syzkaller login: [ 276.324767][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 276.358840][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 276.429536][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 276.492776][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 276.553559][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:63669' (ECDSA) to the list of known hosts. 1970/01/01 00:05:27 fuzzer started 1970/01/01 00:05:43 dialing manager at localhost:38567 [ 350.287704][ T2025] cgroup: Unknown subsys name 'net' [ 351.215229][ T2025] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:05:50 syscalls: 2818 1970/01/01 00:05:50 code coverage: enabled 1970/01/01 00:05:50 comparison tracing: enabled 1970/01/01 00:05:50 extra coverage: enabled 1970/01/01 00:05:50 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:05:50 setuid sandbox: enabled 1970/01/01 00:05:50 namespace sandbox: enabled 1970/01/01 00:05:50 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:05:50 fault injection: enabled 1970/01/01 00:05:50 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:05:50 net packet injection: enabled 1970/01/01 00:05:50 net device setup: enabled 1970/01/01 00:05:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:05:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:05:50 USB emulation: enabled 1970/01/01 00:05:50 hci packet injection: /dev/vhci does not exist 1970/01/01 00:05:50 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:05:50 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:05:51 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:05:56 fetching corpus: 50, signal 29345/32563 (executing program) 1970/01/01 00:05:59 fetching corpus: 100, signal 40779/45175 (executing program) 1970/01/01 00:06:04 fetching corpus: 149, signal 57265/62208 (executing program) 1970/01/01 00:06:08 fetching corpus: 199, signal 63200/68971 (executing program) 1970/01/01 00:06:10 fetching corpus: 249, signal 67585/74135 (executing program) 1970/01/01 00:06:13 fetching corpus: 298, signal 70872/78252 (executing program) 1970/01/01 00:06:16 fetching corpus: 348, signal 74776/82818 (executing program) 1970/01/01 00:06:19 fetching corpus: 397, signal 81011/89279 (executing program) 1970/01/01 00:06:22 fetching corpus: 447, signal 87149/95573 (executing program) 1970/01/01 00:06:24 fetching corpus: 497, signal 91656/100271 (executing program) 1970/01/01 00:06:27 fetching corpus: 547, signal 95794/104528 (executing program) 1970/01/01 00:06:31 fetching corpus: 597, signal 99346/108287 (executing program) 1970/01/01 00:06:33 fetching corpus: 647, signal 101489/110721 (executing program) 1970/01/01 00:06:35 fetching corpus: 697, signal 103418/112903 (executing program) 1970/01/01 00:06:38 fetching corpus: 747, signal 106357/115873 (executing program) 1970/01/01 00:06:42 fetching corpus: 797, signal 108509/118129 (executing program) 1970/01/01 00:06:44 fetching corpus: 847, signal 111799/121160 (executing program) 1970/01/01 00:06:49 fetching corpus: 897, signal 114584/123798 (executing program) 1970/01/01 00:06:51 fetching corpus: 947, signal 116803/125906 (executing program) 1970/01/01 00:06:53 fetching corpus: 997, signal 118429/127549 (executing program) 1970/01/01 00:06:55 fetching corpus: 1047, signal 120538/129474 (executing program) 1970/01/01 00:06:58 fetching corpus: 1097, signal 122137/131013 (executing program) 1970/01/01 00:07:00 fetching corpus: 1147, signal 123906/132624 (executing program) 1970/01/01 00:07:03 fetching corpus: 1197, signal 125428/133992 (executing program) 1970/01/01 00:07:05 fetching corpus: 1247, signal 127221/135486 (executing program) 1970/01/01 00:07:07 fetching corpus: 1297, signal 128497/136622 (executing program) 1970/01/01 00:07:10 fetching corpus: 1346, signal 129641/137642 (executing program) 1970/01/01 00:07:12 fetching corpus: 1396, signal 130831/138625 (executing program) 1970/01/01 00:07:14 fetching corpus: 1446, signal 132825/140072 (executing program) 1970/01/01 00:07:16 fetching corpus: 1496, signal 134219/141098 (executing program) 1970/01/01 00:07:19 fetching corpus: 1546, signal 135744/142220 (executing program) 1970/01/01 00:07:21 fetching corpus: 1594, signal 136755/143007 (executing program) 1970/01/01 00:07:24 fetching corpus: 1644, signal 138341/144084 (executing program) 1970/01/01 00:07:27 fetching corpus: 1694, signal 139799/145060 (executing program) 1970/01/01 00:07:30 fetching corpus: 1744, signal 141014/145854 (executing program) 1970/01/01 00:07:33 fetching corpus: 1794, signal 142216/146586 (executing program) 1970/01/01 00:07:36 fetching corpus: 1843, signal 143104/147174 (executing program) 1970/01/01 00:07:38 fetching corpus: 1893, signal 143890/147648 (executing program) 1970/01/01 00:07:41 fetching corpus: 1942, signal 145087/148311 (executing program) 1970/01/01 00:07:43 fetching corpus: 1992, signal 146391/149008 (executing program) 1970/01/01 00:07:45 fetching corpus: 2042, signal 147782/149668 (executing program) 1970/01/01 00:07:47 fetching corpus: 2092, signal 148498/150024 (executing program) 1970/01/01 00:07:48 fetching corpus: 2112, signal 149251/150462 (executing program) 1970/01/01 00:07:48 fetching corpus: 2112, signal 149251/150481 (executing program) 1970/01/01 00:07:49 fetching corpus: 2112, signal 149251/150518 (executing program) 1970/01/01 00:07:49 fetching corpus: 2113, signal 149287/150579 (executing program) 1970/01/01 00:07:49 fetching corpus: 2113, signal 149287/150602 (executing program) 1970/01/01 00:07:49 fetching corpus: 2113, signal 149287/150634 (executing program) 1970/01/01 00:07:49 fetching corpus: 2113, signal 149287/150655 (executing program) 1970/01/01 00:07:49 fetching corpus: 2113, signal 149287/150679 (executing program) 1970/01/01 00:07:50 fetching corpus: 2114, signal 149300/150722 (executing program) 1970/01/01 00:07:50 fetching corpus: 2114, signal 149300/150754 (executing program) 1970/01/01 00:07:50 fetching corpus: 2114, signal 149300/150780 (executing program) 1970/01/01 00:07:50 fetching corpus: 2114, signal 149300/150821 (executing program) 1970/01/01 00:07:50 fetching corpus: 2114, signal 149300/150845 (executing program) 1970/01/01 00:07:51 fetching corpus: 2114, signal 149300/150871 (executing program) 1970/01/01 00:07:51 fetching corpus: 2114, signal 149300/150896 (executing program) 1970/01/01 00:07:51 fetching corpus: 2114, signal 149300/150934 (executing program) 1970/01/01 00:07:51 fetching corpus: 2114, signal 149300/150957 (executing program) 1970/01/01 00:07:51 fetching corpus: 2114, signal 149300/150980 (executing program) 1970/01/01 00:07:51 fetching corpus: 2114, signal 149300/151015 (executing program) 1970/01/01 00:07:52 fetching corpus: 2114, signal 149300/151054 (executing program) 1970/01/01 00:07:52 fetching corpus: 2114, signal 149300/151086 (executing program) 1970/01/01 00:07:52 fetching corpus: 2114, signal 149300/151106 (executing program) 1970/01/01 00:07:52 fetching corpus: 2114, signal 149300/151134 (executing program) 1970/01/01 00:07:52 fetching corpus: 2114, signal 149300/151159 (executing program) 1970/01/01 00:07:52 fetching corpus: 2114, signal 149300/151181 (executing program) 1970/01/01 00:07:52 fetching corpus: 2114, signal 149300/151206 (executing program) 1970/01/01 00:07:53 fetching corpus: 2114, signal 149300/151246 (executing program) 1970/01/01 00:07:53 fetching corpus: 2114, signal 149300/151283 (executing program) 1970/01/01 00:07:53 fetching corpus: 2114, signal 149300/151306 (executing program) 1970/01/01 00:07:53 fetching corpus: 2114, signal 149300/151336 (executing program) 1970/01/01 00:07:53 fetching corpus: 2114, signal 149300/151359 (executing program) 1970/01/01 00:07:53 fetching corpus: 2114, signal 149300/151395 (executing program) 1970/01/01 00:07:54 fetching corpus: 2114, signal 149300/151424 (executing program) 1970/01/01 00:07:54 fetching corpus: 2114, signal 149300/151424 (executing program) 1970/01/01 00:09:51 starting 2 fuzzer processes 00:09:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newroute={0x1c, 0x2c, 0x1}, 0x1c}}, 0x0) 00:09:52 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0x8, &(0x7f0000000000), 0x8) [ 623.185174][ T2035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.333498][ T2037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.448427][ T2035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.979594][ T2037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.704514][ T2035] device hsr_slave_0 entered promiscuous mode [ 634.735960][ T2035] device hsr_slave_1 entered promiscuous mode [ 636.387658][ T2037] device hsr_slave_0 entered promiscuous mode [ 636.439056][ T2037] device hsr_slave_1 entered promiscuous mode [ 636.474904][ T2037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 636.479261][ T2037] Cannot create hsr debugfs directory [ 642.834568][ T2035] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 643.044398][ T2035] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 643.174573][ T2035] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 643.347643][ T2035] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 644.549957][ T2037] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 644.665064][ T2037] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 644.906216][ T2037] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 645.095030][ T2037] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 654.841603][ T2035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.196903][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 656.379436][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 657.607744][ T2037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.435989][ T2656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 658.557423][ T2656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 669.449279][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 669.532883][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 669.575181][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 669.615727][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 669.694208][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 669.735148][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 670.305185][ T2026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 670.367639][ T2026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 671.718091][ T2096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 671.769897][ T2096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 671.792473][ T2096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 671.842189][ T2096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 671.884981][ T2096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 671.955719][ T2096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 671.977141][ T2096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 672.219372][ T2026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 672.515033][ T2035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 673.618710][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 673.719918][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 674.553725][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 674.672726][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 674.755618][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 674.775593][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 675.104545][ T2037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 676.575222][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 676.579633][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 702.137463][ T2656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 702.156777][ T2656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 703.419658][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 703.461989][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 709.518101][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 709.574097][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 709.688895][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 709.768116][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 709.809377][ T2035] device veth0_vlan entered promiscuous mode [ 710.832600][ T2035] device veth1_vlan entered promiscuous mode [ 711.059699][ T2656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 711.164655][ T2656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 711.266648][ T2656] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 711.317184][ T2656] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 711.687747][ T2037] device veth0_vlan entered promiscuous mode [ 712.278377][ T2037] device veth1_vlan entered promiscuous mode [ 712.718252][ T2035] device veth0_macvtap entered promiscuous mode [ 712.952532][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 713.032515][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 713.215488][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 