EV_CHANGE): hsr_slave_0: link becomes ready [ 2563.689189][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2563.698706][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2563.710565][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2563.742006][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2563.749792][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2563.773509][T10278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2563.873411][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2563.885800][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2563.926212][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2563.936769][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2563.949597][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2563.959210][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2563.971490][T10278] device veth0_vlan entered promiscuous mode [ 2563.997366][T10278] device veth1_vlan entered promiscuous mode [ 2564.040499][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2564.050548][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2564.060517][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2564.070766][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2564.089262][T10278] device veth0_macvtap entered promiscuous mode [ 2564.103841][T10278] device veth1_macvtap entered promiscuous mode [ 2564.138505][T10278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2564.149204][T10278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2564.159355][T10278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2564.170070][T10278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2564.181641][T10278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2564.192376][T10278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2564.202551][T10278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2564.213328][T10278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2564.227687][T10278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2564.235423][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2564.245806][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2564.255548][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2564.265978][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2564.300121][T10278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2564.310876][T10278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2564.320896][T10278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2564.331663][T10278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2564.342264][T10278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2564.353025][T10278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2564.363113][T10278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2564.373822][T10278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2564.388219][T10278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2564.396741][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2564.407231][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2564.705951][ T1303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2564.713971][ T1303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2564.767586][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2564.811041][ T1303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2564.819309][ T1303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2564.828447][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:19:31 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:19:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r1, &(0x7f0000002100)={0x0, 0x0, 0x0}, 0x0) close(r0) sendmsg(r1, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x0) 00:19:31 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002a80)=@bpf_lsm={0x1d, 0x1, &(0x7f0000002800)=@raw=[@func], &(0x7f0000002880)='syzkaller\x00', 0x2, 0xd5, &(0x7f00000028c0)=""/213, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:19:31 executing program 4: bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001380)={0xffffffffffffffff, 0xc0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 00:19:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtfilter={0x2c, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xb}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) 00:19:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000005800)={&(0x7f0000000040)=ANY=[@ANYBLOB="1f000000220001"], 0x24}}, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000001400)=""/1}, {&(0x7f0000001440)=""/95}, {&(0x7f00000014c0)=""/229}], 0x2}}, {{&(0x7f0000000080)=@sco={0x1f, @none}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000100)=""/4092, 0xffc}, {&(0x7f0000001100)=""/24, 0x18}, {&(0x7f0000001140)=""/49, 0xfffffffffffffd42}, {&(0x7f0000001180)=""/155, 0x9b}], 0x4, &(0x7f0000001280)=""/240, 0xf0}}], 0x2, 0x0, 0x0) 00:19:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000080)={0x8}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000005800)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002a0001"], 0x24}}, 0x0) 00:19:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) 00:19:31 executing program 4: bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001380)={0xffffffffffffffff, 0xc0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 00:19:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000100)={0x10}) 00:19:31 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 00:19:32 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x48020200) close(0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f00000018c0)='./file0\x00', &(0x7f0000000380)='hugetlbfs\x00', 0x0, 0x0) unshare(0x8000000) syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket(0x1e, 0x0, 0x81) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @private0, 0x3}, 0x1c) r3 = open(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x4100, 0x11) r4 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x10, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r1) renameat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000000)='./file0\x00') setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x9) [ 2566.540236][T10543] IPVS: ftp: loaded support on port[0] = 21 00:19:32 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:19:32 executing program 2: syz_open_procfs(0x0, &(0x7f0000000340)='pagemap\x00') 00:19:32 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2e, &(0x7f0000000400)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x9) io_submit(r1, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0x790000e0, 0x4, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a31e3fd987a7d49}]) 00:19:32 executing program 4: bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001380)={0xffffffffffffffff, 0xc0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 00:19:33 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 00:19:33 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001380)={r0, 0xc0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 00:19:33 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$int_in(r0, 0x0, 0x0) 00:19:33 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2567.343829][T10544] IPVS: ftp: loaded support on port[0] = 21 [ 2567.547684][ T34] audit: type=1804 audit(1625789973.842:69): pid=10563 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir394613738/syzkaller.9Ay99S/1412/bus" dev="sda1" ino=14045 res=1 errno=0 [ 2567.575903][ T34] audit: type=1800 audit(1625789973.842:70): pid=10563 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=14045 res=0 errno=0 00:19:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) r2 = dup2(r1, r1) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) [ 2567.975120][ T34] audit: type=1804 audit(1625789973.952:71): pid=10564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir394613738/syzkaller.9Ay99S/1412/bus" dev="sda1" ino=14045 res=1 errno=0 [ 2568.002299][ T34] audit: type=1800 audit(1625789973.952:72): pid=10564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=14045 res=0 errno=0 00:19:34 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001380)={r0, 0xc0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 00:19:34 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$setstatus(r0, 0x4, 0x46802) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r1, 0x0) io_setup(0x2e, &(0x7f0000000400)=0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x9) io_submit(r2, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0x790000e0, 0x4, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a31e3fd987a7d49}]) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) 00:19:35 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2e, &(0x7f0000000400)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x9) io_submit(r1, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0x790000e0, 0x4, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a31e3fd987a7d49}]) 00:19:35 executing program 3: perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000001740)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000100)}]) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = getpid() r7 = getpid() kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff, r5}) accept4(r5, 0x0, &(0x7f0000000380), 0x0) bind$inet6(r5, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 00:19:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x48020200) close(0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f00000018c0)='./file0\x00', &(0x7f0000000380)='hugetlbfs\x00', 0x0, 0x0) unshare(0x8000000) syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket(0x1e, 0x0, 0x81) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @private0, 0x3}, 0x1c) r3 = open(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x4100, 0x11) r4 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x10, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r1) renameat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000000)='./file0\x00') setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x9) 00:19:35 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001380)={r0, 0xc0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 00:19:36 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001380)={r0, 0xc0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 00:19:36 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$setstatus(r0, 0x4, 0x46802) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r1, 0x0) io_setup(0x2e, &(0x7f0000000400)=0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x9) io_submit(r2, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0x790000e0, 0x4, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a31e3fd987a7d49}]) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) [ 2570.130292][T10636] IPVS: ftp: loaded support on port[0] = 21 00:19:36 executing program 3: perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000001740)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000100)}]) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = getpid() r7 = getpid() kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff, r5}) accept4(r5, 0x0, &(0x7f0000000380), 0x0) bind$inet6(r5, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 00:19:37 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2e, &(0x7f0000000400)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x9) io_submit(r1, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0x790000e0, 0x4, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a31e3fd987a7d49}]) [ 2572.440845][ T1303] device hsr_slave_0 left promiscuous mode [ 2572.462115][ T1303] device hsr_slave_1 left promiscuous mode [ 2572.473507][ T1303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2572.481715][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2572.503765][ T1303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2572.511455][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2572.523336][ T1303] device bridge_slave_1 left promiscuous mode [ 2572.530575][ T1303] bridge0: port 2(bridge_slave_1) entered disabled state [ 2572.542748][ T1303] device bridge_slave_0 left promiscuous mode [ 2572.549526][ T1303] bridge0: port 1(bridge_slave_0) entered disabled state [ 2572.574647][ T1303] device veth1_macvtap left promiscuous mode [ 2572.580776][ T1303] device veth0_macvtap left promiscuous mode [ 2572.588235][ T1303] device veth1_vlan left promiscuous mode [ 2572.594223][ T1303] device veth0_vlan left promiscuous mode [ 2575.232445][ T1303] team0 (unregistering): Port device team_slave_1 removed [ 2575.255106][ T1303] team0 (unregistering): Port device team_slave_0 removed [ 2575.271121][ T1303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2575.289578][ T1303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2575.365580][ T1303] bond0 (unregistering): Released all slaves [ 2575.434013][T10683] IPVS: ftp: loaded support on port[0] = 21 [ 2575.625538][T10683] chnl_net:caif_netlink_parms(): no params data found [ 2575.743152][T10683] bridge0: port 1(bridge_slave_0) entered blocking state [ 2575.750641][T10683] bridge0: port 1(bridge_slave_0) entered disabled state [ 2575.763683][T10683] device bridge_slave_0 entered promiscuous mode [ 2575.779914][T10683] bridge0: port 2(bridge_slave_1) entered blocking state [ 2575.787909][T10683] bridge0: port 2(bridge_slave_1) entered disabled state [ 2575.797871][T10683] device bridge_slave_1 entered promiscuous mode [ 2575.844449][T10683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2575.868386][T10683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2575.937872][T10683] team0: Port device team_slave_0 added [ 2575.956156][T10683] team0: Port device team_slave_1 added [ 2576.019156][T10683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2576.026354][T10683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2576.052728][T10683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2576.072224][T10683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2576.080055][T10683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2576.106475][T10683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2576.200197][T10683] device hsr_slave_0 entered promiscuous mode [ 2576.210157][T10683] device hsr_slave_1 entered promiscuous mode [ 2576.220600][T10683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2576.228558][T10683] Cannot create hsr debugfs directory [ 2576.420403][T31817] Bluetooth: hci5: command 0x0409 tx timeout [ 2576.669566][T10683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2576.693664][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2576.702864][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2576.723115][T10683] 8021q: adding VLAN 0 to HW filter on device team0 [ 2576.739624][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2576.749590][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2576.759117][ T3253] bridge0: port 1(bridge_slave_0) entered blocking state [ 2576.766635][ T3253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2576.778383][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2576.793694][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2576.803590][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2576.813352][T31817] bridge0: port 2(bridge_slave_1) entered blocking state [ 2576.820943][T31817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2576.841926][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2576.877538][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2576.899735][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2576.909366][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2576.921406][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2576.940689][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2576.951164][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2576.991036][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2577.000944][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2577.018396][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2577.028178][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2577.048110][T10683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2577.126166][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2577.133980][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2577.156607][T10683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2577.288164][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2577.299274][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2577.350284][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2577.360638][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2577.377852][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2577.388740][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2577.420135][T10683] device veth0_vlan entered promiscuous mode [ 2577.441789][T10683] device veth1_vlan entered promiscuous mode [ 2577.493382][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2577.504705][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2577.513694][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2577.523467][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2577.543639][T10683] device veth0_macvtap entered promiscuous mode [ 2577.574842][T10683] device veth1_macvtap entered promiscuous mode [ 2577.610901][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2577.622313][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2577.632521][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2577.643275][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2577.653530][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2577.664284][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2577.674474][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2577.685289][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2577.698062][T10683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2577.706336][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2577.716311][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2577.760524][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2577.771400][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2577.782016][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2577.792638][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2577.802705][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2577.813463][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2577.823491][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2577.834176][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2577.847692][T10683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2577.856230][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2577.866173][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2578.212963][ T405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2578.223172][ T405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2578.235893][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2578.295116][T21429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2578.303063][T21429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2578.311733][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2578.505826][T31817] Bluetooth: hci5: command 0x041b tx timeout [ 2578.589951][T10916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2578.598425][T10916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2578.623370][T10916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2578.637540][T10916] batman_adv: batadv0: Removing interface: batadv_slave_1 00:19:45 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:19:45 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2e, &(0x7f0000000400)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x9) io_submit(r1, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0x790000e0, 0x4, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a31e3fd987a7d49}]) 00:19:45 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001380)={r0, 0xc0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 00:19:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x48020200) close(0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f00000018c0)='./file0\x00', &(0x7f0000000380)='hugetlbfs\x00', 0x0, 0x0) unshare(0x8000000) syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket(0x1e, 0x0, 0x81) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @private0, 0x3}, 0x1c) r3 = open(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x4100, 0x11) r4 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x10, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r1) renameat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000000)='./file0\x00') setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x9) 00:19:45 executing program 3: perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000001740)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000100)}]) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = getpid() r7 = getpid() kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff, r5}) accept4(r5, 0x0, &(0x7f0000000380), 0x0) bind$inet6(r5, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 00:19:45 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$setstatus(r0, 0x4, 0x46802) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r1, 0x0) io_setup(0x2e, &(0x7f0000000400)=0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x9) io_submit(r2, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0x790000e0, 0x4, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a31e3fd987a7d49}]) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) [ 2579.445243][T10931] IPVS: ftp: loaded support on port[0] = 21 00:19:45 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001380)={r0, 0xc0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 00:19:46 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$setstatus(r0, 0x4, 0x46802) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r1, 0x0) io_setup(0x2e, &(0x7f0000000400)=0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x9) io_submit(r2, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0x790000e0, 0x4, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a31e3fd987a7d49}]) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) 00:19:46 executing program 3: perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000001740)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000100)}]) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = getpid() r7 = getpid() kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff, r5}) accept4(r5, 0x0, &(0x7f0000000380), 0x0) bind$inet6(r5, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 00:19:46 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001380)={r0, 0xc0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 00:19:47 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:19:47 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001380)={r0, 0xc0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 00:19:47 executing program 1: pipe2(&(0x7f0000002ac0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) flock(r0, 0x864c1fa5ec1597ad) 00:19:47 executing program 3: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8040) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000140)='bpf_lsm_kernfs_init_security\x00') 00:19:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x48020200) close(0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f00000018c0)='./file0\x00', &(0x7f0000000380)='hugetlbfs\x00', 0x0, 0x0) unshare(0x8000000) syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket(0x1e, 0x0, 0x81) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @private0, 0x3}, 0x1c) r3 = open(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x4100, 0x11) r4 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x10, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r1) renameat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000000)='./file0\x00') setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x9) 00:19:47 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:19:47 executing program 1: perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}, 0x0, 0x0, 0x1}, 0x0) io_setup(0x0, &(0x7f0000000000)=0x0) io_submit(r4, 0x1, &(0x7f0000001740)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) getpid() kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 00:19:47 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140), 0xfd7b) 00:19:48 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001380)={r0, 0xc0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) [ 2581.759753][T10983] IPVS: ftp: loaded support on port[0] = 21 00:19:48 executing program 2: pipe2(&(0x7f0000002ac0)={0xffffffffffffffff}, 0x0) flock(r0, 0x0) 00:19:48 executing program 3: perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xfc, 0x0, 0x62, 0x8c, 0x0, 0x5, 0x14401, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4800, 0x1, @perf_bp={&(0x7f0000000100), 0xc}, 0x1010, 0x1, 0x9, 0x1, 0x80000000, 0x7, 0x4, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x0, r0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000080)) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) 00:19:48 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001380)={r0, 0xc0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 00:19:48 executing program 1: setrlimit(0x0, &(0x7f0000000000)={0x5, 0x7}) 00:19:49 executing program 2: pipe2(&(0x7f0000002ac0)={0xffffffffffffffff}, 0x0) close(r0) 00:19:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x12000000, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_newaddr={0x34, 0x14, 0x5a84ae7d9c6b7621, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_FLAGS={0x8}]}, 0x34}}, 0x0) 00:19:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x89fd, &(0x7f0000000340)="8fff4d27a93571a90f") 00:19:49 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001380)={r0, 0xc0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) [ 2584.700254][T21429] device hsr_slave_0 left promiscuous mode [ 2584.711234][T21429] device hsr_slave_1 left promiscuous mode [ 2584.720382][T21429] device bridge_slave_1 left promiscuous mode [ 2584.727338][T21429] bridge0: port 2(bridge_slave_1) entered disabled state [ 2584.751899][T21429] device bridge_slave_0 left promiscuous mode [ 2584.758412][T21429] bridge0: port 1(bridge_slave_0) entered disabled state [ 2584.777695][T21429] device veth1_macvtap left promiscuous mode [ 2584.783738][T21429] device veth0_macvtap left promiscuous mode [ 2584.790064][T21429] device veth1_vlan left promiscuous mode [ 2584.796120][T21429] device veth0_vlan left promiscuous mode [ 2587.108264][T21429] team0 (unregistering): Port device team_slave_1 removed [ 2587.122931][T21429] team0 (unregistering): Port device team_slave_0 removed [ 2587.169552][T21429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2587.233791][T21429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2587.376637][T21429] bond0 (unregistering): Released all slaves [ 2587.448077][T11052] IPVS: ftp: loaded support on port[0] = 21 [ 2587.660159][T11052] chnl_net:caif_netlink_parms(): no params data found [ 2587.760152][T11052] bridge0: port 1(bridge_slave_0) entered blocking state [ 2587.767759][T11052] bridge0: port 1(bridge_slave_0) entered disabled state [ 2587.777651][T11052] device bridge_slave_0 entered promiscuous mode [ 2587.788811][T11052] bridge0: port 2(bridge_slave_1) entered blocking state [ 2587.796166][T11052] bridge0: port 2(bridge_slave_1) entered disabled state [ 2587.806005][T11052] device bridge_slave_1 entered promiscuous mode [ 2587.880827][T11052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2587.904851][T11052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2588.005359][T11052] team0: Port device team_slave_0 added [ 2588.022844][T11052] team0: Port device team_slave_1 added [ 2588.078699][T11052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2588.085937][T11052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2588.112931][T11052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2588.137347][T11052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2588.144592][T11052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2588.172151][T11052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2588.254760][T11052] device hsr_slave_0 entered promiscuous mode [ 2588.267735][T11052] device hsr_slave_1 entered promiscuous mode [ 2588.277659][T11052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2588.285514][T11052] Cannot create hsr debugfs directory [ 2588.707221][T11052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2588.731146][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2588.740801][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2588.757932][T11052] 8021q: adding VLAN 0 to HW filter on device team0 [ 2588.775532][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2588.785554][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2588.795852][ T3253] bridge0: port 1(bridge_slave_0) entered blocking state [ 2588.803279][ T3253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2588.814430][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2588.844431][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2588.856139][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2588.865164][ T3253] bridge0: port 2(bridge_slave_1) entered blocking state [ 2588.872375][ T3253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2588.881595][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2588.904987][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2588.934047][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2588.944856][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2588.957575][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2589.000101][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2589.009852][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2589.020613][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2589.030470][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2589.064963][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2589.076319][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2589.091673][T11052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2589.134552][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2589.142288][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2589.168207][T11052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2589.230859][ T8472] Bluetooth: hci5: command 0x0409 tx timeout [ 2589.309001][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2589.318901][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2589.360595][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2589.370387][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2589.389453][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2589.398852][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2589.410410][T11052] device veth0_vlan entered promiscuous mode [ 2589.445069][T11052] device veth1_vlan entered promiscuous mode [ 2589.488873][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2589.498514][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2589.507868][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2589.517748][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2589.546477][T11052] device veth0_macvtap entered promiscuous mode [ 2589.571101][T11052] device veth1_macvtap entered promiscuous mode [ 2589.624857][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2589.635594][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2589.645778][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2589.656527][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2589.666612][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2589.677260][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2589.688587][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2589.699948][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2589.713872][T11052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2589.724305][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2589.734055][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2589.754873][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2589.765563][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2589.776368][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2589.787057][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2589.797170][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2589.807866][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2589.817939][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2589.828629][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2589.842429][T11052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2589.850713][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2589.860786][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2590.226411][T21427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2590.234820][T21427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2590.261043][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2590.330533][T21427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2590.339167][T21427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2590.349566][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2590.512123][T11283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2590.520409][T11283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2590.536082][T11283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2590.543961][T11283] batman_adv: batadv0: Removing interface: batadv_slave_1 00:19:57 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}, 0x38) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:19:57 executing program 0: r0 = openat$rtc(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1000}}) 00:19:57 executing program 2: r0 = socket(0xa, 0x3, 0x81) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:19:57 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001380)={r0, 0xc0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 00:19:57 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @read_tx_power={{0xc2d, 0x3}}}, 0x7) close(r0) 00:19:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0xf8, 0xf8, 0x0, 0xf8, 0x0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@private, @broadcast, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'team_slave_0\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "590643c6470c84ca885a0175fd6fa1a09f670c797190afb5ab4988a7aa1c"}}, {{@ip={@dev, @private, 0x0, 0x0, 'batadv_slave_0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@empty}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) 00:19:57 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) 00:19:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYBLOB="0201"], 0x804}}, 0x0) 00:19:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$dupfd(r0, 0x406, r0) 00:19:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0xf8, 0xf8, 0x0, 0xf8, 0x0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@private, @broadcast, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'team_slave_0\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "590643c6470c84ca885a0175fd6fa1a09f670c797190afb5ab4988a7aa1c"}}, {{@ip={@dev, @private, 0x0, 0x0, 'batadv_slave_0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@empty}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) 00:19:57 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @loopback}, {0x1, @broadcast}, 0x1e, {0x2, 0x0, @remote}}) 00:19:58 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) 00:19:58 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}, 0x38) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:19:58 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)="5acd0710", 0x4}]) 00:19:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0xf8, 0xf8, 0x0, 0xf8, 0x0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@private, @broadcast, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'team_slave_0\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "590643c6470c84ca885a0175fd6fa1a09f670c797190afb5ab4988a7aa1c"}}, {{@ip={@dev, @private, 0x0, 0x0, 'batadv_slave_0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@empty}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) 00:19:58 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x2) 00:19:58 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) 