1:1.0: bind() failure [ 1122.527620][T14546] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1122.543585][T14546] cdc_ncm 3-1:1.1: bind() failure [ 1122.547897][T20983] batadv0: left promiscuous mode [ 1122.625117][T14546] usb 3-1: USB disconnect, device number 69 11:50:15 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000028c0)={0x7, &(0x7f0000002880)=[{0xe000, 0xff, 0xfd, 0x4}, {0x10b, 0x3, 0x4, 0x9}, {0x6c0c, 0x1, 0xc0, 0x401}, {0x7, 0x1, 0x81, 0x3f}, {0xfff, 0x40, 0x1, 0x18}, {0x3, 0x2, 0x2}, {0xfff9, 0x40, 0xff}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002940)={0x7, &(0x7f0000002900)=[{0x40, 0x8b, 0x1f, 0x4}, {0x6, 0x8, 0x9, 0x2}, {0x0, 0x4, 0x92}, {0x5, 0x2, 0x2, 0x7}, {0x8459, 0x1, 0x20, 0xfff}, {0x0, 0x1, 0x13, 0x8000000}, {0x3, 0x2, 0x80, 0x400}]}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x200, 0x0, 0x5, 0x6}, {0x0, 0xfa, 0xda, 0x7ff}]}) (async) open(0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f0000002840)={&(0x7f0000000180)=@ieee802154, 0x80, &(0x7f0000001780)=[{&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/232, 0xe8}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/231, 0xe7}, {&(0x7f0000001540)=""/105, 0x69}, {&(0x7f00000015c0)=""/85, 0x55}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000001640)=""/154, 0x9a}, {&(0x7f0000001700)=""/86, 0x56}], 0xa, &(0x7f0000001840)=""/4096, 0x1000}, 0x40002003) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x99e, 0x0, 0x82, 0x10001}, {0x5, 0x3, 0xaf, 0x461}, {0xcfdd, 0x5, 0x40, 0x1}, {0x2, 0x5, 0x8, 0x7}, {0x5, 0x76, 0xb1, 0x2}, {0x9ab3, 0x85, 0x2, 0x10400}]}) 11:50:15 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000d80)={0x2c, r0, 0x1, 0x0, 0x0, {0x2}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}}, 0x0) 11:50:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000780)={&(0x7f00000006c0), 0x4, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7800fbdbdf25cfdf00000800310001000400"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 11:50:15 executing program 3: pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0)={0x2}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 11:50:15 executing program 5: pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0)={0x2}, 0x0, 0x0, 0x0) 11:50:15 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x12, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:15 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x68, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1123.240836][T20997] batadv0: entered promiscuous mode 11:50:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x18, r1, 0x8e60390d28db5b05, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 1123.285787][T20997] batadv_slave_0: entered promiscuous mode [ 1123.292884][T20997] batadv_slave_0: left promiscuous mode [ 1123.315417][T20997] batadv0: left promiscuous mode 11:50:16 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000d80)={0x2c, r0, 0x1, 0x0, 0x0, {0x3}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x2c}}, 0x0) 11:50:16 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) [ 1123.384813][T21000] batadv0: entered promiscuous mode 11:50:16 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x22, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1123.520484][T21000] batadv_slave_0: entered promiscuous mode [ 1123.527287][T21000] batadv_slave_0: left promiscuous mode [ 1123.588998][T21000] batadv0: left promiscuous mode 11:50:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={0x0}, 0x1, 0x0, 0x2}, 0x0) [ 1123.811986][T21008] batadv0: entered promiscuous mode [ 1123.868854][T21008] batadv_slave_0: entered promiscuous mode [ 1123.875864][T21008] batadv_slave_0: left promiscuous mode [ 1123.928892][T21008] batadv0: left promiscuous mode 11:50:16 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000028c0)={0x7, &(0x7f0000002880)=[{0xe000, 0xff, 0xfd, 0x4}, {0x10b, 0x3, 0x4, 0x9}, {0x6c0c, 0x1, 0xc0, 0x401}, {0x7, 0x1, 0x81, 0x3f}, {0xfff, 0x40, 0x1, 0x18}, {0x3, 0x2, 0x2}, {0xfff9, 0x40, 0xff}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002940)={0x7, &(0x7f0000002900)=[{0x40, 0x8b, 0x1f, 0x4}, {0x6, 0x8, 0x9, 0x2}, {0x0, 0x4, 0x92}, {0x5, 0x2, 0x2, 0x7}, {0x8459, 0x1, 0x20, 0xfff}, {0x0, 0x1, 0x13, 0x8000000}, {0x3, 0x2, 0x80, 0x400}]}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x200, 0x0, 0x5, 0x6}, {0x0, 0xfa, 0xda, 0x7ff}]}) (async) open(0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000002840)={&(0x7f0000000180)=@ieee802154, 0x80, &(0x7f0000001780)=[{&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/232, 0xe8}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/231, 0xe7}, {&(0x7f0000001540)=""/105, 0x69}, {&(0x7f00000015c0)=""/85, 0x55}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000001640)=""/154, 0x9a}, {&(0x7f0000001700)=""/86, 0x56}], 0xa, &(0x7f0000001840)=""/4096, 0x1000}, 0x40002003) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x99e, 0x0, 0x82, 0x10001}, {0x5, 0x3, 0xaf, 0x461}, {0xcfdd, 0x5, 0x40, 0x1}, {0x2, 0x5, 0x8, 0x7}, {0x5, 0x76, 0xb1, 0x2}, {0x9ab3, 0x85, 0x2, 0x10400}]}) 11:50:16 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000019180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ftruncate(0xffffffffffffffff, 0x400) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000003c0)) ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x0, 0x1012) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000), 0x0) getrlimit(0x5, &(0x7f0000000040)) read$dsp(r0, &(0x7f0000002280)=""/4110, 0x100e) 11:50:16 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x6c, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, 0x0) geteuid() r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, 0x0) geteuid() socket$l2tp6(0xa, 0x2, 0x73) 11:50:16 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000019180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x400) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000003c0)) ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x0, 0x1012) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000), 0x0) read$dsp(r0, &(0x7f0000002280)=""/4110, 0x100e) 11:50:17 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x24, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r0) [ 1124.314685][T21024] batadv0: entered promiscuous mode [ 1124.389732][T21024] batadv_slave_0: entered promiscuous mode [ 1124.397221][T21024] batadv_slave_0: left promiscuous mode [ 1124.438093][T21024] batadv0: left promiscuous mode [ 1124.533373][T21027] batadv0: entered promiscuous mode [ 1124.551993][T21027] batadv_slave_0: entered promiscuous mode [ 1124.558784][T21027] batadv_slave_0: left promiscuous mode 11:50:17 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x74, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:17 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000d80)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x7, 'virt_wifi0\x00'}]}]}, 0x2c}}, 0x0) [ 1124.701238][T21027] batadv0: left promiscuous mode [ 1124.841589][T21031] batadv0: entered promiscuous mode [ 1124.931845][T21031] batadv_slave_0: entered promiscuous mode [ 1124.938644][T21031] batadv_slave_0: left promiscuous mode 11:50:17 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x25, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1124.977695][T21031] batadv0: left promiscuous mode 11:50:17 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000019180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ftruncate(0xffffffffffffffff, 0x400) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000003c0)) ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x0, 0x1012) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000), 0x0) getrlimit(0x5, &(0x7f0000000040)) read$dsp(r0, &(0x7f0000002280)=""/4110, 0x100e) 11:50:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r1, 0x8e60390d28db5b05}, 0x14}}, 0x0) 11:50:17 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x505001) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '/\\.