713.299860][ T2035] device veth1_macvtap entered promiscuous mode [ 714.324407][ T2026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 714.394031][ T2026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 714.684473][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 714.709032][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 714.788475][ T2037] device veth0_macvtap entered promiscuous mode [ 715.235466][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 715.295874][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 715.328389][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 715.369962][ T2037] device veth1_macvtap entered promiscuous mode [ 715.709781][ T2035] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.725772][ T2035] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.727425][ T2035] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.728994][ T2035] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.503004][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 716.545420][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 717.050066][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 717.082174][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 717.416429][ T2037] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.418855][ T2037] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.426932][ T2037] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.428659][ T2037] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:12:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newroute={0x1c, 0x2c, 0x1}, 0x1c}}, 0x0) 00:12:03 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0x8, &(0x7f0000000000), 0x8) 00:12:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newroute={0x1c, 0x2c, 0x1}, 0x1c}}, 0x0) 00:12:07 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0x8, &(0x7f0000000000), 0x8) 00:12:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newroute={0x1c, 0x2c, 0x1}, 0x1c}}, 0x0) 00:12:10 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0x8, &(0x7f0000000000), 0x8) 00:12:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_deladdr={0x40, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x40}}, 0x0) 00:12:14 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = getpid() pidfd_open(r0, 0x0) 00:12:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_deladdr={0x40, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x40}}, 0x0) 00:12:19 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = getpid() pidfd_open(r0, 0x0) 00:12:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_deladdr={0x40, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x40}}, 0x0) 00:12:23 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = getpid() pidfd_open(r0, 0x0) 00:12:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_deladdr={0x40, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x40}}, 0x0) 00:12:27 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = getpid() pidfd_open(r0, 0x0) 00:12:29 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = getpid() pidfd_open(r0, 0x0) 00:12:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0300001100013b8a34b7f8ace25a9c1413a7f98598a3bf15234794dff5838e3d4f332c5ca8266ba16083cc5cff488a4b9ec9f9881ca820000000000000000000000000000000000000c118f2976f4f510d11f206d08e3725d3c3bd28554ec3ad20066daf283205adb98515141ca5f59eb65f465da2505fa7fca154974523591bd19d05d692fa4ec77584a3cae2ad5b"], 0x36c}}, 0x0) 00:12:33 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = getpid() pidfd_open(r0, 0x0) [ 755.023867][ T2757] netlink: 652 bytes leftover after parsing attributes in process `syz-executor.1'. 00:12:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0300001100013b8a34b7f8ace25a9c1413a7f98598a3bf15234794dff5838e3d4f332c5ca8266ba16083cc5cff488a4b9ec9f9881ca820000000000000000000000000000000000000c118f2976f4f510d11f206d08e3725d3c3bd28554ec3ad20066daf283205adb98515141ca5f59eb65f465da2505fa7fca154974523591bd19d05d692fa4ec77584a3cae2ad5b"], 0x36c}}, 0x0) 00:12:36 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = getpid() pidfd_open(r0, 0x0) [ 757.900114][ T2761] netlink: 652 bytes leftover after parsing attributes in process `syz-executor.1'. 00:12:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0300001100013b8a34b7f8ace25a9c1413a7f98598a3bf15234794dff5838e3d4f332c5ca8266ba16083cc5cff488a4b9ec9f9881ca820000000000000000000000000000000000000c118f2976f4f510d11f206d08e3725d3c3bd28554ec3ad20066daf283205adb98515141ca5f59eb65f465da2505fa7fca154974523591bd19d05d692fa4ec77584a3cae2ad5b"], 0x36c}}, 0x0) 00:12:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32, @ANYBLOB="0800090094"], 0x24}}, 0x0) [ 761.548104][ T2765] netlink: 652 bytes leftover after parsing attributes in process `syz-executor.1'. 00:12:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0300001100013b8a34b7f8ace25a9c1413a7f98598a3bf15234794dff5838e3d4f332c5ca8266ba16083cc5cff488a4b9ec9f9881ca820000000000000000000000000000000000000c118f2976f4f510d11f206d08e3725d3c3bd28554ec3ad20066daf283205adb98515141ca5f59eb65f465da2505fa7fca154974523591bd19d05d692fa4ec77584a3cae2ad5b"], 0x36c}}, 0x0) 00:12:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32, @ANYBLOB="0800090094"], 0x24}}, 0x0) [ 764.337387][ T2770] netlink: 652 bytes leftover after parsing attributes in process `syz-executor.1'. 00:12:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32, @ANYBLOB="0800090094"], 0x24}}, 0x0) 00:12:45 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd2(0x0, 0x0) 00:12:47 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd2(0x0, 0x0) 00:12:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32, @ANYBLOB="0800090094"], 0x24}}, 0x0) 00:12:50 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd2(0x0, 0x0) 00:12:52 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd2(0x0, 0x0) 00:12:54 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd2(0x0, 0x0) 00:12:55 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd2(0x0, 0x0) 00:12:59 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x10049, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 00:13:00 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd2(0x0, 0x0) [ 783.614904][ T2789] ======================================================= [ 783.614904][ T2789] WARNING: The mand mount option has been deprecated and [ 783.614904][ T2789] and is ignored by this kernel. Remove the mand [ 783.614904][ T2789] option from