00:19:58 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @loopback}, {0x1, @broadcast}, 0x1e, {0x2, 0x0, @remote}}) 00:19:58 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001380)={0xffffffffffffffff, 0xc0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 00:19:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0xf8, 0xf8, 0x0, 0xf8, 0x0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@private, @broadcast, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'team_slave_0\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "590643c6470c84ca885a0175fd6fa1a09f670c797190afb5ab4988a7aa1c"}}, {{@ip={@dev, @private, 0x0, 0x0, 'batadv_slave_0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@empty}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) 00:19:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0xee00) r2 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/mnt\x00') 00:19:58 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)="5acd0710", 0x4}]) 00:19:59 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}, 0x38) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:19:59 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001380)={0xffffffffffffffff, 0xc0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) [ 2593.215044][ T3302] Bluetooth: hci0: command 0x0c2d tx timeout 00:19:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)="5acd0710", 0x4}]) 00:19:59 executing program 1: prctl$PR_GET_UNALIGN(0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) listen(0xffffffffffffffff, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x1a, 0x0, 0xbd80}) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f00000001c0)) 00:19:59 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @loopback}, {0x1, @broadcast}, 0x1e, {0x2, 0x0, @remote}}) 00:19:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) timer_create(0x2, 0x0, &(0x7f00000001c0)) timer_delete(0x0) 00:20:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r0, 0x84, 0x9, 0x0, 0x0) 00:20:00 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001380)={0xffffffffffffffff, 0xc0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 00:20:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)="5acd0710", 0x4}]) 00:20:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$bt_l2cap(r0, &(0x7f0000000000), 0xe) 00:20:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r0, 0x84, 0x7, 0x0, 0x0) 00:20:00 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @loopback}, {0x1, @broadcast}, 0x1e, {0x2, 0x0, @remote}}) [ 2595.294290][ T3302] Bluetooth: hci0: command 0x0c2d tx timeout [ 2595.956894][T21492] device hsr_slave_0 left promiscuous mode [ 2595.966714][T21492] device hsr_slave_1 left promiscuous mode [ 2595.979020][T21492] device bridge_slave_1 left promiscuous mode [ 2595.985887][T21492] bridge0: port 2(bridge_slave_1) entered disabled state [ 2596.000515][T21492] device bridge_slave_0 left promiscuous mode [ 2596.007061][T21492] bridge0: port 1(bridge_slave_0) entered disabled state [ 2596.025728][T21492] device veth1_macvtap left promiscuous mode [ 2596.031819][T21492] device veth0_macvtap left promiscuous mode [ 2596.039518][T21492] device veth1_vlan left promiscuous mode [ 2596.045557][T21492] device veth0_vlan left promiscuous mode [ 2598.507623][T21492] team0 (unregistering): Port device team_slave_1 removed [ 2598.523978][T21492] team0 (unregistering): Port device team_slave_0 removed [ 2598.545698][T21492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2598.563419][T21492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2598.640537][T21492] bond0 (unregistering): Released all slaves [ 2598.719594][T11375] IPVS: ftp: loaded support on port[0] = 21 [ 2598.970845][T11375] chnl_net:caif_netlink_parms(): no params data found [ 2599.081246][T11375] bridge0: port 1(bridge_slave_0) entered blocking state [ 2599.089051][T11375] bridge0: port 1(bridge_slave_0) entered disabled state [ 2599.099058][T11375] device bridge_slave_0 entered promiscuous mode [ 2599.113544][T11375] bridge0: port 2(bridge_slave_1) entered blocking state [ 2599.121256][T11375] bridge0: port 2(bridge_slave_1) entered disabled state [ 2599.131629][T11375] device bridge_slave_1 entered promiscuous mode [ 2599.182515][T11375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2599.200542][T11375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2599.252325][T11375] team0: Port device team_slave_0 added [ 2599.266114][T11375] team0: Port device team_slave_1 added [ 2599.312340][T11375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2599.319946][T11375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2599.346492][T11375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2599.365583][T11375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2599.372657][T11375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2599.399168][T11375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2599.465550][T11375] device hsr_slave_0 entered promiscuous mode [ 2599.483455][T11375] device hsr_slave_1 entered promiscuous mode [ 2599.491909][T11375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2599.499994][T11375] Cannot create hsr debugfs directory [ 2599.939502][T11375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2599.963103][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2599.971916][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2599.988959][T11375] 8021q: adding VLAN 0 to HW filter on device team0 [ 2600.003560][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2600.013842][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2600.023843][ T8472] bridge0: port 1(bridge_slave_0) entered blocking state [ 2600.031482][ T8472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2600.046730][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2600.065831][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2600.076091][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2600.085702][ T695] bridge0: port 2(bridge_slave_1) entered blocking state [ 2600.093035][ T695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2600.114379][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2600.133693][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2600.155122][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2600.166077][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2600.189180][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2600.199269][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2600.210254][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2600.237272][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2600.247701][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2600.271820][T11375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2600.286394][T11375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2600.296760][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2600.306516][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2600.351964][T31817] Bluetooth: hci5: command 0x0409 tx timeout [ 2600.353097][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2600.366181][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2600.387602][T11375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2600.498538][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2600.508322][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2600.553709][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2600.563227][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2600.576648][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2600.586216][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2600.606020][T11375] device veth0_vlan entered promiscuous mode [ 2600.628454][T11375] device veth1_vlan entered promiscuous mode [ 2600.680965][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2600.690688][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2600.700825][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2600.710399][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2600.729077][T11375] device veth0_macvtap entered promiscuous mode [ 2600.771383][T11375] device veth1_macvtap entered promiscuous mode [ 2600.798092][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2600.807434][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2600.828257][T11375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2600.839050][T11375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2600.852253][T11375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2600.863673][T11375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2600.873782][T11375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2600.884638][T11375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2600.894744][T11375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2600.905437][T11375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2600.919319][T11375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2600.927401][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2600.938001][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2600.968027][T11375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2600.979125][T11375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2600.989227][T11375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2600.999925][T11375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2601.010130][T11375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2601.020860][T11375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2601.031011][T11375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2601.041726][T11375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2601.056496][T11375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2601.065310][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2601.076018][ T695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2601.341157][ T405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2601.349532][ T405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2601.359362][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2601.550385][ T405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2601.558752][ T405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2601.570204][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2601.676223][T11605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2601.685477][T11605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2601.702343][T11605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2601.710140][T11605] batman_adv: batadv0: Removing interface: batadv_slave_1 00:20:08 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:20:08 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001380)={r0, 0x0, 0x0}, 0x10) 00:20:08 executing program 0: r0 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x24, r0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x24}}, 0x0) 00:20:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x0) 00:20:08 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x2) 00:20:08 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r0, 0x84, 0x72, 0x0, 0x0) 00:20:08 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r0, 0x84, 0x18, 0x0, 0x0) 00:20:08 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001380)={r0, 0x0, 0x0}, 0x10) 00:20:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd}, 0x40) 00:20:08 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r0, 0x84, 0x76, 0x0, 0x0) 00:20:08 executing program 0: r0 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x24, r0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x24}}, 0x0) 00:20:09 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x8914, 0x0) 00:20:09 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:20:09 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000540)={&(0x7f0000000300)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000340)='R', 0x1}], 0x1, &(0x7f0000000500)=[@dstaddrv4={0x18, 0x84, 0x7, @private=0xc0586300}], 0x18}, 0x0) 00:20:09 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='maps\x00') write$FUSE_ATTR(r0, 0x0, 0x0) 00:20:09 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001380)={r0, 0x0, 0x0}, 0x10) 00:20:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x0, 0x6}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)) close(r3) 00:20:09 executing program 2: timerfd_create(0xb, 0x0) [ 2603.438747][ T34] audit: type=1326 audit(1625790009.733:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11642 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=40000003 syscall=403 compat=1 ip=0xf7fdb549 code=0x0 00:20:09 executing program 1: getgroups(0x1, &(0x7f0000000180)=[0xffffffffffffffff]) 00:20:09 executing program 3: keyctl$invalidate(0x15, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000000)='\v', 0x1) 00:20:10 executing program 4: keyctl$negate(0x10, 0x0, 0x0, 0x0) 00:20:10 executing program 2: pipe2$9p(&(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') 00:20:10 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:20:10 executing program 1: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x2, &(0x7f00000009c0)=[{&(0x7f0000000380)="9d", 0x1, 0x36ff}, {&(0x7f0000000540)="89", 0x1}], 0x0, 0x0) [ 2604.239725][ T34] audit: type=1326 audit(1625790010.533:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11642 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=40000003 syscall=403 compat=1 ip=0xf7fdb549 code=0x0 00:20:10 executing program 4: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/73) 00:20:10 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000500), &(0x7f0000000540)=0x4) 00:20:10 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev\x00') mmap$snddsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001, 0x11, r0, 0x0) 00:20:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(&(0x7f00000016c0), 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000001b40), 0xc) 00:20:11 executing program 0: syz_open_dev$loop(&(0x7f00000016c0), 0x0, 0x0) 00:20:11 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 00:20:11 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, r1, r2) 00:20:11 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x0, 0x110010, r0, 0x83000000) 00:20:11 executing program 1: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r0, 0x0) 00:20:11 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) [ 2606.880631][T21427] device hsr_slave_0 left promiscuous mode [ 2606.893502][T21427] device hsr_slave_1 left promiscuous mode [ 2606.903051][T21427] device bridge_slave_1 left promiscuous mode [ 2606.910805][T21427] bridge0: port 2(bridge_slave_1) entered disabled state [ 2606.920781][T21427] device bridge_slave_0 left promiscuous mode [ 2606.927673][T21427] bridge0: port 1(bridge_slave_0) entered disabled state [ 2606.943323][T21427] device veth1_macvtap left promiscuous mode [ 2606.949722][T21427] device veth0_macvtap left promiscuous mode [ 2606.956195][T21427] device veth1_vlan left promiscuous mode [ 2606.962029][T21427] device veth0_vlan left promiscuous mode [ 2609.059057][ T3128] ieee802154 phy0 wpan0: encryption failed: -22 [ 2609.065706][ T3128] ieee802154 phy1 wpan1: encryption failed: -22 [ 2609.340727][T21427] team0 (unregistering): Port device team_slave_1 removed [ 2609.370637][T21427] team0 (unregistering): Port device team_slave_0 removed [ 2609.389658][T21427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2609.407682][T21427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2609.479354][T21427] bond0 (unregistering): Released all slaves [ 2609.543710][T11707] IPVS: ftp: loaded support on port[0] = 21 [ 2609.738735][T11707] chnl_net:caif_netlink_parms(): no params data found [ 2609.892524][T11707] bridge0: port 1(bridge_slave_0) entered blocking state [ 2609.900545][T11707] bridge0: port 1(bridge_slave_0) entered disabled state [ 2609.910363][T11707] device bridge_slave_0 entered promiscuous mode [ 2609.923339][T11707] bridge0: port 2(bridge_slave_1) entered blocking state [ 2609.931460][T11707] bridge0: port 2(bridge_slave_1) entered disabled state [ 2609.941135][T11707] device bridge_slave_1 entered promiscuous mode [ 2610.022733][T11707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2610.045767][T11707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2610.106437][T11707] team0: Port device team_slave_0 added [ 2610.121337][T11707] team0: Port device team_slave_1 added [ 2610.165161][T11707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2610.172306][T11707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2610.198674][T11707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2610.222878][T11707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2610.230804][T11707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2610.257311][T11707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2610.323136][T11707] device hsr_slave_0 entered promiscuous mode [ 2610.333026][T11707] device hsr_slave_1 entered promiscuous mode [ 2610.341964][T11707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2610.350116][T11707] Cannot create hsr debugfs directory [ 2610.737693][T11707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2610.760904][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2610.769701][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2610.790606][T11707] 8021q: adding VLAN 0 to HW filter on device team0 [ 2610.803698][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2610.814585][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2610.823519][ T7106] bridge0: port 1(bridge_slave_0) entered blocking state [ 2610.831058][ T7106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2610.841269][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2610.857641][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2610.867827][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2610.877447][T31817] bridge0: port 2(bridge_slave_1) entered blocking state [ 