\'(&$}!.'}, {0x20, '++'}, {}, {0x20, '\''}, {}], 0xa, "8f3565753ea0a3ff184cce5ecb59fed7a4d403833ec6035dd2ecbbc425a930a1dd9d72d572389f70cdca5d3c6643b7b8a0e9423f87a1b938a0c570f8be43855af07976705cea1ba11dc4273c2d35f85ab84269d88ce722c584e32a8cc8eaa3f21b5801bcd7f3a4f83b599d21e4b612ba3e088612500733687917322c2f0ae0c56bb08c70154bc77b55e0d269472ab058cbf55454a9e3516c0a10e86c3247501221ae04f73ee165c7d1"}, 0xc6) 11:50:18 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={0x0, 0x64}}, 0x0) [ 1125.199382][T21035] batadv0: entered promiscuous mode 11:50:18 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x7a, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1125.287177][T21035] batadv_slave_0: entered promiscuous mode [ 1125.301758][T21035] batadv_slave_0: left promiscuous mode [ 1125.348560][ T27] audit: type=1326 audit(1697457018.166:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21038 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1125.392657][T21035] batadv0: left promiscuous mode [ 1125.570120][T21047] batadv0: entered promiscuous mode 11:50:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000d80)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0xfffffdef}}, 0x0) [ 1125.621427][T21047] batadv_slave_0: entered promiscuous mode [ 1125.628252][T21047] batadv_slave_0: left promiscuous mode 11:50:18 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000d80)={0x2c, r0, 0x1, 0x0, 0x0, {0x6}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x2c}}, 0x0) [ 1125.680441][T21047] batadv0: left promiscuous mode 11:50:18 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x2f, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:18 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x9d, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:18 executing program 2: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/171) 11:50:18 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000019180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x400) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000003c0)) ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x0, 0x1012) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000), 0x0) getrlimit(0x5, &(0x7f0000000040)) read$dsp(r0, &(0x7f0000002280)=""/4110, 0x100e) [ 1126.020906][T21053] batadv0: entered promiscuous mode [ 1126.065496][T21053] batadv_slave_0: entered promiscuous mode [ 1126.072804][T21053] batadv_slave_0: left promiscuous mode [ 1126.104907][T21053] batadv0: left promiscuous mode 11:50:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x505001) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '/\\.\'(&$}!.'}, {0x20, '++'}, {}, {0x20, '\''}, {}], 0xa, "8f3565753ea0a3ff184cce5ecb59fed7a4d403833ec6035dd2ecbbc425a930a1dd9d72d572389f70cdca5d3c6643b7b8a0e9423f87a1b938a0c570f8be43855af07976705cea1ba11dc4273c2d35f85ab84269d88ce722c584e32a8cc8eaa3f21b5801bcd7f3a4f83b599d21e4b612ba3e088612500733687917322c2f0ae0c56bb08c70154bc77b55e0d269472ab058cbf55454a9e3516c0a10e86c3247501221ae04f73ee165c7d1"}, 0xc6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async) open(0x0, 0x0, 0x0) (async) syz_open_dev$video(&(0x7f0000000040), 0x3, 0x505001) (async) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '/\\.\'(&$}!.'}, {0x20, '++'}, {}, {0x20, '\''}, {}], 0xa, "8f3565753ea0a3ff184cce5ecb59fed7a4d403833ec6035dd2ecbbc425a930a1dd9d72d572389f70cdca5d3c6643b7b8a0e9423f87a1b938a0c570f8be43855af07976705cea1ba11dc4273c2d35f85ab84269d88ce722c584e32a8cc8eaa3f21b5801bcd7f3a4f83b599d21e4b612ba3e088612500733687917322c2f0ae0c56bb08c70154bc77b55e0d269472ab058cbf55454a9e3516c0a10e86c3247501221ae04f73ee165c7d1"}, 0xc6) (async) 11:50:19 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000019180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ftruncate(0xffffffffffffffff, 0x400) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000003c0)) ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x0, 0x1012) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000), 0x0) getrlimit(0x5, &(0x7f0000000040)) read$dsp(r0, &(0x7f0000002280)=""/4110, 0x100e) 11:50:19 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000d80)={0x2c, r0, 0x1, 0x0, 0x0, {0x9}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x2c}}, 0x0) [ 1126.332796][T21056] batadv0: entered promiscuous mode [ 1126.416676][T21056] batadv_slave_0: entered promiscuous mode [ 1126.429929][T21056] batadv_slave_0: left promiscuous mode [ 1126.515456][T21056] batadv0: left promiscuous mode 11:50:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x3a, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1126.592887][ T27] audit: type=1326 audit(1697457019.406:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21061 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1126.718496][ T27] audit: type=1326 audit(1697457019.536:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21061 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1126.819725][T21073] batadv0: entered promiscuous mode 11:50:19 executing program 2: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 11:50:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x505001) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '/\\.\'(&$}!.'}, {0x20, '++'}, {}, {0x20, '\''}, {}], 0xa, "8f3565753ea0a3ff184cce5ecb59fed7a4d403833ec6035dd2ecbbc425a930a1dd9d72d572389f70cdca5d3c6643b7b8a0e9423f87a1b938a0c570f8be43855af07976705cea1ba11dc4273c2d35f85ab84269d88ce722c584e32a8cc8eaa3f21b5801bcd7f3a4f83b599d21e4b612ba3e088612500733687917322c2f0ae0c56bb08c70154bc77b55e0d269472ab058cbf55454a9e3516c0a10e86c3247501221ae04f73ee165c7d1"}, 0xc6) [ 1126.892887][T21073] batadv_slave_0: entered promiscuous mode [ 1126.899788][T21073] batadv_slave_0: left promiscuous mode 11:50:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0xa00}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1126.961482][T21073] batadv0: left promiscuous mode 11:50:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x7}, 0x0) [ 1127.237308][ T27] audit: type=1326 audit(1697457020.046:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21075 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:50:20 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x48, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1127.317659][T21079] batadv0: entered promiscuous mode [ 1127.378747][T21079] batadv_slave_0: entered promiscuous mode [ 1127.385758][T21079] batadv_slave_0: left promiscuous mode [ 1127.429567][T21079] batadv0: left promiscuous mode 11:50:20 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000340)={0xc}) [ 1127.554269][T21085] batadv0: entered promiscuous mode 11:50:20 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000d80)={0x2c, r0, 0x1, 0x0, 0x0, {0xa}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x2c}}, 0x0) [ 1127.645069][T21085] batadv_slave_0: entered promiscuous mode [ 1127.655807][T21085] batadv_slave_0: left promiscuous mode [ 1127.682279][T21085] batadv0: left promiscuous mode 11:50:22 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x453, 0x0, 0x0, 0x0, "a9"}, 0x14}}, 0x0) 11:50:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x2500}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:22 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}}}}]}}, 0x0) 11:50:22 executing program 2: syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 