the mount to silence this warning. [ 783.614904][ T2789] ======================================================= 00:13:04 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x10049, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 00:13:05 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x10049, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 00:13:09 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x10049, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 00:13:09 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x10049, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 00:13:13 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x10049, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 00:13:13 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x10049, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 00:13:19 executing program 0: r0 = fanotify_init(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe64e1, 0x0) fanotify_mark(r0, 0x11, 0x1028, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:13:19 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x4, &(0x7f0000000640)=@framed={{}, [@alu={0x6, 0x0, 0x3}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) [ 802.578410][ T27] audit: type=1804 audit(801.500:2): pid=2807 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1332973417/syzkaller.DY90aU/21/file0" dev="vda" ino=644 res=1 errno=0 [ 802.915718][ T27] audit: type=1804 audit(801.850:3): pid=2807 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1332973417/syzkaller.DY90aU/21/file0" dev="vda" ino=644 res=1 errno=0 00:13:22 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x4, &(0x7f0000000640)=@framed={{}, [@alu={0x6, 0x0, 0x3}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 00:13:23 executing program 0: r0 = fanotify_init(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe64e1, 0x0) fanotify_mark(r0, 0x11, 0x1028, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:13:25 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x4, &(0x7f0000000640)=@framed={{}, [@alu={0x6, 0x0, 0x3}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) [ 806.658055][ T27] audit: type=1804 audit(805.600:4): pid=2811 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1332973417/syzkaller.DY90aU/22/file0" dev="vda" ino=635 res=1 errno=0 [ 806.868343][ T27] audit: type=1804 audit(805.810:5): pid=2811 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1332973417/syzkaller.DY90aU/22/file0" dev="vda" ino=635 res=1 errno=0 00:13:27 executing program 0: r0 = fanotify_init(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe64e1, 0x0) fanotify_mark(r0, 0x11, 0x1028, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:13:27 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x4, &(0x7f0000000640)=@framed={{}, [@alu={0x6, 0x0, 0x3}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) [ 810.457158][ T27] audit: type=1804 audit(809.390:6): pid=2816 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1332973417/syzkaller.DY90aU/23/file0" dev="vda" ino=643 res=1 errno=0 [ 810.564857][ T27] audit: type=1804 audit(809.500:7): pid=2816 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1332973417/syzkaller.DY90aU/23/file0" dev="vda" ino=643 res=1 errno=0 00:13:30 executing program 0: r0 = fanotify_init(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe64e1, 0x0) fanotify_mark(r0, 0x11, 0x1028, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:13:33 executing program 1: r0 = fanotify_init(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe64e1, 0x0) fanotify_mark(r0, 0x11, 0x1028, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 814.221856][ T27] audit: type=1804 audit(813.160:8): pid=2819 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1332973417/syzkaller.DY90aU/24/file0" dev="vda" ino=640 res=1 errno=0 [ 814.341647][ T27] audit: type=1804 audit(813.280:9): pid=2819 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1332973417/syzkaller.DY90aU/24/file0" dev="vda" ino=640 res=1 errno=0 [ 815.913928][ T27] audit: type=1804 audit(814.850:10): pid=2821 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir3205092458/syzkaller.j5sJa0/24/file0" dev="vda" ino=645 res=1 errno=0 [ 816.501640][ T27] audit: type=1804 audit(815.440:11): pid=2821 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir3205092458/syzkaller.j5sJa0/24/file0" dev="vda" ino=645 res=1 errno=0 00:13:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 00:13:38 executing program 1: r0 = fanotify_init(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe64e1, 0x0) fanotify_mark(r0, 0x11, 0x1028, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:13:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) [ 820.878826][ T27] audit: type=1804 audit(819.820:12): pid=2825 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir3205092458/syzkaller.j5sJa0/25/file0" dev="vda" ino=640 res=1 errno=0 [ 820.933416][ T27] audit: type=1804 audit(819.870:13): pid=2825 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir3205092458/syzkaller.j5sJa0/25/file0" dev="vda" ino=640 res=1 errno=0 00:13:40 executing program 1: r0 = fanotify_init(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe64e1, 0x0) fanotify_mark(r0, 0x11, 0x1028, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:13:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) [ 824.293192][ T27] audit: type=1804 audit(823.230:14): pid=2829 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir3205092458/syzkaller.j5sJa0/26/file0" dev="vda" ino=640 res=1 errno=0 [ 824.427581][ T27] audit: type=1804 audit(823.370:15): pid=2829 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir3205092458/syzkaller.j5sJa0/26/file0" dev="vda" ino=640 res=1 errno=0 00:13:45 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_group_source_req(r0, 0x0, 0x21, &(0x7f0000002400)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) 00:13:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 00:13:48 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_group_source_req(r0, 0x0, 0x21, &(0x7f0000002400)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) 00:13:50 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_group_source_req(r0, 0x0, 0x21, &(0x7f0000002400)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) 00:13:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x1411, 0x1}, 0x10}}, 0x0) 00:13:53 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_group_source_req(r0, 0x0, 