2610.884972][T31817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2610.907636][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2610.928116][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2610.951529][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2610.962203][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2610.977176][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2610.996536][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2611.007836][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2611.027734][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2611.038031][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2611.061679][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2611.070953][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2611.091899][T11707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2611.128258][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2611.138238][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2611.161776][T11707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2611.214656][ T7106] Bluetooth: hci5: command 0x0409 tx timeout [ 2611.266715][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2611.277240][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2611.321513][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2611.331058][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2611.341997][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2611.351473][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2611.370105][T11707] device veth0_vlan entered promiscuous mode [ 2611.391601][T11707] device veth1_vlan entered promiscuous mode [ 2611.438597][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2611.447912][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2611.457639][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2611.467427][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2611.484411][T11707] device veth0_macvtap entered promiscuous mode [ 2611.503096][T11707] device veth1_macvtap entered promiscuous mode [ 2611.536740][T11707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2611.547734][T11707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2611.558532][T11707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2611.569294][T11707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2611.579549][T11707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2611.590294][T11707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2611.601558][T11707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2611.612483][T11707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2611.627157][T11707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2611.636719][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2611.646638][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2611.656640][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2611.666448][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2611.688510][T11707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2611.699505][T11707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2611.709597][T11707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2611.720328][T11707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2611.730463][T11707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2611.741126][T11707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2611.751329][T11707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2611.761989][T11707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2611.776327][T11707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2611.784862][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2611.795223][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2612.062659][T21427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2612.071130][T21427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2612.132675][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2612.159945][T21493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2612.168268][T21493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2612.178839][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2612.327167][T11938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2612.336540][T11938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2612.352071][T11938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2612.360692][T11938] batman_adv: batadv0: Removing interface: batadv_slave_1 00:20:19 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:20:19 executing program 4: keyctl$negate(0x12, 0x0, 0x0, 0x0) 00:20:19 executing program 2: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) keyctl$invalidate(0x15, r0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r0, 0x0) keyctl$negate(0xd, 0x0, 0x0, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) 00:20:19 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x40, &(0x7f0000000300)={[], [{@context={'context', 0x3d, 'staff_u'}}]}) 00:20:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 00:20:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) [ 2612.902761][T11948] tmpfs: Unknown parameter 'context' [ 2612.952210][T11948] tmpfs: Unknown parameter 'context' 00:20:19 executing program 3: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:20:19 executing program 4: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x8000000000000, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6, 0x7fff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x1, 0x25, 0x0, 0x6, 0xfff, 0x100, 0x0, 0xb3bd, 0xd313}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='limits\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0, 0x0) 00:20:19 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f000000aec0)='net/sockstat\x00') mmap$snddsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 00:20:19 executing program 2: select(0x40, &(0x7f000000b040), &(0x7f000000b080)={0x6}, 0x0, 0x0) 00:20:19 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, 0x0) [ 2613.301954][ T9530] Bluetooth: hci5: command 0x041b tx timeout 00:20:19 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:20:20 executing program 3: remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x0) 00:20:20 executing program 2: r0 = fsopen(&(0x7f0000000080)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x00', &(0x7f0000000100)="f3", 0x1) 00:20:20 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40), 0x18, &(0x7f0000000b80)={&(0x7f0000000040)="0200000000fa4b004e", 0x9}}, 0x0) 00:20:20 executing program 1: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 00:20:20 executing program 0: syz_io_uring_setup(0x15ae, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), 0x0) [ 2614.089706][T11978] mmap: syz-executor.3 (11978) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 00:20:20 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_io_uring_setup(0x15ae, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:20:20 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdc0}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:20:20 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 00:20:20 executing program 4: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x0, 0x0}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000440)) r1 = syz_open_dev$hiddev(&(0x7f0000000480), 0x0, 0x565280) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) gettid() ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000500)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$hiddev(&(0x7f00000005c0), 0xfffffffffffffc00, 0x2c00) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000680)={0x14, 0x0, 0x0}, &(0x7f00000008c0)={0x44, &(0x7f00000006c0)={0x20}, 0x0, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xb0}, &(0x7f0000000780)={0x20, 0x80, 0x1c, {0x0, 0xf90, 0x5, 0x0, 0x8, 0x6, 0x0, 0x1, 0x78b, 0xeb8, 0x0, 0x4}}, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x20, 0x89, 0x2, 0x1}}) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f00000009c0)={0x0, 0x200, 0x1, 0x5, 0x0, 0x2}) syz_usb_connect$cdc_ncm(0x0, 0x93, &(0x7f0000000a00)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x1f, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x20}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7fff, 0x67d, 0x4}, {0x6, 0x24, 0x1a, 0x7, 0x18}, [@mdlm={0x15, 0x24, 0x12, 0x3}, @acm={0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x0, 0x400}, @acm={0x4, 0x24, 0x2, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x9, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3f, 0x6}}}}}}}]}}, 0x0) 00:20:20 executing program 0: ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0xf}}}}}}}]}}, 0x0) 00:20:21 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:20:21 executing program 3: setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x10000}}, &(0x7f0000000100)) 00:20:21 executing program 2: syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x6}}}}}]}}]}}, 0x0) 00:20:21 executing program 1: r0 = io_uring_setup(0xe8, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) [ 2615.144468][ T9530] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2615.250339][ T3253] usb 1-1: new high-speed USB device number 4 using dummy_hcd 00:20:21 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2615.385756][ T9530] usb 5-1: Using ep0 maxpacket: 32 00:20:21 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 2615.494996][ T3253] usb 1-1: Using ep0 maxpacket: 32 [ 2615.507273][ T9530] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 2615.626284][ T3253] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2615.638082][ T3253] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2615.648317][ T3253] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2615.658352][ T3253] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2615.668382][ T3253] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2615.678379][ T3253] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2615.734317][ T3302] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2615.736508][ T9530] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2615.751437][ T9530] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2615.760143][ T9530] usb 5-1: Product: syz [ 2615.764618][ T9530] usb 5-1: Manufacturer: syz [ 2615.769440][ T9530] usb 5-1: SerialNumber: syz 00:20:22 executing program 1: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0xe, 0x9e, {0x9e, 0x2, "33af3b6f5ece8a3b58cf309e079e514f00b5c29679672a6b7c76e06d670d5e1e4e2af32dacfee7046a891cbe5d3a06e7693ce60ce192c290058b6afd57e6053b4bd174a14aa341259f09a66f9ab24af212b6e2b230993b51170a7c8bef486cc4c66c628c355c998a6bf9f46ac68f05667e157e6f576b0942903d3fb564d1524728d4f96e95a15e628a64ad087e41b65fa21f92761287c04971bca7c4"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x44, &(0x7f0000000140)={0x0, 0x13, 0x15, "22c3bfc8c3830f2026cd45cc80713d109fef753c62"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x19}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x39ed, 0x4, 0x3, 0x0, 0x9, 0x0, 0x2, 0xdf2, 0x20, 0x7ff, 0x82, 0x5}}, &(0x7f0000000240)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000280)={0x20, 0x83, 0x2}, &(0x7f00000002c0)={0x20, 0x87, 0x2, 0x40}, &(0x7f0000000300)={0x20, 0x89, 0x2, 0x1}}) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f00000003c0)={0x1, 0x1, 0xfff, 0x3, 0x6, 0x9}) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000400)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000440)) r1 = syz_open_dev$hiddev(&(0x7f0000000480), 0x10001, 0x565280) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000004c0)={0x2, 0x0, 0xb4d, 0x1ff, 0x8, 0x8001}) gettid() ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000500)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$hiddev(&(0x7f00000005c0), 0xfffffffffffffc00, 0x2c00) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f0000000600)={0x40, 0xe, 0x17, {0x17, 0xa, "82ef307d97901f75c9417e860adafda79ba0544851"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x44, &(0x7f00000006c0)={0x20, 0x14, 0x27, "91d36fcffa2767dba6843f65d9f4967bd1c01455883d8f530e73ef0af7de42bdf21054f98f9976"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xb0}, &(0x7f0000000780)={0x20, 0x80, 0x1c, {0x1, 0xf90, 0x5, 0x476, 0x8, 0x6, 0x2a5, 0x1, 0x78b, 0xeb8, 0x39d, 0x4}}, &(0x7f00000007c0)={0x20, 0x85, 0x4, 0xffffffff}, &(0x7f0000000800)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000840)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000880)={0x20, 0x89, 0x2, 0x1}}) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000980)) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f00000009c0)={0x3, 0x200, 0x1, 0x5, 0x8, 0x2}) syz_usb_connect$cdc_ncm(0x0, 0x9b, &(0x7f0000000a00)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x2, 0x1, 0x1f, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x20}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7fff, 0x67d, 0x4}, {0x6, 0x24, 0x1a, 0x7, 0x18}, [@mdlm={0x15, 0x24, 0x12, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x0, 0x40}, @acm={0x4, 0x24, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x1, 0x400}, @acm={0x4, 0x24, 0x2, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x9, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0xf, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3f, 0x6}}}}}}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x310, 0x1f, 0x80, 0x5, 0x20, 0x8}, 0x3c, &(0x7f0000000b00)={0x5, 0xf, 0x3c, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "38d64ffc8e10bd6f22cade58c82a4de9"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x6, 0xff00, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x2, 0x2, 0x20}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x16, 0xce, 0x4}]}, 0x2, [{0x7d, &(0x7f0000000b40)=@string={0x7d, 0x3, "5ddca6207d084a6fa3e0f23468c4c0cd1db9eff4d156ad56fccc985fff5910eee5435e89b9fa956673bcae7399c5270469954f3c13d338a17262997ff710e50f064e9f9ccf1f807e4b38a69657f070755af6d7926bf31067fb83b729d82aea756fccf839fa460deb7282a12051ca7db23752a66c0f1fb12ceb31bb"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x418}}]}) [ 2615.976711][ T3302] usb 3-1: Using ep0 maxpacket: 16 [ 2616.116616][ T3253] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2616.125992][ T3253] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2616.134446][ T3253] usb 1-1: Product: syz [ 2616.138826][ T3253] usb 1-1: Manufacturer: syz [ 2616.143532][ T3253] usb 1-1: SerialNumber: syz [ 2616.145015][ T3302] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2616.367662][ T3302] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2616.377261][ T3302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2616.385599][ T3302] usb 3-1: Product: syz [ 2616.389975][ T3302] usb 3-1: Manufacturer: syz [ 2616.394803][ T3302] usb 3-1: SerialNumber: syz 00:20:22 executing program 4: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x1, 0x0, 0x0, 0x410, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10}, 0x40) 00:20:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r3, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) [ 2616.525157][ T9530] cdc_ncm 5-1:1.0: bind() failure [ 2616.540145][ T9530] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2616.547153][ T9530] cdc_ncm 5-1:1.1: bind() failure [ 2616.725156][ T3302] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 2616.793717][ T9530] usb 5-1: USB disconnect, device number 8 00:20:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000e3ffff05"], 0x28}}, 0x0) [ 2617.014490][ T3253] cdc_ncm 1-1:1.0: bind() failure [ 2617.030009][ T3253] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2617.037246][ T3253] cdc_ncm 1-1:1.1: bind() failure [ 2617.056353][ T7106] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2617.262024][ T3253] usb 1-1: USB disconnect, device number 4 [ 2617.294969][ T7106] usb 2-1: Using ep0 maxpacket: 32 00:20:23 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$rds(0x15, 0x5, 0x0) [ 2617.326049][T31639] usb 3-1: USB disconnect, device number 12 [ 2617.424730][ T7106] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 2617.606028][ T7106] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2617.616122][ T7106] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2617.624543][ T7106] usb 2-1: Product: syz [ 2617.628828][ T7106] usb 2-1: Manufacturer: И [ 2617.633458][ T7106] usb 2-1: SerialNumber: syz 00:20:24 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) [ 2617.716164][T12045] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2617.789514][T12062] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2617.870531][T12068] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2617.882656][T12046] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:24 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)) [ 2618.187668][ T7106] cdc_ncm 2-1:1.0: bind() failure 00:20:24 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) [ 2618.269190][ T7106] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2618.276321][ T7106] cdc_ncm 2-1:1.1: bind() failure [ 2618.408032][ T7106] usb 2-1: USB disconnect, device number 7 [ 2618.423434][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fd, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r0, 0x2) 00:20:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r3, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) [ 2619.499762][T12092] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2620.093125][T11815] device hsr_slave_0 left promiscuous mode [ 2620.112398][T11815] device hsr_slave_1 left promiscuous mode [ 2620.124443][T11815] device bridge_slave_1 left promiscuous mode [ 2620.131161][T11815] bridge0: port 2(bridge_slave_1) entered disabled state [ 2620.141583][T11815] device bridge_slave_0 left promiscuous mode [ 2620.148578][T11815] bridge0: port 1(bridge_slave_0) entered disabled state [ 2620.163033][T11815] device veth1_macvtap left promiscuous mode [ 2620.169423][T11815] device veth0_macvtap left promiscuous mode [ 2620.176708][T11815] device veth1_vlan left promiscuous mode [ 2620.182500][T11815] device veth0_vlan left promiscuous mode [ 2622.630196][T11815] team0 (unregistering): Port device team_slave_1 removed [ 2622.648534][T11815] team0 (unregistering): Port device team_slave_0 removed [ 2622.668366][T11815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2622.689020][T11815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2622.764615][T11815] bond0 (unregistering): Released all slaves [ 2622.824539][T12110] IPVS: ftp: loaded support on port[0] = 21 [ 2623.036137][T12110] chnl_net:caif_netlink_parms(): no