11:50:22 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x7, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x67) 11:50:22 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x4a, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1129.626510][T21099] batadv0: entered promiscuous mode 11:50:22 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x7, 0x1}, {0x5}, {0x6}]}) (async) open(0x0, 0x0, 0x67) [ 1129.653791][T21099] batadv_slave_0: entered promiscuous mode [ 1129.660832][T21099] batadv_slave_0: left promiscuous mode [ 1129.676812][T21099] batadv0: left promiscuous mode 11:50:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}}, 0x0) [ 1129.810652][T21101] batadv0: entered promiscuous mode [ 1129.822365][T14546] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1129.824745][ T33] usb 3-1: new low-speed USB device number 70 using dummy_hcd 11:50:22 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x4c, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1129.859452][T21101] batadv_slave_0: entered promiscuous mode [ 1129.866334][T21101] batadv_slave_0: left promiscuous mode [ 1129.891911][T21101] batadv0: left promiscuous mode 11:50:22 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x7, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x67) (async) open(0x0, 0x0, 0x67) 11:50:22 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {0x2}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}}, 0x0) [ 1130.094412][T21109] batadv0: entered promiscuous mode [ 1130.102562][T14546] usb 4-1: Using ep0 maxpacket: 8 11:50:23 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x6800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1130.191214][T21109] batadv_slave_0: entered promiscuous mode [ 1130.198005][T21109] batadv_slave_0: left promiscuous mode [ 1130.262122][ T33] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1130.273625][ T33] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.274540][T21109] batadv0: left promiscuous mode [ 1130.283998][ T33] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 1130.284134][ T33] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1130.284259][ T33] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 1130.284381][ T33] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1130.292297][T14546] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.345910][T14546] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1130.356024][T14546] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1130.366101][T14546] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1130.376331][T14546] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 11:50:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x28, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}]}, 0x28}}, 0x0) 11:50:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r1) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) open(0x0, 0x0, 0x0) [ 1130.562456][T21117] batadv0: entered promiscuous mode [ 1130.603236][T21117] batadv_slave_0: entered promiscuous mode [ 1130.610039][T21117] batadv_slave_0: left promiscuous mode [ 1130.625278][ T33] usb 3-1: string descriptor 0 read error: -22 [ 1130.632232][ T33] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1130.633411][T14546] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1130.641636][ T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.659411][T14546] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.667732][T14546] usb 4-1: Product: syz [ 1130.672228][T14546] usb 4-1: Manufacturer: syz [ 1130.677032][T14546] usb 4-1: SerialNumber: syz [ 1130.708588][ T27] audit: type=1326 audit(1697457023.546:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21120 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1130.744928][T21117] batadv0: left promiscuous mode [ 1130.997289][ T33] cdc_ncm 3-1:1.0: bind() failure [ 1131.031862][ T33] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1131.038973][ T33] cdc_ncm 3-1:1.1: bind() failure [ 1131.064565][T14546] cdc_ncm 4-1:1.0: bind() failure [ 1131.105674][T14546] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1131.108336][ T33] usb 3-1: USB disconnect, device number 70 [ 1131.112874][T14546] cdc_ncm 4-1:1.1: bind() failure [ 1131.251220][T14546] usb 4-1: USB disconnect, device number 18 11:50:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) 11:50:24 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x50, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:24 executing program 5: syz_usb_connect$cdc_ncm(0x1, 0x72, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x73}, [@mdlm_detail={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x5, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000200)=@string={0x2}}, {0x2, &(0x7f0000000280)=@string={0x2}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}, {0x2, &(0x7f0000000300)=@string={0x2}}]}) 11:50:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x6902}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r1) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) open(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd7) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) dup(r1) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) open(0x0, 0x0, 0x0) (async) 11:50:24 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x20, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_SOPASS={0xb, 0x3, "f415e04bbccb52"}]}, 0x20}}, 0x0) [ 1131.791968][T21135] batadv0: entered promiscuous mode 11:50:24 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) [ 1131.826628][ T27] audit: type=1326 audit(1697457024.616:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21130 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 11:50:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000003d00)=[{{&(0x7f00000002c0)=@abs, 0x6e, 0x0}}], 0x1, 0x0) [ 1131.880469][T21135] batadv_slave_0: entered promiscuous mode [ 1131.887277][T21135] batadv_slave_0: left promiscuous mode 11:50:24 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r1) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) open(0x0, 0x0, 0x0) [ 1131.955615][T21135] batadv0: left promiscuous mode [ 1132.071623][T15139] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 1132.145420][T21133] batadv0: entered promiscuous mode [ 1132.195894][T21133] batadv_slave_0: entered promiscuous mode [ 1132.203013][T21133] batadv_slave_0: left promiscuous mode 11:50:25 executing program 2: r0 = syz_io_uring_setup(0x49ac, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000600)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0) 11:50:25 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x7, 0x0, 0x0) [ 1132.289506][ T27] audit: type=1326 audit(1697457025.046:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21143 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1132.333363][T21133] batadv0: left promiscuous mode 11:50:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x6903}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1132.491683][T15139] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 1132.502722][T15139] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 1132.513013][T15139] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1132.523101][T15139] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 1132.620617][T15139] usb 6-1: language id specifier not provided by device, defaulting to English 11:50:25 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x60, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1132.662434][T21154] batadv0: entered promiscuous mode 11:50:25 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast2}, 