0x21, &(0x7f0000002400)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) 00:13:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x1411, 0x1}, 0x10}}, 0x0) 00:13:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, &(0x7f0000001340)) 00:13:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x1411, 0x1}, 0x10}}, 0x0) 00:13:58 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, &(0x7f0000001340)) 00:13:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x1411, 0x1}, 0x10}}, 0x0) 00:14:01 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, &(0x7f0000001340)) 00:14:03 executing program 0: ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) [ 845.434991][ T2857] ptrace attach of "/syz-executor.0 exec"[2035] was attempted by "/syz-executor.0 exec"[2857] 00:14:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, &(0x7f0000001340)) 00:14:06 executing program 0: ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) [ 848.528227][ T2861] ptrace attach of "/syz-executor.0 exec"[2035] was attempted by "/syz-executor.0 exec"[2861] 00:14:09 executing program 0: ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 00:14:09 executing program 1: ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) [ 851.306428][ T2864] ptrace attach of "/syz-executor.1 exec"[2037] was attempted by "/syz-executor.1 exec"[2864] [ 851.819098][ T2865] ptrace attach of "/syz-executor.0 exec"[2035] was attempted by "/syz-executor.0 exec"[2865] 00:14:11 executing program 1: ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 00:14:12 executing program 0: ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) [ 854.301490][ T2867] ptrace attach of "/syz-executor.1 exec"[2037] was attempted by "/syz-executor.1 exec"[2867] [ 855.279226][ T2870] ptrace attach of "/syz-executor.0 exec"[2035] was attempted by "/syz-executor.0 exec"[2870] 00:14:14 executing program 1: ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 00:14:15 executing program 0: ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) [ 857.516590][ T2873] ptrace attach of "/syz-executor.1 exec"[2037] was attempted by "/syz-executor.1 exec"[2873] [ 857.927600][ T2874] ptrace attach of "/syz-executor.0 exec"[2035] was attempted by "/syz-executor.0 exec"[2874] 00:14:17 executing program 1: ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 00:14:18 executing program 0: ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) [ 860.776306][ T2877] ptrace attach of "/syz-executor.1 exec"[2037] was attempted by "/syz-executor.1 exec"[2877] [ 861.158630][ T2878] ptrace attach of "/syz-executor.0 exec"[2035] was attempted by "/syz-executor.0 exec"[2878] 00:14:21 executing program 1: ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 00:14:21 executing program 0: ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) [ 864.167237][ T2881] ptrace attach of "/syz-executor.0 exec"[2035] was attempted by "/syz-executor.0 exec"[2881] [ 864.614038][ T2882] ptrace attach of "/syz-executor.1 exec"[2037] was attempted by "/syz-executor.1 exec"[2882] 00:14:24 executing program 1: ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 00:14:24 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000100)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r1) [ 866.868759][ T2885] ptrace attach of "/syz-executor.1 exec"[2037] was attempted by "/syz-executor.1 exec"[2885] 00:14:27 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000100)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r1) 00:14:28 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000100)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r1) 00:14:30 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000100)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r1) 00:14:31 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000100)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r1) 00:14:33 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000100)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r1) 00:14:35 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000100)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r1) 00:14:40 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000100)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r1) 00:14:43 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x0, 0x0, 0x1}]}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:14:44 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000100)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r1) 00:14:46 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x0, 0x0, 0x1}]}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:14:48 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000100)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r1) 00:14:51 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x0, 0x0, 0x1}]}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:14:56 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x0, 0x0, 0x1}]}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:14:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x2c}}, 0x0) 00:15:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x2c}}, 0x0) 00:15:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x2c}}, 0x0) 00:15:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x2c}}, 0x0) 00:15:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x2c}}, 0x0) 00:15:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x2c}}, 0x0) 00:15:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x2c}}, 0x0) 00:15:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x2c}}, 0x0) 00:15:21 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x2, 0x0, &(0x7f0000000200)) 00:15:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x2c}}, 0x0) 00:15:25 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x2, 0x0, &(0x7f0000000200)) 00:15:29 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x2, 0x0, &(0x7f0000000200)) 00:15:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x2c}}, 0x0) 00:15:31 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x2, 0x0, &(0x7f0000000200)) 00:15:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x20, 0x4f, 0x1}, 0x20}}, 0x0) [ 937.108994][ T2950] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 00:15:36 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='geneve1\x00', 0x10) sendto$inet(r0, &(0x7f0000000200)='u', 0xffec, 0xc0fe, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) 00:15:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x20, 