params data found [ 2623.141496][T12110] bridge0: port 1(bridge_slave_0) entered blocking state [ 2623.148947][T12110] bridge0: port 1(bridge_slave_0) entered disabled state [ 2623.159177][T12110] device bridge_slave_0 entered promiscuous mode [ 2623.190113][T12110] bridge0: port 2(bridge_slave_1) entered blocking state [ 2623.198259][T12110] bridge0: port 2(bridge_slave_1) entered disabled state [ 2623.208349][T12110] device bridge_slave_1 entered promiscuous mode [ 2623.247818][T12110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2623.262250][T12110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2623.307872][T12110] team0: Port device team_slave_0 added [ 2623.320287][T12110] team0: Port device team_slave_1 added [ 2623.367736][T12110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2623.376057][T12110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2623.402636][T12110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2623.418969][T12110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2623.426229][T12110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2623.453024][T12110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2623.520216][T12110] device hsr_slave_0 entered promiscuous mode [ 2623.531663][T12110] device hsr_slave_1 entered promiscuous mode [ 2623.541605][T12110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2623.549863][T12110] Cannot create hsr debugfs directory [ 2624.059346][T12110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2624.083467][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2624.095252][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2624.110767][T12110] 8021q: adding VLAN 0 to HW filter on device team0 [ 2624.124972][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2624.135515][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2624.144476][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 2624.152120][ T3302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2624.167810][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2624.188867][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2624.200093][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2624.209548][ T9530] bridge0: port 2(bridge_slave_1) entered blocking state [ 2624.217077][ T9530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2624.226679][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2624.251212][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2624.269905][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2624.280827][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2624.291176][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2624.311136][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2624.321398][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2624.340602][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2624.350248][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2624.369653][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2624.379350][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2624.397163][T12110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2624.426508][ T3302] Bluetooth: hci5: command 0x0409 tx timeout [ 2624.461021][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2624.468705][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2624.492048][T12110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2624.596399][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2624.609567][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2624.649835][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2624.659674][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2624.682030][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2624.691293][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2624.710456][T12110] device veth0_vlan entered promiscuous mode [ 2624.735226][T12110] device veth1_vlan entered promiscuous mode [ 2624.778862][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2624.788767][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2624.798719][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2624.812028][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2624.832774][T12110] device veth0_macvtap entered promiscuous mode [ 2624.853600][T12110] device veth1_macvtap entered promiscuous mode [ 2624.876415][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2624.885986][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2624.906624][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2624.918019][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2624.928505][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2624.939239][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2624.949319][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2624.960028][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2624.970103][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2624.980764][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2624.993518][T12110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2625.003995][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2625.014684][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2625.031153][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2625.041858][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2625.052397][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2625.063117][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2625.073377][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2625.084202][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2625.094300][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2625.105030][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2625.119175][T12110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2625.129164][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2625.139678][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2625.388611][T21493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2625.397352][T21493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2625.475691][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2625.486831][ T405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2625.495010][ T405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2625.527950][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2625.646545][T12340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2625.654644][T12340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2625.665309][T12340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2625.672847][T12340] batman_adv: batadv0: Removing interface: batadv_slave_1 00:20:32 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:20:32 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000001100)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000010c0)={&(0x7f0000001080)='sys_exit\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) 00:20:32 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:20:32 executing program 1: syz_io_uring_setup(0x15ae, &(0x7f00000001c0)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:20:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r3, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) 00:20:32 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fd, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r0, 0x2) [ 2626.065963][T12346] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2626.117629][T12352] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:32 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:20:32 executing program 1: sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 00:20:32 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000380), 0x8, 0x0) read$FUSE(r0, 0x0, 0x0) 00:20:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r3, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) [ 2626.924418][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:33 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18}, 0x18) [ 2627.256788][T12377] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:33 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:20:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fd, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r0, 0x2) 00:20:33 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) [ 2627.524374][T23538] usb 2-1: new high-speed USB device number 8 using dummy_hcd 00:20:33 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:20:34 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2627.784224][T23538] usb 2-1: Using ep0 maxpacket: 16 [ 2627.883612][T12392] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:34 executing program 0: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) [ 2627.937895][T23538] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2628.319324][T23538] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2628.328727][T23538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2628.337086][T23538] usb 2-1: Product: syz [ 2628.341451][T23538] usb 2-1: Manufacturer: syz [ 2628.346304][T23538] usb 2-1: SerialNumber: syz 00:20:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fd, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r0, 0x2) [ 2628.447280][T23538] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 2628.481269][T12395] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:35 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) [ 2628.989111][T23538] usb 2-1: USB disconnect, device number 8 00:20:35 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/ext4', 0x698001, 0x0) 00:20:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) 00:20:35 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2629.295960][T12419] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:36 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) fork() [ 2629.877057][T12422] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000002c0)) 00:20:36 executing program 2: openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 00:20:36 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:20:36 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2630.659150][T12440] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2630.939197][T12441] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2631.732926][T11815] device hsr_slave_0 left promiscuous mode [ 2631.757585][T11815] device hsr_slave_1 left promiscuous mode [ 2631.767095][T11815] device bridge_slave_1 left promiscuous mode [ 2631.776623][T11815] bridge0: port 2(bridge_slave_1) entered disabled state [ 2631.795232][T11815] device bridge_slave_0 left promiscuous mode [ 2631.801936][T11815] bridge0: port 1(bridge_slave_0) entered disabled state [ 2631.833360][T11815] device veth1_macvtap left promiscuous mode [ 2631.839886][T11815] device veth0_macvtap left promiscuous mode [ 2631.846212][T11815] device veth1_vlan left promiscuous mode [ 2631.852100][T11815] device veth0_vlan left promiscuous mode [ 2634.351380][T11815] team0 (unregistering): Port device team_slave_1 removed [ 2634.369265][T11815] team0 (unregistering): Port device team_slave_0 removed [ 2634.386602][T11815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2634.403494][T11815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2634.482899][T11815] bond0 (unregistering): Released all slaves [ 2634.548517][T12458] IPVS: ftp: loaded support on port[0] = 21 [ 2634.781034][T12458] chnl_net:caif_netlink_parms(): no params data found [ 2634.896703][T12458] bridge0: port 1(bridge_slave_0) entered blocking state [ 2634.904293][T12458] bridge0: port 1(bridge_slave_0) entered disabled state [ 2634.914021][T12458] device bridge_slave_0 entered promiscuous mode [ 2634.927576][T12458] bridge0: port 2(bridge_slave_1) entered blocking state [ 2634.935581][T12458] bridge0: port 2(bridge_slave_1) entered disabled state [ 2634.945569][T12458] device bridge_slave_1 entered promiscuous mode [ 2634.997583][T12458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2635.016789][T12458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2635.067043][T12458] team0: Port device team_slave_0 added [ 2635.081953][T12458] team0: Port device team_slave_1 added [ 2635.127397][T12458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2635.135090][T12458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2635.162842][T12458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2635.178997][T12458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2635.186641][T12458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2635.213831][T12458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2635.281871][T12458] device hsr_slave_0 entered promiscuous mode [ 2635.292205][T12458] device hsr_slave_1 entered promiscuous mode [ 2635.314386][T12458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2635.322055][T12458] Cannot create hsr debugfs directory [ 2635.760202][T12458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2635.789279][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2635.798416][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2635.816151][T12458] 8021q: adding VLAN 0 to HW filter on device team0 [ 2635.831783][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2635.841513][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2635.851001][T31639] bridge0: port 1(bridge_slave_0) entered blocking state [ 2635.858466][T31639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2635.871031][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2635.895022][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2635.906727][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2635.916129][T31639] bridge0: port 2(bridge_slave_1) entered blocking state [ 2635.923354][T31639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2635.932612][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2635.954619][T31639] Bluetooth: hci5: command 0x0409 tx timeout [ 2635.974889][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2636.004445][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2636.014778][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2636.024502][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2636.033961][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2636.046439][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2636.062606][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2636.073078][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2636.095948][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2636.106158][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2636.124824][T12458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2636.162450][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2636.170308][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2636.201044][T12458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2636.309226][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2636.319763][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2636.362673][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2636.372409][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2636.390553][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2636.399887][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2636.413994][T12458] device veth0_vlan entered promiscuous mode [ 2636.436493][T12458] device veth1_vlan entered promiscuous mode [ 2636.480393][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2636.493073][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2636.502815][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2636.513294][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2636.530624][T12458] device veth0_macvtap entered promiscuous mode [ 2636.546664][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2636.564030][T12458] device veth1_macvtap entered promiscuous mode [ 2636.607758][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2636.618953][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2636.628985][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2636.639719][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2636.649815][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2636.660698][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2636.670845][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2636.681519][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2636.696024][T12458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2636.704899][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2636.715384][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2636.739481][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2636.750502][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2636.760741][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2636.771425][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2636.781772][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2636.792464][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2636.802554][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2636.813245][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2636.827604][T12458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2636.836522][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2636.847101][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2637.128923][T11815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2637.137445][T11815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2637.176264][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2637.249721][T21493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2637.258024][T21493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2637.267851][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2637.367921][T12688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2637.378591][T12688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2637.393448][T12688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2637.401398][T12688] batman_adv: batadv0: Removing interface: batadv_slave_1 00:20:44 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:20:44 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000280)) 00:20:44 executing program 1: io_uring_setup(0x33f5, &(0x7f0000000880)={0x0, 0x0, 0x8}) 00:20:44 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:20:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(r0, 0x0, &(0x7f0000000280)) 00:20:44 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2637.988966][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2638.029727][ T8472] Bluetooth: hci5: command 0x041b tx timeout 00:20:44 executing program 2: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) 00:20:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, @in6=@remote}}, 0xe8) 00:20:44 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:20:44 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) fork() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40001) 00:20:44 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:20:44 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2638.677582][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:45 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 00:20:45 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:20:45 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}}, 0x0) 00:20:45 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:20:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 00:20:45 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 00:20:45 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2639.410247][T12732] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:45 executing program 2: openat$cachefiles(0xffffffffffffff9c, 0x0, 0x404100, 0x0) 00:20:45 executing program 5: inotify_init1(0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:20:45 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2c000, 0x0) 00:20:46 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) [ 2639.687450][T12737] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1230}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 00:20:46 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:20:46 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) write$9p(r0, 0x0, 0x0) [ 2640.023937][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2640.108607][T31639] Bluetooth: hci5: command 0x040f tx timeout 00:20:46 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000000)='*.