0x1c) [ 1132.811579][T15139] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1132.821056][T15139] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.843547][T21154] batadv_slave_0: entered promiscuous mode [ 1132.850450][T21154] batadv_slave_0: left promiscuous mode [ 1132.913719][T21126] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1132.979047][T21154] batadv0: left promiscuous mode [ 1133.030048][T21157] batadv0: entered promiscuous mode [ 1133.074268][T21157] batadv_slave_0: entered promiscuous mode [ 1133.085448][T21157] batadv_slave_0: left promiscuous mode [ 1133.120062][T21157] batadv0: left promiscuous mode [ 1133.276082][T15139] cdc_ncm 6-1:1.0: bind() failure [ 1133.306546][T15139] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1133.313776][T15139] cdc_ncm 6-1:1.1: bind() failure [ 1133.375657][T15139] usb 6-1: USB disconnect, device number 11 11:50:26 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x68, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:26 executing program 2: r0 = socket(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x17) 11:50:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x6904}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) 11:50:26 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5, 0x0, 0x4, 0x1}, {0x7ff, 0x0, 0x0, 0x1f}]}) open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)=""/114, 0x72}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/150, 0x96}, 0x15}, {{&(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/103, 0x67}, {&(0x7f0000001380)=""/13, 0xd}], 0x2}, 0x8}, {{&(0x7f0000001400)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001480)=""/213, 0xd5}, {&(0x7f0000001580)=""/66, 0x42}, {&(0x7f0000001600)=""/159, 0x9f}, {&(0x7f00000016c0)=""/138, 0x8a}, {&(0x7f0000001780)=""/15, 0xf}], 0x5, &(0x7f0000001840)=""/242, 0xf2}, 0x8}, {{&(0x7f0000001940)=@ieee802154, 0x80, &(0x7f0000001a80)=[{&(0x7f00000019c0)=""/157, 0x9d}], 0x1, &(0x7f0000001ac0)=""/4096, 0x1000}, 0x1}], 0x4, 0x20002000, &(0x7f0000002bc0)) 11:50:26 executing program 5: mq_open(&(0x7f00000006c0)='!,}\x00', 0x0, 0x0, 0x0) [ 1133.957105][T21165] batadv0: entered promiscuous mode 11:50:26 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x3) 11:50:26 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xea, 0xeb, 0x9f, 0x20, 0x4a5, 0x300c, 0x7fe2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xcb, 0xae, 0xe4, 0xff, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) [ 1134.012399][T21165] batadv_slave_0: entered promiscuous mode [ 1134.019306][T21165] batadv_slave_0: left promiscuous mode [ 1134.087077][T21165] batadv0: left promiscuous mode 11:50:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) [ 1134.274295][T21166] batadv0: entered promiscuous mode 11:50:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x6905}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:27 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5, 0x0, 0x4, 0x1}, {0x7ff, 0x0, 0x0, 0x1f}]}) (async) open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)=""/114, 0x72}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/150, 0x96}, 0x15}, {{&(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/103, 0x67}, {&(0x7f0000001380)=""/13, 0xd}], 0x2}, 0x8}, {{&(0x7f0000001400)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001480)=""/213, 0xd5}, {&(0x7f0000001580)=""/66, 0x42}, {&(0x7f0000001600)=""/159, 0x9f}, {&(0x7f00000016c0)=""/138, 0x8a}, {&(0x7f0000001780)=""/15, 0xf}], 0x5, &(0x7f0000001840)=""/242, 0xf2}, 0x8}, {{&(0x7f0000001940)=@ieee802154, 0x80, &(0x7f0000001a80)=[{&(0x7f00000019c0)=""/157, 0x9d}], 0x1, &(0x7f0000001ac0)=""/4096, 0x1000}, 0x1}], 0x4, 0x20002000, &(0x7f0000002bc0)) [ 1134.354441][T21166] batadv_slave_0: entered promiscuous mode [ 1134.361453][T21166] batadv_slave_0: left promiscuous mode 11:50:27 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x1c, 0x0, 0x0) [ 1134.396229][T21166] batadv0: left promiscuous mode [ 1134.480699][T15139] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1134.605861][T21182] batadv0: entered promiscuous mode [ 1134.676830][T21182] batadv_slave_0: entered promiscuous mode [ 1134.683758][T21182] batadv_slave_0: left promiscuous mode 11:50:27 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x6c, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:27 executing program 3: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1a, 0x0, &(0x7f0000000780)) 11:50:27 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5411, &(0x7f0000000000)={'wg2\x00'}) [ 1134.739195][T21182] batadv0: left promiscuous mode [ 1134.781631][T15139] usb 3-1: Using ep0 maxpacket: 32 11:50:27 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5, 0x0, 0x4, 0x1}, {0x7ff, 0x0, 0x0, 0x1f}]}) (async) open(0x0, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)=""/114, 0x72}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/150, 0x96}, 0x15}, {{&(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/103, 0x67}, {&(0x7f0000001380)=""/13, 0xd}], 0x2}, 0x8}, {{&(0x7f0000001400)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001480)=""/213, 0xd5}, {&(0x7f0000001580)=""/66, 0x42}, {&(0x7f0000001600)=""/159, 0x9f}, {&(0x7f00000016c0)=""/138, 0x8a}, {&(0x7f0000001780)=""/15, 0xf}], 0x5, &(0x7f0000001840)=""/242, 0xf2}, 0x8}, {{&(0x7f0000001940)=@ieee802154, 0x80, &(0x7f0000001a80)=[{&(0x7f00000019c0)=""/157, 0x9d}], 0x1, &(0x7f0000001ac0)=""/4096, 0x1000}, 0x1}], 0x4, 0x20002000, &(0x7f0000002bc0)) [ 1134.911526][T15139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 11:50:27 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x23, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0}, 0x90) [ 1135.037203][T21193] batadv0: entered promiscuous mode 11:50:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x6906}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:27 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c620f, &(0x7f00000000c0)) [ 1135.111649][T15139] usb 3-1: New USB device found, idVendor=04a5, idProduct=300c, bcdDevice=7f.e2 [ 1135.121498][T15139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.133390][T15139] usb 3-1: Product: syz [ 1135.138059][T15139] usb 3-1: Manufacturer: syz [ 1135.143104][T15139] usb 3-1: SerialNumber: syz [ 1135.168009][T21193] batadv_slave_0: entered promiscuous mode [ 1135.176121][T21193] batadv_slave_0: left promiscuous mode [ 1135.211229][T15139] usb 3-1: config 0 descriptor?? [ 1135.295425][T21193] batadv0: left promiscuous mode [ 1135.366463][T21203] binder: 21200:21203 ioctl c00c620f 200000c0 returned -22 [ 1135.473243][ T1214] ieee802154 phy0 wpan0: encryption failed: -22 [ 1135.479881][ T1214] ieee802154 phy1 wpan1: encryption failed: -22 [ 1135.504787][T21204] batadv0: entered promiscuous mode [ 1135.525227][T15139] gspca_main: spca500-2.14.0 probing 04a5:300c [ 1135.587811][T21204] batadv_slave_0: entered promiscuous mode [ 1135.594847][T21204] batadv_slave_0: left promiscuous mode [ 1135.620680][T15139] usb 3-1: USB disconnect, device number 71 [ 1135.627822][T21204] batadv0: left promiscuous mode 11:50:28 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x541b, &(0x7f0000000040)={'wg2\x00'}) 11:50:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x541b, &(0x7f0000000000)={'wg2\x00'}) 11:50:28 executing program 5: syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8406f5", 0x14, 0x2b, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 11:50:28 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x74, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:28 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000000c0)={0x838, "8cab0386913c94164bc502055145115357c216cf9aba3498466d621b734cd07d", 