0x4f, 0x1}, 0x20}}, 0x0) 00:15:39 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='geneve1\x00', 0x10) sendto$inet(r0, &(0x7f0000000200)='u', 0xffec, 0xc0fe, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) [ 940.429483][ T2954] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 00:15:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x20, 0x4f, 0x1}, 0x20}}, 0x0) [ 943.484475][ T2958] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 00:15:42 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='geneve1\x00', 0x10) sendto$inet(r0, &(0x7f0000000200)='u', 0xffec, 0xc0fe, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) 00:15:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x20, 0x4f, 0x1}, 0x20}}, 0x0) [ 946.364126][ T2962] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 00:15:48 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x4, 0x9, 0x9}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, r0}, 0x38) 00:15:48 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='geneve1\x00', 0x10) sendto$inet(r0, &(0x7f0000000200)='u', 0xffec, 0xc0fe, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) 00:15:49 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x4, 0x9, 0x9}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, r0}, 0x38) 00:15:53 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x4, 0x9, 0x9}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, r0}, 0x38) 00:15:54 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) 00:15:57 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x4, 0x9, 0x9}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, r0}, 0x38) 00:15:58 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) 00:16:00 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) 00:16:02 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) 00:16:04 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) 00:16:06 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) 00:16:08 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) 00:16:12 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) 00:16:15 executing program 1: keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x79) 00:16:17 executing program 1: keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x79) 00:16:17 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) 00:16:19 executing program 1: keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x79) 00:16:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) 00:16:23 executing program 1: keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x79) 00:16:28 executing program 0: setgid(0xee01) 00:16:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) 00:16:30 executing program 0: setgid(0xee01) 00:16:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) 00:16:32 executing program 0: setgid(0xee01) 00:16:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) 00:16:35 executing program 0: setgid(0xee01) 00:16:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) 00:16:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) 00:16:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/169, 0xa9}], 0x1, 0x0, 0x0, 0x0) 00:16:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) 00:16:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/169, 0xa9}], 0x1, 0x0, 0x0, 0x0) 00:16:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) 00:16:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/169, 0xa9}], 0x1, 0x0, 0x0, 0x0) 00:16:49 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)="51c8988b", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@tclass={{0x14, 0x29, 0x43, 0xfffffffc}}], 0x18}}], 0x2, 0x0) 00:16:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/169, 0xa9}], 0x1, 0x0, 0x0, 0x0) 00:16:51 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)="51c8988b", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@tclass={{0x14, 0x29, 0x43, 0xfffffffc}}], 0x18}}], 0x2, 0x0) 00:16:54 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)="51c8988b", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@tclass={{0x14, 0x29, 0x43, 0xfffffffc}}], 0x18}}], 0x2, 0x0) 00:16:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@delnexthop={0x20, 0x69, 0x1, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 00:16:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@delnexthop={0x20, 0x69, 0x1, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 00:17:00 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)="51c8988b", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@tclass={{0x14, 0x29, 0x43, 0xfffffffc}}], 0x18}}], 0x2, 0x0) 00:17:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@delnexthop={0x20, 0x69, 0x1, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 00:17:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@delnexthop={0x20, 0x69, 0x1, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 00:17:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@delnexthop={0x20, 0x69, 0x1, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 00:17:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@delnexthop={0x20, 0x69, 0x1, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 00:17:15 executing program 1: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) 00:17:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@delnexthop={0x20, 0x69, 0x1, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 00:17:18 executing program 1: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) 00:17:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x0, 0x0}) 00:17:21 executing program 1: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) 00:17:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x0, 0x0}) 00:17:24 executing program 1: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) 00:17:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x0, 0x0}) 00:17:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x0, 0x0}) 00:17:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x0, 0x0}) 00:17:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x0, 0x0}) 00:17:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6, 0x1, 0xa}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}]}]}, 0x74}}, 0x0) 00:17:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x0, 0x0}) 00:17:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6, 0x1, 0xa}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}]}]}, 0x74}}, 0x0) 00:17:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6, 