\')!@\x00', 0x7) 00:20:46 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) [ 2640.358261][T12759] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:46 executing program 5: inotify_init1(0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:20:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb0}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, @in6=@remote}}, 0xe8) 00:20:47 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:20:47 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, 0x0) 00:20:47 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:20:47 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000024c0), 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x20201, 0x0) 00:20:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x4}, 0x0) [ 2641.085474][T12778] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:47 executing program 5: inotify_init1(0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:20:47 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:20:47 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 00:20:47 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:20:47 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x200042, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) 00:20:48 executing program 2: socket$bt_cmtp(0x1f, 0x3, 0x5) [ 2641.830695][T12800] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:48 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:20:48 executing program 0: syz_open_dev$mouse(&(0x7f0000000380), 0x8, 0x10040) 00:20:48 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:20:48 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2642.180909][ T8472] Bluetooth: hci5: command 0x0419 tx timeout 00:20:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001640)=ANY=[], 0x1230}}, 0x0) 00:20:48 executing program 2: getresgid(&(0x7f00000055c0), &(0x7f0000005600), &(0x7f0000005640)) 00:20:49 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:20:49 executing program 0: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x41000000) 00:20:49 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:20:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001640)=ANY=[@ANYBLOB="301200000f0301022cbd7000ffdbdf25050000077b1006800c0034007400000000000000ac876a7032445e295f1399a0b703958b5e0cc624c6c03a95fd415353b8808fa8231e09715cb0114d6f200567e15bf61968d5eef4e36ee40c63451cd48c71bc076ec336ae961482d30e0106eef49593f6804a57b9a3364601d9c51a0c5b23694ec39d65eef7e9f3d716bc623eea795ce5a57d05bae568d5eee5fcc25f5d70ee82a28dff95dc670fc14d7d8d72999cba390ac61bbecdac29284ba23ca09e8e823d30f8981c38b609dda7d39c6f16b7fa567713482e41b1accfb85804e42b534cea972895558735e00b3345650d48d5537d9fb1fbcf9c10b13a80b146c3dcb963780cf6b49c71fbd72edc5bb32a443267108770a00bacf002ae77f1e6f9990c6bcbde1006b2f4"], 0x1230}, 0x1, 0x0, 0x0, 0x40800}, 0x40814) 00:20:49 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:20:49 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x451881, 0x0) 00:20:49 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:20:49 executing program 0: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000008280), 0x40, 0x0) 00:20:49 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:20:49 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) 00:20:50 executing program 2: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 00:20:50 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:20:50 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 00:20:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) [ 2644.180712][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:50 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:20:50 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/ext4', 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}}, 0x0) 00:20:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}, 0x300}, 0x0) 00:20:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:20:51 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:20:51 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:20:51 executing program 5: inotify_init1(0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2645.159287][T12871] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:51 executing program 0: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}}, 0x0) 00:20:51 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000380), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) [ 2645.520499][T12869] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:51 executing program 1: socketpair(0x1d, 0x0, 0x0, &(0x7f00000003c0)) 00:20:52 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:20:52 executing program 0: r0 = socket$inet(0x2, 0x3, 0x7f) getsockopt$inet_mreqsrc(r0, 0x0, 0x0, 0x0, 0x0) 00:20:52 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2646.023177][T12885] can: request_module (can-proto-0) failed. [ 2646.091007][T12885] can: request_module (can-proto-0) failed. 00:20:52 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:20:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x2c, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x2c}}, 0x0) 00:20:52 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:20:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) 00:20:52 executing program 0: socket$inet(0x2, 0x3, 0x7f) [ 2647.212646][T12897] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2648.207571][T21492] device hsr_slave_0 left promiscuous mode [ 2648.219816][T21492] device hsr_slave_1 left promiscuous mode [ 2648.227823][T21492] device bridge_slave_1 left promiscuous mode [ 2648.234599][T21492] bridge0: port 2(bridge_slave_1) entered disabled state [ 2648.243512][T21492] device bridge_slave_0 left promiscuous mode [ 2648.250660][T21492] bridge0: port 1(bridge_slave_0) entered disabled state [ 2648.269461][T21492] device veth1_macvtap left promiscuous mode [ 2648.275663][T21492] device veth0_macvtap left promiscuous mode [ 2648.281756][T21492] device veth1_vlan left promiscuous mode [ 2648.287960][T21492] device veth0_vlan left promiscuous mode [ 2650.547596][T21492] team0 (unregistering): Port device team_slave_1 removed [ 2650.562824][T21492] team0 (unregistering): Port device team_slave_0 removed [ 2650.611799][T21492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2650.645395][T21492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2650.777744][T21492] bond0 (unregistering): Released all slaves [ 2650.973188][T12918] IPVS: ftp: loaded support on port[0] = 21 [ 2651.183517][T12918] chnl_net:caif_netlink_parms(): no params data found [ 2651.312698][T12918] bridge0: port 1(bridge_slave_0) entered blocking state [ 2651.320260][T12918] bridge0: port 1(bridge_slave_0) entered disabled state [ 2651.330463][T12918] device bridge_slave_0 entered promiscuous mode [ 2651.344770][T12918] bridge0: port 2(bridge_slave_1) entered blocking state [ 2651.352101][T12918] bridge0: port 2(bridge_slave_1) entered disabled state [ 2651.361699][T12918] device bridge_slave_1 entered promiscuous mode [ 2651.438881][T12918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2651.456685][T12918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2651.505958][T12918] team0: Port device team_slave_0 added [ 2651.519313][T12918] team0: Port device team_slave_1 added [ 2651.574819][T12918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2651.581875][T12918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2651.608318][T12918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2651.625513][T12918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2651.632727][T12918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2651.662286][T12918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2651.734421][T12918] device hsr_slave_0 entered promiscuous mode [ 2651.748629][T12918] device hsr_slave_1 entered promiscuous mode [ 2651.757121][T12918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2651.765325][T12918] Cannot create hsr debugfs directory [ 2652.209841][T12918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2652.231713][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2652.240398][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2652.260641][T12918] 8021q: adding VLAN 0 to HW filter on device team0 [ 2652.276055][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2652.286008][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2652.295560][ T7106] bridge0: port 1(bridge_slave_0) entered blocking state [ 2652.302958][ T7106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2652.316357][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2652.338487][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2652.349011][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2652.361233][ T7106] bridge0: port 2(bridge_slave_1) entered blocking state [ 2652.368723][ T7106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2652.377956][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2652.397231][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2652.415596][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2652.426617][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2652.454847][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2652.467064][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2652.478133][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2652.488861][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2652.498764][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2652.513063][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2652.523514][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2652.543104][T12918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2652.604384][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2652.612057][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2652.630292][T12918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2652.660150][ T3302] Bluetooth: hci5: command 0x0409 tx timeout [ 2652.734764][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2652.744989][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2652.788296][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2652.798330][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2652.812221][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2652.822076][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2652.838542][T12918] device veth0_vlan entered promiscuous mode [ 2652.864004][T12918] device veth1_vlan entered promiscuous mode [ 2652.911767][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2652.921246][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2652.931170][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2652.941001][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2652.962159][T12918] device veth0_macvtap entered promiscuous mode [ 2652.982221][T12918] device veth1_macvtap entered promiscuous mode [ 2653.018454][T12918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2653.029378][T12918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2653.039440][T12918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2653.050102][T12918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2653.060246][T12918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2653.071056][T12918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2653.081164][T12918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2653.091866][T12918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2653.106778][T12918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2653.115604][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2653.126646][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2653.137012][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2653.147534][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2653.177549][T12918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2653.188303][T12918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2653.199889][T12918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2653.210635][T12918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2653.220821][T12918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2653.231476][T12918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2653.241540][T12918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2653.252271][T12918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2653.266575][T12918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2653.275194][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2653.285773][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2653.597754][T21493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2653.605912][T21493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2653.616805][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2653.743300][T21429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2653.751468][T21429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2653.761889][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2653.852926][T13149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2653.862201][T13149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2653.881050][T13149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2653.889167][T13149] batman_adv: batadv0: Removing interface: batadv_slave_1 00:21:00 executing program 5: inotify_init1(0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:21:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x2c, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x2c}}, 0x0) 00:21:00 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffe, 0x0) 00:21:00 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:21:00 executing program 0: socketpair(0x0, 0x3b562a47d9662685, 0x0, 0x0) 00:21:00 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2654.313682][T13153] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:21:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x2c, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x2c}}, 0x0) 00:21:01 executing program 2: setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) 00:21:01 executing program 0: getresgid(&(0x7f0000000140), 0x0, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000280)=""/4096) 00:21:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2654.735241][ T820] Bluetooth: hci5: command 0x041b tx timeout 00:21:01 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:21:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x2c, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x2c}}, 0x0) [ 2655.169311][T13179] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:01 executing program 5: inotify_init1(0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2655.228827][T13180] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:21:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0xfffffdef}}, 0x0) 00:21:01 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/class/infiniband_verbs', 0x10000, 0x0) 00:21:01 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:21:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:02 executing program 1: sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x2c, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x2c}}, 0x0) [ 2655.801067][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:02 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000040)) [ 2655.913482][T13201] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:21:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x14}, 0x14}}, 0x0) 00:21:02 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:21:02 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:21:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:02 executing program 1: sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x2c, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x2c}}, 0x0) [ 2656.510629][T13214] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:03 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000080)={@private, @multicast2}, 0x8) [ 2656.715095][T13220] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:21:03 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) 00:21:03 