0x1, 0x4, 0x4, 0x3000000, 0x40000, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1, 0x80}, {0x5}, {0x6, 0x0, 0x0, 0xffffffff}]}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x600000, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) creat(&(0x7f0000000140)='./file0\x00', 0x29) open(0x0, 0x0, 0x0) 11:50:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x6907}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1136.229789][T21212] batadv0: entered promiscuous mode 11:50:29 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000180)) [ 1136.327409][T21212] batadv_slave_0: entered promiscuous mode [ 1136.334404][T21212] batadv_slave_0: left promiscuous mode 11:50:29 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, 0x0) 11:50:29 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x14, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0}, 0x90) [ 1136.436565][T21212] batadv0: left promiscuous mode [ 1136.531073][ T27] audit: type=1326 audit(1697457029.296:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21213 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0xffff0000 [ 1136.599828][T21214] batadv0: entered promiscuous mode 11:50:29 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x8, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0}, 0x90) [ 1136.649942][T21222] binder: 21221:21222 ioctl c00c620f 0 returned -14 [ 1136.693596][T21214] batadv_slave_0: entered promiscuous mode [ 1136.702006][T21214] batadv_slave_0: left promiscuous mode [ 1136.768473][T21214] batadv0: left promiscuous mode 11:50:29 executing program 2: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 11:50:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x6908}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:29 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast1}}, 0x14) 11:50:29 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x7a, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:29 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x7, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0}, 0x90) [ 1137.101789][T21230] batadv0: entered promiscuous mode [ 1137.186206][T21230] batadv_slave_0: entered promiscuous mode [ 1137.193416][T21230] batadv_slave_0: left promiscuous mode 11:50:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5452, &(0x7f0000000040)={'wg2\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) [ 1137.227289][T21230] batadv0: left promiscuous mode [ 1137.365940][T21234] batadv0: entered promiscuous mode [ 1137.484982][T21234] batadv_slave_0: entered promiscuous mode [ 1137.492026][T21234] batadv_slave_0: left promiscuous mode [ 1137.529707][T21234] batadv0: left promiscuous mode 11:50:31 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000740)={0x44, 0x0, &(0x7f0000000580)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:50:31 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) (async) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000000c0)={0x838, "8cab0386913c94164bc502055145115357c216cf9aba3498466d621b734cd07d", 0x1, 0x4, 0x4, 0x3000000, 0x40000, 0x2}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1, 0x80}, {0x5}, {0x6, 0x0, 0x0, 0xffffffff}]}) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x600000, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) creat(&(0x7f0000000140)='./file0\x00', 0x29) (async) open(0x0, 0x0, 0x0) 11:50:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x9d, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x6909}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:31 executing program 2: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) getresgid(&(0x7f0000000140), &(0x7f0000000180), 0x0) 11:50:31 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x18, 0x4c3f, 0x0, 0x0, 0x0, 0x0}) [ 1138.524249][T21241] batadv0: entered promiscuous mode [ 1138.570097][T21241] batadv_slave_0: entered promiscuous mode [ 1138.577238][T21241] batadv_slave_0: left promiscuous mode 11:50:31 executing program 2: sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000007880), 0xffffffffffffffff) [ 1138.656220][T21241] batadv0: left promiscuous mode 11:50:31 executing program 5: r0 = socket(0xa, 0x1, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 11:50:31 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1138.873947][T21248] batadv0: entered promiscuous mode [ 1138.935268][T21248] batadv_slave_0: entered promiscuous mode [ 1138.942459][T21248] batadv_slave_0: left promiscuous mode 11:50:31 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000580), &(0x7f0000000600), &(0x7f0000000640)) [ 1138.986723][T21248] batadv0: left promiscuous mode 11:50:31 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0xd, 0x0, 0x0) 11:50:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:32 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x49, &(0x7f0000000180)={{{@in=@remote, @in=@multicast2}}, {{@in=@remote}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) [ 1139.350560][T21260] batadv0: entered promiscuous mode [ 1139.429932][T21260] batadv_slave_0: entered promiscuous mode [ 1139.437345][T21260] batadv_slave_0: left promiscuous mode [ 1139.485974][T21260] batadv0: left promiscuous mode [ 1139.755174][ T27] audit: type=1326 audit(1697457032.616:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21263 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0xffff0000 11:50:32 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000000c0)={0x838, "8cab0386913c94164bc502055145115357c216cf9aba3498466d621b734cd07d", 0x1, 0x4, 0x4, 0x3000000, 0x40000, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1, 0x80}, {0x5}, {0x6, 0x0, 0x0, 0xffffffff}]}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x600000, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) creat(&(0x7f0000000140)='./file0\x00', 0x29) open(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)) (async) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) (async) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000000c0)={0x838, "8cab0386913c94164bc502055145115357c216cf9aba3498466d621b734cd07d", 0x1, 0x4, 0x4, 0x3000000, 0x40000, 0x2}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1, 0x80}, {0x5}, {0x6, 0x0, 0x0, 0xffffffff}]}) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x600000, 0x0) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) (async) creat(&(0x7f0000000140)='./file0\x00', 0x29) (async) open(0x0, 0x0, 0x0) (async) 11:50:32 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x2, r1}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 11:50:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x690a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:32 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1c, 0x2, &(0x7f0000000040)=@raw=[@cb_func], 0x0}, 0x90) 11:50:32 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x2, r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 11:50:32 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x2, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1139.933859][T21273] batadv0: entered promiscuous mode 11:50:32 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x1, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}], &(0x7f00000002c0)='syzkaller\x00', 0x1}, 0x90) [ 1139.973505][T21273] batadv_slave_0: entered promiscuous mode [ 1139.980486][T21273] batadv_slave_0: left promiscuous mode [ 1140.026026][T21273] batadv0: left promiscuous mode 11:50:32 executing program 5: epoll_create(0x1f) 11:50:32 executing program 3: mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) [ 1140.125906][ T27] audit: type=1326 