0x1, 0xa}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}]}]}, 0x74}}, 0x0) 00:17:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6, 0x1, 0xa}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}]}]}, 0x74}}, 0x0) 00:17:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6, 0x1, 0xa}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}]}]}, 0x74}}, 0x0) 00:17:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6, 0x1, 0xa}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}]}]}, 0x74}}, 0x0) 00:17:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6, 0x1, 0xa}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}]}]}, 0x74}}, 0x0) 00:17:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r0, 0x540f, 0xea007) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0xc, 0x1e, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8}}]}, 0x28}}, 0x0) [ 1069.624163][ T3113] netlink: 'syz-executor.0': attribute type 30 has an invalid length. 00:17:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat6\x00') pread64(r0, &(0x7f0000000180)=""/52, 0x34, 0x5) 00:17:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r0, 0x540f, 0xea007) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0xc, 0x1e, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8}}]}, 0x28}}, 0x0) 00:17:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat6\x00') pread64(r0, &(0x7f0000000180)=""/52, 0x34, 0x5) [ 1073.134713][ T3118] netlink: 'syz-executor.0': attribute type 30 has an invalid length. 00:17:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r0, 0x540f, 0xea007) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0xc, 0x1e, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8}}]}, 0x28}}, 0x0) 00:17:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat6\x00') pread64(r0, &(0x7f0000000180)=""/52, 0x34, 0x5) [ 1075.899073][ T3122] netlink: 'syz-executor.0': attribute type 30 has an invalid length. 00:17:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r0, 0x540f, 0xea007) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0xc, 0x1e, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8}}]}, 0x28}}, 0x0) 00:17:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat6\x00') pread64(r0, &(0x7f0000000180)=""/52, 0x34, 0x5) [ 1078.859011][ T3126] netlink: 'syz-executor.0': attribute type 30 has an invalid length. 00:18:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat6\x00') pread64(r0, &(0x7f0000000180)=""/52, 0x34, 0x5) 00:18:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r0, 0x540f, 0xea007) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0xc, 0x1e, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8}}]}, 0x28}}, 0x0) 00:18:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat6\x00') pread64(r0, &(0x7f0000000180)=""/52, 0x34, 0x5) [ 1085.367812][ T3132] netlink: 'syz-executor.1': attribute type 30 has an invalid length. 00:18:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r0, 0x540f, 0xea007) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0xc, 0x1e, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8}}]}, 0x28}}, 0x0) 00:18:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat6\x00') pread64(r0, &(0x7f0000000180)=""/52, 0x34, 0x5) [ 1088.165720][ T3136] netlink: 'syz-executor.1': attribute type 30 has an invalid length. 00:18:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r0, 0x540f, 0xea007) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0xc, 0x1e, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8}}]}, 0x28}}, 0x0) [ 1092.736118][ T3140] netlink: 'syz-executor.1': attribute type 30 has an invalid length. 00:18:12 executing program 0: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffb000/0x3000)=nil) 00:18:15 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'veth0_to_hsr\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) 00:18:15 executing program 0: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffb000/0x3000)=nil) 00:18:18 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'veth0_to_hsr\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) 00:18:18 executing program 0: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffb000/0x3000)=nil) 00:18:20 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'veth0_to_hsr\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) 00:18:21 executing program 0: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffb000/0x3000)=nil) 00:18:22 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'veth0_to_hsr\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) 00:18:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x701, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6}]}}}]}, 0x3c}}, 0x0) 00:18:27 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000001a40)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, &(0x7f0000000280)="b7c8e2b704a060f283dbe1ca0d4f58f3743dc94fc422b6f8c7", 0x0}, 0x48) 00:18:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x701, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6}]}}}]}, 0x3c}}, 0x0) 00:18:29 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000001a40)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, &(0x7f0000000280)="b7c8e2b704a060f283dbe1ca0d4f58f3743dc94fc422b6f8c7", 0x0}, 0x48) 00:18:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x701, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6}]}}}]}, 0x3c}}, 0x0) 00:18:32 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000001a40)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, &(0x7f0000000280)="b7c8e2b704a060f283dbe1ca0d4f58f3743dc94fc422b6f8c7", 0x0}, 0x48) 00:18:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x701, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6}]}}}]}, 0x3c}}, 0x0) 00:18:35 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000001a40)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, &(0x7f0000000280)="b7c8e2b704a060f283dbe1ca0d4f58f3743dc94fc422b6f8c7", 0x0}, 0x48) 00:18:38 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000001a40)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, &(0x7f0000000280)="b7c8e2b704a060f283dbe1ca0d4f58f3743dc94fc422b6f8c7", 0x0}, 0x48) 00:18:39 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1080, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') 00:18:41 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000001a40)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, &(0x7f0000000280)="b7c8e2b704a060f283dbe1ca0d4f58f3743dc94fc422b6f8c7", 