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) [ 2656.835696][T31639] Bluetooth: hci5: command 0x040f tx timeout 00:21:03 executing program 1: sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x2c, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x2c}}, 0x0) 00:21:03 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:03 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2657.304529][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:21:03 executing program 0: getresuid(&(0x7f0000005bc0), 0x0, 0x0) 00:21:03 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:21:03 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:04 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x2c, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x2c}}, 0x0) 00:21:04 executing program 2: inotify_add_watch(0xffffffffffffffff, 0x0, 0x400) 00:21:04 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) [ 2657.954586][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:04 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:21:04 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:21:04 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x2c, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x2c}}, 0x0) 00:21:04 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x3}, 0x14}}, 0x0) [ 2658.624046][T13270] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:05 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x2c, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x2c}}, 0x0) [ 2658.904392][ T820] Bluetooth: hci5: command 0x0419 tx timeout 00:21:05 executing program 0: io_uring_setup(0x33f5, &(0x7f0000000880)={0x0, 0x369, 0x0, 0x1, 0x11b}) 00:21:05 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:21:05 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:05 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:21:05 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x25c1, 0x0) 00:21:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, 0x0, 0x0) 00:21:05 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:21:06 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x60}, 0x0) 00:21:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001640)=ANY=[], 0x1230}, 0x1, 0x0, 0x0, 0x40800}, 0x40814) 00:21:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, 0x0, 0x0) 00:21:06 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:21:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:21:06 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:06 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/macvtap', 0x8440, 0x0) 00:21:06 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)) 00:21:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, 0x0, 0x0) 00:21:07 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 00:21:07 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:07 executing program 0: sigaltstack(&(0x7f0000b60000/0x1000)=nil, 0x0) munmap(&(0x7f0000976000/0x400000)=nil, 0x400000) 00:21:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x2c, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x2c}}, 0x0) 00:21:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000240)=@buf={0x50, &(0x7f0000000140)="660ad52a3af775bbf0e43f38c09ead35c55ad10c2fa2672088a925b4616f8201298026aa84dc9dd864edc3a33992cf10e417a5afc8aa0d4b43696dfe083ea98f8d19e62afe478ce346ddbfc6897b670f"}) 00:21:07 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:21:07 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) [ 2661.340799][T13326] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:21:08 executing program 0: syz_emit_ethernet(0x12, &(0x7f0000000080)={@link_local, @dev, @val={@void}}, 0x0) 00:21:08 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)='&', 0x1) 00:21:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 00:21:08 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 00:21:08 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2662.107628][T13350] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:21:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "1f1a33b2755c8ad2", "4420dcd70ef0ce5afb32c780713abfad", "1d624858", "c3475b13d301067f"}, 0x28) 00:21:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 00:21:08 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000cb2000/0x11000)=nil, 0x11000, 0x0, 0x2010, r0, 0x0) 00:21:08 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:08 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) [ 2662.811209][T13373] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:21:09 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x0, @broadcast}, @ethernet={0x0, @local}, 0x7}) 00:21:09 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:21:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000540), 0xc) 00:21:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 00:21:09 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:09 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 00:21:09 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) statx(r2, &(0x7f00000004c0)='./file0\x00', 0x4000, 0x20, &(0x7f0000000600)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000280)=0xc) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x0, {}, 0xfffffffc, 0x0, 0x0, 0x1d, "1dcc79dc871c727f5161ac2a8e4cc9840bf9758bd451be073ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9"}) 00:21:09 executing program 2: madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xe) sigaltstack(&(0x7f0000ef9000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) 00:21:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:21:10 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 00:21:10 executing program 2: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) 00:21:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:21:10 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x40}}, 0x0) [ 2664.461125][T13396] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:21:10 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:21:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:21:11 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x40}}, 0x0) 00:21:11 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:11 executing program 0: madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xf) mlock2(&(0x7f0000ecb000/0x2000)=nil, 0x2000, 0x0) 00:21:11 executing program 2: fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0) move_pages(0x0, 0x227a, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil], &(0x7f0000000140), &(0x7f0000000080), 0x0) 00:21:11 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:21:11 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x40}}, 0x0) 00:21:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x2c, 0x0, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x2c}}, 0x0) 00:21:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2d) getsockopt$inet6_int(r0, 0x29, 0x33, 0x0, &(0x7f0000000000)) 00:21:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x2c, 0x0, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x2c}}, 0x0) 00:21:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3], 0x40}}, 0x0) [ 2665.802981][T13437] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:21:12 executing program 2: syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) madvise(&(0x7f0000f49000/0x2000)=nil, 0x2000, 0xe) [ 2666.242511][T13448] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2d) getsockopt$sock_buf(r0, 0x1, 0x1d, 0x0, &(0x7f0000000000)) 00:21:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x2c, 0x0, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x2c}}, 0x0) 00:21:13 executing program 2: mq_open(&(0x7f0000000080)='(+@\x00', 0x841, 0x0, &(0x7f00000000c0)={0x8, 0x82a, 0x2, 0x100000001}) 00:21:13 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3], 0x40}}, 0x0) 00:21:13 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2667.129152][T13458] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2667.535523][T13460] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2668.571597][T31059] device hsr_slave_0 left promiscuous mode [ 2668.599907][T31059] device hsr_slave_1 left promiscuous mode [ 2668.609351][T31059] device bridge_slave_1 left promiscuous mode [ 2668.616387][T31059] bridge0: port 2(bridge_slave_1) entered disabled state [ 2668.628996][T31059] device bridge_slave_0 left promiscuous mode [ 2668.638651][T31059] bridge0: port 1(bridge_slave_0) entered disabled state [ 2668.658144][T31059] device veth1_macvtap left promiscuous mode [ 2668.664531][T31059] device veth0_macvtap left promiscuous mode [ 2668.670646][T31059] device veth1_vlan left promiscuous mode [ 2668.676742][T31059] device veth0_vlan left promiscuous mode [ 2670.498833][ T3128] ieee802154 phy0 wpan0: encryption failed: -22 [ 2670.505496][ T3128] ieee802154 phy1 wpan1: encryption failed: -22 [ 2670.978661][T31059] team0 (unregistering): Port device team_slave_1 removed [ 2671.002084][T31059] team0 (unregistering): Port device team_slave_0 removed [ 2671.020140][T31059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2671.042510][T31059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2671.120315][T31059] bond0 (unregistering): Released all slaves [ 2671.288374][T13475] IPVS: ftp: loaded support on port[0] = 21 [ 2671.576791][T13475] chnl_net:caif_netlink_parms(): no params data found [ 2671.731255][T13475] bridge0: port 1(bridge_slave_0) entered blocking state [ 2671.738800][T13475] bridge0: port 1(bridge_slave_0) entered disabled state [ 2671.748918][T13475] device bridge_slave_0 entered promiscuous mode [ 2671.834375][T13475] bridge0: port 2(bridge_slave_1) entered blocking state [ 2671.841751][T13475] bridge0: port 2(bridge_slave_1) entered disabled state [ 2671.851980][T13475] device bridge_slave_1 entered promiscuous mode [ 2671.928230][T13475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2671.947113][T13475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2672.003041][T13475] team0: Port device team_slave_0 added [ 2672.024893][T13475] team0: Port device team_slave_1 added [ 2672.068128][T13475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2672.075382][T13475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2672.101697][T13475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2672.132375][T13475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2672.139601][T13475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2672.165960][T13475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2672.245053][T13475] device hsr_slave_0 entered promiscuous mode [ 2672.260090][T13475] device hsr_slave_1 entered promiscuous mode [ 2672.268564][T13475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2672.276422][T13475] Cannot create hsr debugfs directory [ 2672.612185][T13475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2672.639799][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2672.649357][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2672.668105][T13475] 8021q: adding VLAN 0 to HW filter on device team0 [ 2672.682577][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2672.693618][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2672.703439][ T7106] bridge0: port 1(bridge_slave_0) entered blocking state [ 2672.710890][ T7106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2672.723954][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2672.745140][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2672.755568][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2672.766694][ T7106] bridge0: port 2(bridge_slave_1) entered blocking state [ 2672.773927][ T7106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2672.795424][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2672.812616][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2672.836360][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2672.846486][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2672.859611][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2672.876634][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2672.887076][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2672.915545][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2672.925563][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2672.952120][T13475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2672.965722][T13475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2672.977316][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2672.987973][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2673.027195][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2673.035284][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2673.061720][T13475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2673.170538][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2673.181055][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2673.221432][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2673.231892][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2673.248280][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2673.258016][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2673.277849][T13475] device veth0_vlan entered promiscuous mode [ 2673.299244][T13475] device veth1_vlan entered promiscuous mode [ 2673.309395][ T8472] Bluetooth: hci5: command 0x0409 tx timeout [ 2673.352756][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2673.363463][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2673.375746][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2673.393204][T13475] device veth0_macvtap entered promiscuous mode [ 2673.417582][T13475] device veth1_macvtap entered promiscuous mode [ 2673.457223][T13475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2673.468865][T13475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.478996][T13475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2673.489741][T13475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.500410][T13475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2673.511324][T13475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.521401][T13475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2673.532157][T13475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.546576][T13475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2673.555251][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2673.565824][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2673.588598][T13475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2673.599273][T13475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.609676][T13475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2673.621381][T13475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.631566][T13475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2673.642324][T13475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.652378][T13475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2673.666087][T13475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.679755][T13475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2673.688687][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2673.699298][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2673.936543][T11815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2673.944719][T11815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2673.952675][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2674.031679][T11815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2674.040513][T11815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2674.050361][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2674.200736][T13707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2674.208745][T13707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2674.220433][T13707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2674.228217][T13707] batman_adv: batadv0: Removing interface: batadv_slave_1 00:21:20 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:21:20 executing program 0: madvise(&(0x7f0000f4a000/0x1000)=nil, 0x1000, 0xf) pipe(&(0x7f00000000c0)) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xf) 00:21:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x4}]}, 0x24}}, 0x0) 00:21:20 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3], 0x40}}, 0x0) 00:21:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @local}, @isdn, @hci={0x1f, 0x0, 0x1}}) 00:21:20 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2674.680303][T13717] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2674.683346][T13718] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:21 executing program 0: madvise(&(0x7f0000f4a000/0x1000)=nil, 0x1000, 0xf) pipe(&(0x7f00000000c0)) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xf) 00:21:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 00:21:21 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x81) 00:21:21 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB], 0x40}}, 0x0) 00:21:21 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:21 executing program 0: madvise(&(0x7f0000f4a000/0x1000)=nil, 0x1000, 0xf) pipe(&(0x7f00000000c0)) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xf) [ 2675.485418][T13743] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2675.765244][T13740] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:21:22 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:21:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 00:21:22 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000740)) 00:21:22 executing program 0: madvise(&(0x7f0000f4a000/0x1000)=nil, 0x1000, 0xf) pipe(&(0x7f00000000c0)) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xf) 00:21:22 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB], 0x40}}, 0x0) 00:21:22 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 00:21:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 00:21:22 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2676.481948][T13760] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:22 executing program 0: madvise(&(0x7f0000f49000/0x2000)=nil, 0x2000, 0xe) mlock2(&(0x7f0000f49000/0x1000)=nil, 0x1000, 0x0) [ 2676.731750][T13763] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:21:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x18, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4}]}, 