audit(1697457032.916:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21277 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0xffff0000 [ 1140.180925][T21274] batadv0: entered promiscuous mode [ 1140.263333][T21274] batadv_slave_0: entered promiscuous mode [ 1140.270112][T21274] batadv_slave_0: left promiscuous mode [ 1140.335473][T21274] batadv0: left promiscuous mode 11:50:33 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x40000) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 11:50:33 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x3, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:33 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x11, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0}, 0x90) [ 1140.707973][T21289] batadv0: entered promiscuous mode [ 1140.747168][T21289] batadv_slave_0: entered promiscuous mode [ 1140.761235][T21289] batadv_slave_0: left promiscuous mode [ 1140.790885][T21289] batadv0: left promiscuous mode 11:50:34 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x4, &(0x7f00000000c0)=[{0x11d, 0x0, 0x1}, {0x5, 0x0, 0x0, 0x7fffffff}, {0x6, 0x0, 0x5}, {0xd5b, 0x5, 0xa, 0x9}]}) open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) signalfd(r0, &(0x7f0000000040)={[0x3]}, 0x8) 11:50:34 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x4, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:34 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'morus640-generic\x00'}}}, 0xe0}}, 0x0) 11:50:34 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x690b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0) 11:50:34 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f00000000c0)) [ 1141.671087][T21294] binder: 21293:21294 ioctl c0046209 0 returned -22 [ 1141.709595][T21300] batadv0: entered promiscuous mode [ 1141.752982][T21300] batadv_slave_0: entered promiscuous mode [ 1141.760642][T21300] batadv_slave_0: left promiscuous mode 11:50:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) [ 1141.794241][T21300] batadv0: left promiscuous mode 11:50:34 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r0, 0x29, 0xcd, 0x0, 0x0) 11:50:34 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x12, 0x2, &(0x7f0000000040)=@raw=[@cb_func], 0x0}, 0x90) [ 1141.994110][T21299] batadv0: entered promiscuous mode [ 1142.023625][T21299] batadv_slave_0: entered promiscuous mode [ 1142.031561][T21299] batadv_slave_0: left promiscuous mode 11:50:34 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x690c}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1142.070789][T21299] batadv0: left promiscuous mode 11:50:35 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) mq_notify(r0, 0x0) 11:50:35 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x0, 0xfff}}) [ 1142.355759][T21310] batadv0: entered promiscuous mode [ 1142.438890][T21310] batadv_slave_0: entered promiscuous mode [ 1142.446334][T21310] batadv_slave_0: left promiscuous mode [ 1142.533849][T21310] batadv0: left promiscuous mode 11:50:35 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x4, &(0x7f00000000c0)=[{0x11d, 0x0, 0x1}, {0x5, 0x0, 0x0, 0x7fffffff}, {0x6, 0x0, 0x5}, {0xd5b, 0x5, 0xa, 0x9}]}) open(0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) signalfd(r0, &(0x7f0000000040)={[0x3]}, 0x8) (async) signalfd(r0, &(0x7f0000000040)={[0x3]}, 0x8) 11:50:35 executing program 5: syz_io_uring_setup(0x49ac, &(0x7f0000000000), &(0x7f0000000080), 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, 0x0) 11:50:35 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x5, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:35 executing program 2: r0 = socket(0xa, 0x1, 0x0) recvfrom$l2tp(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 11:50:35 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) 11:50:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x690d}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1143.038869][T21325] batadv0: entered promiscuous mode 11:50:35 executing program 2: mq_open(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x0, 0x0) [ 1143.115272][T21325] batadv_slave_0: entered promiscuous mode [ 1143.122462][T21325] batadv_slave_0: left promiscuous mode 11:50:36 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000008200)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, 0x0, 0x0) [ 1143.171340][T21325] batadv0: left promiscuous mode 11:50:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000040)) [ 1143.308431][T21330] batadv0: entered promiscuous mode [ 1143.358105][T21330] batadv_slave_0: entered promiscuous mode [ 1143.365370][T21330] batadv_slave_0: left promiscuous mode 11:50:36 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x4, &(0x7f00000000c0)=[{0x11d, 0x0, 0x1}, {0x5, 0x0, 0x0, 0x7fffffff}, {0x6, 0x0, 0x5}, {0xd5b, 0x5, 0xa, 0x9}]}) open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) signalfd(r0, &(0x7f0000000040)={[0x3]}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x4, &(0x7f00000000c0)=[{0x11d, 0x0, 0x1}, {0x5, 0x0, 0x0, 0x7fffffff}, {0x6, 0x0, 0x5}, {0xd5b, 0x5, 0xa, 0x9}]}) (async) open(0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) signalfd(r0, &(0x7f0000000040)={[0x3]}, 0x8) (async) 11:50:36 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x6, 0x0, 0x0) 11:50:36 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x6, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1143.510965][T21330] batadv0: left promiscuous mode 11:50:36 executing program 3: syz_io_uring_setup(0x49ac, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000000080), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x15d1, &(0x7f0000000580)={0x0, 0x0, 0x2000}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x24f7, &(0x7f0000000740)={0x0, 0xf3a7, 0x8}, &(0x7f00000007c0), &(0x7f0000000800)) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 11:50:36 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000003d00)=[{{&(0x7f00000002c0)=@abs={0x1}, 0x6e, 0x0}}], 0x1, 0x0) [ 1143.780945][T21344] batadv0: entered promiscuous mode [ 1143.805259][T21344] batadv_slave_0: entered promiscuous mode [ 1143.812249][T21344] batadv_slave_0: left promiscuous mode 11:50:36 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) dup(r0) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f00000000c0)={0x0, r1+30000000}, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1143.853594][T21344] batadv0: left promiscuous mode 11:50:36 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x690e}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:36 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8904, &(0x7f0000000000)={'wg2\x00'}) 11:50:36 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r0, 0x29, 0x24, 0x0, 0x0) [ 1144.199296][T21355] batadv0: entered promiscuous mode 11:50:37 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x7, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1144.299251][T21355] batadv_slave_0: entered promiscuous mode [ 1144.306256][T21355] batadv_slave_0: left promiscuous mode 11:50:37 executing program 5: r0 = socket(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 11:50:37 executing program 2: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5, 0x24, 0x4, 0x0, 0x5}, @processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x82}}}}}}}]}}, 0x0) 11:50:37 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000000)={0x89, @local, 0x4e21, 0x9e, 'sh\x00', 0x20, 0x5, 0x3a}, 0x2c) getpeername$inet(r2, &(0x7f0000000040), &(0x7f0000000140)=0x10) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) write$dsp(r0, &(0x7f0000000180)="84a0511bcb754281be56f29b37a7f721bdd9b373d70a11c558ac54133df463b0a3db9ddc56e97c9c9031c1c61ee7c01de5925a990ac97ae27ea034e991585edf07504ee2d4cb2e781b499da3ca03ccc575a08ee7a4757d6c", 