0x0}, 0x48) 00:18:42 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1080, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') 00:18:43 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000001a40)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, &(0x7f0000000280)="b7c8e2b704a060f283dbe1ca0d4f58f3743dc94fc422b6f8c7", 0x0}, 0x48) 00:18:45 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1080, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') 00:18:47 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1080, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') 00:18:49 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1080, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') 00:18:50 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1080, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') 00:18:52 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1080, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') 00:18:54 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1080, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') 00:18:55 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1080, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') 00:19:00 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1080, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') 00:19:00 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1080, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') 00:19:05 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1080, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') 00:19:09 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "ee8484d3ba53ffd64afc752c48efe6605e27947c703b18dda157815ed8c8430cab1273f2ddec12e10fe66c4ca11bfe7f6316f376b2845b5ee5bf5e6d8a0307d6"}, 0x48, 0xffffffffffffffff) keyctl$read(0xb, r0, 0x0, 0x0) 00:19:11 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1080, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') 00:19:12 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "ee8484d3ba53ffd64afc752c48efe6605e27947c703b18dda157815ed8c8430cab1273f2ddec12e10fe66c4ca11bfe7f6316f376b2845b5ee5bf5e6d8a0307d6"}, 0x48, 0xffffffffffffffff) keyctl$read(0xb, r0, 0x0, 0x0) 00:19:15 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "ee8484d3ba53ffd64afc752c48efe6605e27947c703b18dda157815ed8c8430cab1273f2ddec12e10fe66c4ca11bfe7f6316f376b2845b5ee5bf5e6d8a0307d6"}, 0x48, 0xffffffffffffffff) keyctl$read(0xb, r0, 0x0, 0x0) 00:19:16 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x180000000) 00:19:18 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x180000000) [ 1160.214198][ T1793] Kernel panic - not syncing: corrupted stack end detected inside scheduler [ 1160.217753][ T1793] CPU: 0 PID: 1793 Comm: jbd2/vda-8 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 1160.220613][ T1793] Hardware name: riscv-virtio,qemu (DT) [ 1160.222131][ T1793] Call Trace: [ 1160.223062][ T1793] [] dump_backtrace+0x2e/0x3c [ 1160.224532][ T1793] [] show_stack+0x34/0x40 [ 1160.225875][ T1793] [] dump_stack_lvl+0xe4/0x150 [ 1160.227128][ T1793] [] dump_stack+0x1c/0x24 [ 1160.228306][ T1793] [] panic+0x24a/0x634 [ 1160.229362][ T1793] [] schedule+0x0/0x14c [ 1160.231178][ T1793] [] preempt_schedule_common+0x4e/0xde [ 1160.233107][ T1793] [] preempt_schedule+0x34/0x36 [ 1160.234497][ T1793] [] _raw_read_unlock+0x60/0x6a [ 1160.237414][ T1793] [] ext4_es_lookup_extent+0x2d4/0x904 [ 1160.239060][ T1793] [] ext4_map_blocks+0x168/0xe64 [ 1160.240615][ T1793] [] ext4_iomap_begin+0x54a/0x56e [ 1160.242272][ T1793] [] iomap_iter+0x3be/0xcf6 [ 1160.243751][ T1793] [] iomap_bmap+0x124/0x1e8 [ 1160.245138][ T1793] [] ext4_bmap+0x134/0x22e [ 1160.246641][ T1793] [] bmap+0x5a/0x84 [ 1160.247785][ T1793] [] jbd2_journal_bmap+0xb4/0x18c [ 1160.248961][ T1793] [] jbd2_journal_next_log_block+0xce/0xec [ 1160.250414][ T1793] [] jbd2_journal_get_descriptor_buffer+0x9e/0x2ae [ 1160.252669][ T1793] [] jbd2_journal_write_revoke_records+0x492/0x696 [ 1160.255238][ T1793] [] jbd2_journal_commit_transaction+0x1096/0x4a38 [ 1160.256680][ T1793] [] kjournald2+0x19e/0x614 [ 1160.257822][ T1793] [] kthread+0x19e/0x1fa [ 1160.259021][ T1793] [] ret_from_exception+0x0/0x10 [ 1160.260606][ T1793] SMP: stopping secondary CPUs [ 1160.264578][ T1793] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:10:30 Registers: info registers vcpu 0 pc ffffffff80dc15ca mhartid 0000000000000000 mstatus 00000000000000a0 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000f97e sepc ffffffff801165e0 mcause 0000000000000009 scause 8000000000000009 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80dc15ca x2/sp ffffaf800f7aa8a0 x3/gp ffffffff85863ac0 x4/tp ffffaf800bde0000 x5/t0 ffffffff86bcb657 x6/t1 94e42339f1991100 x7/t2 0000000000000000 x8/s0 ffffaf800f7aa8c0 x9/s1 ffffffff86e58900 x10/a0 ffff8f800066c001 x11/a1 0000000000000007 x12/a2 1ffffffff0dcb129 x13/a3 ffffffff80dc15ca x14/a4 0000000000000000 x15/a5 ffffffff86e58948 x16/a6 ffffffff86e589f1 x17/a7 ffffffff80dcc2ca x18/s2 0000000000000001 x19/s3 ffffaf800f7aa9a0 x20/s4 ffffffff86e58900 x21/s5 0000000000000000 x22/s6 ffffffff86e58950 x23/s7 ffffffff8588c3e0 x24/s8 ffffffff8588c220 x25/s9 ffffffff84a88520 x26/s10 ffffffff858655c0 x27/s11 0000000000000000 x28/t3 fffffffff3f3f300 x29/t4 ffffffff80112282 x30/t5 1ffff5f001ef54c0 x31/t6 ffffffff86bcb657 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff80200f00 mhartid 0000000000000001 mstatus 00000000000000a0 mip 0000000000000080 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000f97e sepc 0000000000053cc0 mcause 0000000000000009 scause 0000000000000008 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff831a264a x2/sp ffffaf800735fa60 x3/gp ffffffff85863ac0 x4/tp ffffaf8009beb080 x5/t0 ffffaf800735fd70 x6/t1 94e42339f1991100 x7/t2 00007fffcc80a1b7 x8/s0 ffffaf800735fa80 x9/s1 ffffffff83629160 x10/a0 ffffffff83629160 x11/a1 0000000000000007 x12/a2 1ffff5f00137d74f x13/a3 ffffffff80112068 x14/a4 0000000000000000 x15/a5 ffffaf8009beba78 x16/a6 0000000000f00000 x17/a7 ffffffff80b08efe x18/s2 ffffffff8343c840 x19/s3 ffffffff86c1a620 x20/s4 ffffaf8009bec080 x21/s5 0000000000001000 x22/s6 ffffffffffffffff x23/s7 ffffaf800def1700 x24/s8 ffffffff86d206c0 x25/s9 ffffffff85889780 x26/s10 1ffff5f000e6bf70 x27/s11 ffffaf805a9f2ad0 x28/t3 fffffffff3f3f300 x29/t4 ffffffff80112282 x30/t5 1ffff5f000e6bf0c x31/t6 0000000000040000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000