0x58) [ 1144.531876][T21355] batadv0: left promiscuous mode 11:50:37 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5452, &(0x7f0000000000)={'wg2\x00'}) [ 1144.646479][T21363] batadv0: entered promiscuous mode [ 1144.682140][T21363] batadv_slave_0: entered promiscuous mode [ 1144.688960][T21363] batadv_slave_0: left promiscuous mode [ 1144.727422][ T27] audit: type=1326 audit(1697457037.506:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21365 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1144.755905][T21371] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20001 11:50:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c}, 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000008100), 0xffffffffffffffff) 11:50:37 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x690f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1144.803000][T21363] batadv0: left promiscuous mode 11:50:37 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000000)=[@acquire_done, @exit_looper, @clear_death], 0x0, 0x0, 0x0}) [ 1145.050869][ T773] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1145.082907][T21376] batadv0: entered promiscuous mode 11:50:38 executing program 5: mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 11:50:38 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x8, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1145.119130][T21376] batadv_slave_0: entered promiscuous mode [ 1145.126056][T21376] batadv_slave_0: left promiscuous mode [ 1145.147077][T21376] batadv0: left promiscuous mode 11:50:38 executing program 3: syz_io_uring_setup(0x49ac, &(0x7f0000000000), &(0x7f0000000080), 0x0) syz_io_uring_setup(0x24f7, &(0x7f0000000740)={0x0, 0xf3a7}, &(0x7f00000007c0), 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x1d53, &(0x7f0000000980), &(0x7f0000000a00), &(0x7f0000000a40)) 11:50:38 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x6910}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1145.399182][T21383] batadv0: entered promiscuous mode [ 1145.418636][T21383] batadv_slave_0: entered promiscuous mode [ 1145.425585][T21383] batadv_slave_0: left promiscuous mode [ 1145.460749][ T773] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1145.473210][ T773] usb 3-1: config 1 has no interface number 1 [ 1145.479541][ T773] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1145.491356][ T773] usb 3-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1145.504547][ T773] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1145.515796][ T773] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1145.525956][ T773] usb 3-1: config 1 interface 0 has no altsetting 1 [ 1145.581692][T21383] batadv0: left promiscuous mode 11:50:38 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@security={'security\x00', 0xe, 0x4, 0x13c8, 0xffffffff, 0x1238, 0x1238, 0x1238, 0xffffffff, 0xffffffff, 0x1380, 0x1380, 0x1380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@local, @private2, [], [], '\x00', 'wg2\x00'}, 0x0, 0x10d8, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1428) 11:50:38 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000000)={0x89, @local, 0x4e21, 0x9e, 'sh\x00', 0x20, 0x5, 0x3a}, 0x2c) (async) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000000)={0x89, @local, 0x4e21, 0x9e, 'sh\x00', 0x20, 0x5, 0x3a}, 0x2c) getpeername$inet(r2, &(0x7f0000000040), &(0x7f0000000140)=0x10) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) write$dsp(r0, &(0x7f0000000180)="84a0511bcb754281be56f29b37a7f721bdd9b373d70a11c558ac54133df463b0a3db9ddc56e97c9c9031c1c61ee7c01de5925a990ac97ae27ea034e991585edf07504ee2d4cb2e781b499da3ca03ccc575a08ee7a4757d6c", 0x58) [ 1145.741058][ T773] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1145.750601][ T773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.758844][ T773] usb 3-1: Product: syz [ 1145.763430][ T773] usb 3-1: Manufacturer: syz [ 1145.768220][ T773] usb 3-1: SerialNumber: syz [ 1145.825600][T21388] batadv0: entered promiscuous mode [ 1145.884580][ T27] audit: type=1326 audit(1697457038.696:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21389 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1145.912772][T21393] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20001 [ 1145.972958][T21394] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20001 [ 1145.973702][T21388] batadv_slave_0: entered promiscuous mode [ 1145.995934][T21388] batadv_slave_0: left promiscuous mode [ 1146.037157][T21388] batadv0: left promiscuous mode [ 1146.340705][ T773] usb 3-1: USB disconnect, device number 72 [ 1146.427267][T21123] udevd[21123]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 11:50:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) 11:50:39 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x9, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x0, 0x0, 0x0, 0x640}, 0x48) 11:50:39 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000300)=[@release], 0x0, 0x0, 0x0}) 11:50:39 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x6911}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 11:50:39 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) open(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000000)={0x89, @local, 0x4e21, 0x9e, 'sh\x00', 0x20, 0x5, 0x3a}, 0x2c) getpeername$inet(r2, &(0x7f0000000040), &(0x7f0000000140)=0x10) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) write$dsp(r0, &(0x7f0000000180)="84a0511bcb754281be56f29b37a7f721bdd9b373d70a11c558ac54133df463b0a3db9ddc56e97c9c9031c1c61ee7c01de5925a990ac97ae27ea034e991585edf07504ee2d4cb2e781b499da3ca03ccc575a08ee7a4757d6c", 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) (async) open(0x0, 0x0, 0x0) (async) pipe(&(0x7f0000000100)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000000)={0x89, @local, 0x4e21, 0x9e, 'sh\x00', 0x20, 0x5, 0x3a}, 0x2c) (async) getpeername$inet(r2, &(0x7f0000000040), &(0x7f0000000140)=0x10) (async) close(r1) (async) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) (async) write$dsp(r0, &(0x7f0000000180)="84a0511bcb754281be56f29b37a7f721bdd9b373d70a11c558ac54133df463b0a3db9ddc56e97c9c9031c1c61ee7c01de5925a990ac97ae27ea034e991585edf07504ee2d4cb2e781b499da3ca03ccc575a08ee7a4757d6c", 0x58) (async) [ 1146.827401][T21397] batadv0: entered promiscuous mode 11:50:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8406f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x10, 0x0, 0x11, 0x0, @empty, 0x0, "bc6a13c816c984"}]}}}}}}}}, 0x0) [ 1146.906173][T21397] batadv_slave_0: entered promiscuous mode [ 1146.913278][T21397] batadv_slave_0: left promiscuous mode 11:50:39 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000000)=@framed={{}, [@cb_func, @func]}, &(0x7f0000000080)='GPL\x00'}, 0x90) [ 1146.963246][ T27] audit: type=1326 audit(1697457039.776:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21403 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59bc27cae9 code=0x0 [ 1147.017414][T21407] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20001 [ 1147.027496][T21397] batadv0: left promiscuous mode [ 1147.108598][T21401] batadv0: entered promiscuous mode 11:50:40 executing program 2: syz_emit_ethernet(0x86, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8406f5", 0x50, 0x6, 0x0, @local, @local, {[@fragment, @srh={0x0, 0x4, 0x4, 0x2, 0x81, 0x0, 0x0, [@mcast1, @private2]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @empty}]}}}}}}}}, 0x0) [ 1147.173238][T21401] batadv_slave_0: entered promiscuous mode [ 1147.180022][T21401] batadv_slave_0: left promiscuous mode 11:50:40 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x5}, {0x6}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={0x0, 0x0, 0x20}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) open(0x0, 0x0, 0x0) [ 1147.238721][T21401] batadv0: left promiscuous mode 11:50:40 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0xa, 0x6900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 1147.271822][T21413] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1147.283629][T21413] ===================================================== [ 1147.291093][T21413] BUG: KMSAN: uninit-value in subflow_check_req+0x1028/0x15d0 [ 1147.298816][T21413] subflow_check_req+0x1028/0x15d0 [ 1147.304283][T21413] subflow_v6_route_req+0x269/0x410 [ 1147.309719][T21413] tcp_conn_request+0x14eb/0x4170 [ 1147.315075][T21413] subflow_v6_conn_request+0x3ee/0x510 [ 1147.320902][T21413] tcp_rcv_state_process+0x2e1/0x4980 [ 1147.326566][T21413] tcp_v6_do_rcv+0x12b8/0x1fd0 [ 1147.331685][T21413] tcp_v6_rcv+0x47f5/0x4fa0 [ 1147.336350][T21413] ip6_protocol_deliver_rcu+0xda6/0x2a60 [ 1147.342386][T21413] ip6_input+0x15d/0x430 [ 1147.346824][T21413] ip6_rcv_finish+0x5db/0x870 [ 1147.351806][T21413] ipv6_rcv+0xda/0x390 [ 1147.356051][T21413] __netif_receive_skb+0x1a6/0x5a0 [ 1147.361513][T21413] netif_receive_skb+0x58/0x660 [ 1147.366543][T21413] tun_rx_batched+0x3ee/0x980 [ 1147.371564][T21413] tun_get_user+0x54c5/0x69c0 [ 1147.376395][T21413] tun_chr_write_iter+0x3af/0x5d0 [ 1147.381736][T21413] vfs_write+0x8ef/0x15c0 [ 1147.386244][T21413] ksys_write+0x20f/0x4c0 [ 1147.390913][T21413] __x64_sys_write+0x93/0xd0 [ 1147.395685][T21413] do_syscall_64+0x41/0xc0 [ 1147.400364][T21413] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1147.406439][T21413] [ 1147.408853][T21413] Local variable mp_opt created at: [ 1147.414317][T21413] subflow_check_req+0x6d/0x15d0 11:50:40 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="8dc9abc2", 0x4}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0}}], 0xfffffffffffffcd9, 0x0) [ 1147.419468][T21413] subflow_v6_route_req+0x269/0x410 [ 1147.425661][T21413] [ 1147.428065][T21413] CPU: 1 PID: 21413 Comm: syz-executor.5 Not tainted 6.6.0-rc6-syzkaller #0 [ 1147.437083][T21413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 1147.447414][T21413] ===================================================== [ 1147.454600][T21413] Disabling lock debugging due to kernel taint [ 1147.460979][T21413] Kernel panic - not syncing: kmsan.panic set ... [ 1147.467494][T21413] CPU: 1 PID: 21413 Comm: syz-executor.5 Tainted: G B 6.6.0-rc6-syzkaller #0 [ 1147.477791][T21413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 1147.487960][T21413] Call Trace: [ 1147.491319][T21413] [ 1147.494331][T21413] dump_stack_lvl+0x1bf/0x240 [ 1147.499170][T21413] dump_stack+0x1e/0x20 [ 1147.503463][T21413] panic+0x4d5/0xc70 [ 1147.507556][T21413] ? add_taint+0x108/0x1a0 [ 1147.512116][T21413] kmsan_report+0x2d0/0x2d0 [ 1147.516778][T21413] ? kmsan_internal_chain_origin+0xba/0xd0 [ 1147.522750][T21413] ? __msan_warning+0x96/0x110 [ 1147.527661][T21413] ? subflow_check_req+0x1028/0x15d0 [ 1147.533133][T21413] ? subflow_v6_route_req+0x269/0x410 [ 1147.538698][T21413] ? tcp_conn_request+0x14eb/0x4170 [ 1147.544057][T21413] ? subflow_v6_conn_request+0x3ee/0x510 [ 1147.549882][T21413] ? tcp_rcv_state_process+0x2e1/0x4980 [ 1147.555587][T21413] ? tcp_v6_do_rcv+0x12b8/0x1fd0 [ 1147.560667][T21413] ? tcp_v6_rcv+0x47f5/0x4fa0 [ 1147.565484][T21413] ? ip6_protocol_deliver_rcu+0xda6/0x2a60 [ 1147.571487][T21413] ? ip6_input+0x15d/0x430 [ 1147.576080][T21413] ? ip6_rcv_finish+0x5db/0x870 [ 1147.581108][T21413] ? ipv6_rcv+0xda/0x390 [ 1147.585517][T21413] ? __netif_receive_skb+0x1a6/0x5a0 [ 1147.590981][T21413] ? netif_receive_skb+0x58/0x660 [ 1147.596156][T21413] ? tun_rx_batched+0x3ee/0x980 [ 1147.601153][T21413] ? tun_get_user+0x54c5/0x69c0 [ 1147.606146][T21413] ? tun_chr_write_iter+0x3af/0x5d0 [ 1147.611515][T21413] ? vfs_write+0x8ef/0x15c0 [ 1147.616176][T21413] ? ksys_write+0x20f/0x4c0 [ 1147.620838][T21413] ? __x64_sys_write+0x93/0xd0 [ 1147.625764][T21413] ? do_syscall_64+0x41/0xc0 [ 1147.630502][T21413] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1147.636729][T21413] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1147.642972][T21413] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1147.649032][T21413] ? kmsan_internal_set_shadow_origin+0x10/0xe0 [ 1147.655456][T21413] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1147.661438][T21413] __msan_warning+0x96/0x110 [ 1147.666173][T21413] subflow_check_req+0x1028/0x15d0 [ 1147.671468][T21413] ? ip6_dst_lookup_flow+0x133/0x170 [ 1147.676940][T21413] ? inet6_csk_route_req+0x302/0x410 [ 1147.682403][T21413] ? tcp_v6_route_req+0x575/0x5d0 [ 1147.687577][T21413] subflow_v6_route_req+0x269/0x410 [ 1147.692965][T21413] ? subflow_v6_req_destructor+0x190/0x190 [ 1147.698967][T21413] tcp_conn_request+0x14eb/0x4170 [ 1147.704169][T21413] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1147.710611][T21413] subflow_v6_conn_request+0x3ee/0x510 [ 1147.716266][T21413] ? subflow_v6_send_synack+0x1d0/0x1d0 [ 1147.722003][T21413] tcp_rcv_state_process+0x2e1/0x4980 [ 1147.727556][T21413] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1147.733571][T21413] ? kmsan_internal_memmove_metadata+0x9a/0x360 [ 1147.739980][T21413] ? tcp_rcv_state_process+0x279/0x4980 [ 1147.745688][T21413] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1147.751660][T21413] tcp_v6_do_rcv+0x12b8/0x1fd0 [ 1147.756685][T21413] tcp_v6_rcv+0x47f5/0x4fa0 [ 1147.761393][T21413] ? tcp_checksum_complete+0x2e0/0x2e0 [ 1147.767001][T21413] ip6_protocol_deliver_rcu+0xda6/0x2a60 [ 1147.772923][T21413] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1147.778923][T21413] ip6_input+0x15d/0x430 [ 1147.783337][T21413] ? ip6_input+0x430/0x430 [ 1147.787928][T21413] ? ipv6_is_mld+0x3a0/0x3a0 [ 1147.792688][T21413] ip6_rcv_finish+0x5db/0x870 [ 1147.797550][T21413] ipv6_rcv+0xda/0x390 [ 1147.801808][T21413] ? net_zcopy_put_abort+0xa0/0xa0 [ 1147.807129][T21413] __netif_receive_skb+0x1a6/0x5a0 [ 1147.812446][T21413] ? ip6_rcv_finish+0x870/0x870 [ 1147.817496][T21413] netif_receive_skb+0x58/0x660 [ 1147.822518][T21413] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1147.828510][T21413] ? tun_rx_batched+0x37c/0x980 [ 1147.833529][T21413] tun_rx_batched+0x3ee/0x980 [ 1147.838351][T21413] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1147.844328][T21413] tun_get_user+0x54c5/0x69c0 [ 1147.849143][T21413] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1147.855591][T21413] tun_chr_write_iter+0x3af/0x5d0 [ 1147.860776][T21413] ? tun_chr_read_iter+0x670/0x670 [ 1147.866046][T21413] vfs_write+0x8ef/0x15c0 [ 1147.870650][T21413] ksys_write+0x20f/0x4c0 [ 1147.875152][T21413] __x64_sys_write+0x93/0xd0 [ 1147.879908][T21413] do_syscall_64+0x41/0xc0 [ 1147.884469][T21413] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1147.890535][T21413] RIP: 0033:0x7f6a9fa7b82f [ 1147.895068][T21413] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1147.914846][T21413] RSP: 002b:00007f6aa07c1090 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1147.923408][T21413] RAX: ffffffffffffffda RBX: 00007f6a9fb9bf80 RCX: 00007f6a9fa7b82f [ 1147.931528][T21413] RDX: 000000000000005e RSI: 00000000200000c0 RDI: 00000000000000c8 [ 1147.939622][T21413] RBP: 00007f6a9fac847a R08: 0000000000000000 R09: 0000000000000000 [ 1147.947714][T21413] R10: 000000000000005e R11: 0000000000000293 R12: 0000000000000000 [ 1147.955794][T21413] R13: 000000000000000b R14: 00007f6a9fb9bf80 R15: 00007f6a9fcbfa48 [ 1147.963905][T21413] [ 1147.967315][T21413] Kernel Offset: disabled [ 1147.971686][T21413] Rebooting in 86400 seconds..