0x18}}, 0x0) 00:21:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0xd, 0x4) 00:21:23 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB], 0x40}}, 0x0) 00:21:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14}, 0x14}}, 0x0) 00:21:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x18, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4}]}, 0x18}}, 0x0) 00:21:23 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2677.608133][T13780] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r0, 0x0, &(0x7f0000000040)) 00:21:24 executing program 0: munmap(&(0x7f0000c32000/0x1000)=nil, 0x1000) munmap(&(0x7f0000976000/0x400000)=nil, 0x400000) 00:21:24 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a014200009"], 0x40}}, 0x0) 00:21:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x18, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4}]}, 0x18}}, 0x0) [ 2678.584557][T13792] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2679.629425][ T1303] device hsr_slave_0 left promiscuous mode [ 2679.637599][ T1303] device hsr_slave_1 left promiscuous mode [ 2679.649431][ T1303] device bridge_slave_1 left promiscuous mode [ 2679.656165][ T1303] bridge0: port 2(bridge_slave_1) entered disabled state [ 2679.670122][ T1303] device bridge_slave_0 left promiscuous mode [ 2679.676904][ T1303] bridge0: port 1(bridge_slave_0) entered disabled state [ 2679.696563][ T1303] device veth1_macvtap left promiscuous mode [ 2679.702687][ T1303] device veth0_macvtap left promiscuous mode [ 2679.709174][ T1303] device veth1_vlan left promiscuous mode [ 2679.715501][ T1303] device veth0_vlan left promiscuous mode [ 2681.989526][ T1303] team0 (unregistering): Port device team_slave_1 removed [ 2682.076579][ T1303] team0 (unregistering): Port device team_slave_0 removed [ 2682.108972][ T1303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2682.178804][ T1303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2682.250894][ T1303] bond0 (unregistering): Released all slaves [ 2682.313827][T13804] IPVS: ftp: loaded support on port[0] = 21 [ 2682.521844][T13804] chnl_net:caif_netlink_parms(): no params data found [ 2682.715310][T13804] bridge0: port 1(bridge_slave_0) entered blocking state [ 2682.722668][T13804] bridge0: port 1(bridge_slave_0) entered disabled state [ 2682.733479][T13804] device bridge_slave_0 entered promiscuous mode [ 2682.772038][T13804] bridge0: port 2(bridge_slave_1) entered blocking state [ 2682.779928][T13804] bridge0: port 2(bridge_slave_1) entered disabled state [ 2682.789862][T13804] device bridge_slave_1 entered promiscuous mode [ 2682.843720][T13804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2682.878215][T13804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2682.931234][T13804] team0: Port device team_slave_0 added [ 2682.944633][T13804] team0: Port device team_slave_1 added [ 2683.000622][T13804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2683.008092][T13804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2683.034470][T13804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2683.051562][T13804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2683.058989][T13804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2683.086978][T13804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2683.155807][T13804] device hsr_slave_0 entered promiscuous mode [ 2683.165666][T13804] device hsr_slave_1 entered promiscuous mode [ 2683.173655][T13804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2683.184493][T13804] Cannot create hsr debugfs directory [ 2683.602856][T13804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2683.627837][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2683.636450][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2683.652205][T13804] 8021q: adding VLAN 0 to HW filter on device team0 [ 2683.668270][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2683.679016][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2683.688663][ T820] bridge0: port 1(bridge_slave_0) entered blocking state [ 2683.696092][ T820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2683.708785][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2683.728779][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2683.738949][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2683.748513][ T9530] bridge0: port 2(bridge_slave_1) entered blocking state [ 2683.756007][ T9530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2683.805812][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2683.816688][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2683.827198][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2683.837825][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2683.848386][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2683.858471][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2683.872280][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2683.899014][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2683.908365][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2683.923880][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2683.934445][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2683.959112][T13804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2683.992957][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2684.002644][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2684.017038][T23538] Bluetooth: hci5: command 0x0409 tx timeout [ 2684.031635][T13804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2684.134064][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2684.144599][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2684.186085][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2684.196271][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2684.209373][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2684.219479][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2684.232648][T13804] device veth0_vlan entered promiscuous mode [ 2684.252085][T13804] device veth1_vlan entered promiscuous mode [ 2684.298675][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2684.311037][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2684.320715][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2684.330780][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2684.347595][T13804] device veth0_macvtap entered promiscuous mode [ 2684.365166][T13804] device veth1_macvtap entered promiscuous mode [ 2684.388485][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2684.419511][T13804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2684.430538][T13804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2684.440680][T13804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2684.451415][T13804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2684.461818][T13804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2684.472586][T13804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2684.482723][T13804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2684.493432][T13804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2684.509368][T13804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2684.519592][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2684.530013][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2684.547839][T13804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2684.558704][T13804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2684.568832][T13804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2684.581190][T13804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2684.591413][T13804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2684.602186][T13804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2684.612400][T13804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2684.623079][T13804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2684.637507][T13804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2684.645525][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2684.655432][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2684.962322][T11815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2684.970604][T11815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2684.981572][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2685.052225][T11815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2685.060544][T11815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2685.070257][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2685.187908][T14034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2685.196105][T14034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2685.206276][T14034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2685.213848][T14034] batman_adv: batadv0: Removing interface: batadv_slave_1 00:21:31 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:21:31 executing program 2: r0 = socket(0x2, 0x3, 0x7) connect(r0, &(0x7f0000000080)=@nl=@unspec, 0x80) 00:21:31 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:31 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a014200009"], 0x40}}, 0x0) 00:21:31 executing program 0: clone(0x2d841180, 0x0, 0x0, 0x0, 0x0) 00:21:31 executing program 1: clock_adjtime(0x3, 0x0) [ 2685.707550][T14044] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:32 executing program 1: madvise(&(0x7f0000f4a000/0x1000)=nil, 0x1000, 0xf) 00:21:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000100)=""/134, &(0x7f00000001c0)=0x86) 00:21:32 executing program 2: pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RLINK(r0, &(0x7f00000004c0)={0x7}, 0x7) write$P9_RFLUSH(r0, &(0x7f0000000040)={0xfffffdac}, 0x17) 00:21:32 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:32 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a014200009"], 0x40}}, 0x0) 00:21:32 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/pid_for_children\x00') [ 2686.471057][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:33 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:21:33 executing program 2: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181, 0x0) 00:21:33 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000), 0xffffffffffffffff, 0x375242) 00:21:33 executing program 1: syz_usb_connect$cdc_ecm(0x2, 0x18d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x17b, 0x1, 0x1, 0xdd, 0x70, 0x1, [{{0x9, 0x4, 0x0, 0x52, 0x2, 0x2, 0x6, 0x0, 0x50, {{0x8, 0x24, 0x6, 0x0, 0x0, "f61e27"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x10000000, 0x4, 0x2, 0xff}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x763}, @ncm={0x6, 0x24, 0x1a, 0x559, 0x1}, @mdlm_detail={0xfb, 0x24, 0x13, 0xff, "a709513769190507804b5d98988bba5d7eb45a6c234123572a0ebf3e4f77227ea8a2bc8040df67e14e8a2c8f227b0f11e684bf2de4a550dbca552a9d92336706d6b80e2d3d04812048a100192ea119c06a8e8a70b630f807f65578c84dfd4b5304d418a189ad52351539c6db17fc88f44dc1faf11776aa6628dc82477d4daf84bef774df757bb20b66437bc6a931cdfae4bf9600a08dcacb239d6d32193549e8f8e663c3c1898db27b465d467c81adf3f1f440c75bba2345da2b28e0ab56fd15ab208cfff0db626c9b578d616b8765ca09029c457eecf4c4f4cac91291a8d8aa77c2d2494dbba47cd56e69bb8c6d3bda25c6b3b2751688"}, @acm={0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x80}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x40, 0x79}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x40, 0x1, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0x6, 0xf8}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x20, 0x20, 0x0, 0x20, 0x8}, 0x3c, &(0x7f0000000200)={0x5, 0xf, 0x3c, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0xdc, 0x0, 0x0, 0xf00, 0x3d6}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "0c66947474f01f43883c8b6e49298492"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "abb89cb673e6340ff12923f171c16f51"}]}, 0x3, [{0xd2, &(0x7f0000000240)=@string={0xd2, 0x3, "d9b1b55afa55f441b04533c6b3c2aba373a74c10e0499421c71fd216920e9df3e5fb4eab9d3499c7163c971fb8068702e41cd34eb09068c6bc82cb5f5ef9cb79b2fe68b78aaf8eaa4efb539ba9b14e9d3c907bf69b0e50287a1693412d1ec86e75215841ffa08300c72c8c16a7cc48ba3d3e9eb7863090070f306fdcd5eeb7d0e1e508e7f5e0d7a1b8a94a083f634925e44bd73985ebbc1b1ebb1e9c2392840d3850e06c5ea7d1fb85292159789e9a48953666f9e8fc2cf2ee8d3b1bac41b8264721eb0137f5c7f3f5585353cbfeec99"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44a}}, {0x1e, &(0x7f0000000380)=@string={0x1e, 0x3, "226b2294e085c5fde17e35fd21435458c203678645b178e040e6d465"}}]}) 00:21:33 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a01420000902110000"], 0x40}}, 0x0) 00:21:33 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:33 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc020660b, 0x0) 00:21:33 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x1}}) 00:21:33 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2687.470300][T14079] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2687.656543][ T7] usb 2-1: new full-speed USB device number 9 using dummy_hcd 00:21:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x7, 'syz1\x00'}, 0x1, 0x1, 0x2, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000000)=['/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00'], 0x26}) 00:21:34 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 2688.065881][ T7] usb 2-1: not running at top speed; connect to a high speed hub 00:21:34 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a01420000902110000"], 0x40}}, 0x0) 00:21:34 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2688.144491][ T7] usb 2-1: config 1 interface 0 altsetting 82 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2688.155946][ T7] usb 2-1: config 1 interface 0 altsetting 82 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2688.169390][ T7] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2688.425750][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2688.435247][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2688.443473][ T7] usb 2-1: Product: 欢鐢藠ﷅ绡ﴵ䌡塔ς虧녅旔 [ 2688.451417][ T7] usb 2-1: Manufacturer: ъ [ 2688.456193][ T7] usb 2-1: SerialNumber: syz 00:21:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x7, 'syz1\x00'}, 0x1, 0x1, 0x2, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000000)=['/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00'], 0x26}) [ 2688.598018][T14074] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2688.620017][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2688.651229][T14074] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2689.049446][T14097] snd_dummy snd_dummy.0: control 0:0:7:syz1:0 is already present 00:21:35 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r0, 0x0, 0x30, 0x0, &(0x7f00000001c0)) 00:21:35 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 00:21:35 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a01420000902110000"], 0x40}}, 0x0) 00:21:35 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2689.395792][ T7] usb 2-1: bad CDC descriptors 00:21:35 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x7, 'syz1\x00'}, 0x1, 0x1, 0x2, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000000)=['/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00'], 0x26}) [ 2689.451849][ T7] usb 2-1: USB disconnect, device number 9 [ 2689.876353][T14112] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2689.909335][T14113] snd_dummy snd_dummy.0: control 0:0:7:syz1:0 is already present 00:21:36 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x7, 'syz1\x00'}, 0x1, 0x1, 0x2, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000000)=['/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00'], 0x26}) [ 2690.572643][T14117] snd_dummy snd_dummy.0: control 0:0:7:syz1:0 is already present [ 2691.270550][T21429] device hsr_slave_0 left promiscuous mode [ 2691.281302][T21429] device hsr_slave_1 left promiscuous mode [ 2691.291343][T21429] device bridge_slave_1 left promiscuous mode [ 2691.298635][T21429] bridge0: port 2(bridge_slave_1) entered disabled state [ 2691.309583][T21429] device bridge_slave_0 left promiscuous mode [ 2691.316586][T21429] bridge0: port 1(bridge_slave_0) entered disabled state [ 2691.333810][T21429] device veth1_macvtap left promiscuous mode [ 2691.340002][T21429] device veth0_macvtap left promiscuous mode [ 2691.346512][T21429] device veth1_vlan left promiscuous mode [ 2691.352448][T21429] device veth0_vlan left promiscuous mode [ 2693.823088][T21429] team0 (unregistering): Port device team_slave_1 removed [ 2693.841732][T21429] team0 (unregistering): Port device team_slave_0 removed [ 2693.858175][T21429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2693.879644][T21429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2693.952027][T21429] bond0 (unregistering): Released all slaves [ 2694.026775][T14129] IPVS: ftp: loaded support on port[0] = 21 [ 2694.281090][T14129] chnl_net:caif_netlink_parms(): no params data found [ 2694.386886][T14129] bridge0: port 1(bridge_slave_0) entered blocking state [ 2694.394448][T14129] bridge0: port 1(bridge_slave_0) entered disabled state [ 2694.403031][T14129] device bridge_slave_0 entered promiscuous mode [ 2694.420429][T14129] bridge0: port 2(bridge_slave_1) entered blocking state [ 2694.428165][T14129] bridge0: port 2(bridge_slave_1) entered disabled state [ 2694.438493][T14129] device bridge_slave_1 entered promiscuous mode [ 2694.503987][T14129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2694.525532][T14129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2694.582492][T14129] team0: Port device team_slave_0 added [ 2694.596355][T14129] team0: Port device team_slave_1 added [ 2694.648771][T14129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2694.656173][T14129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2694.682520][T14129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2694.702844][T14129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2694.710130][T14129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2694.736638][T14129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2694.808230][T14129] device hsr_slave_0 entered promiscuous mode [ 2694.818469][T14129] device hsr_slave_1 entered promiscuous mode [ 2694.840187][T14129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2694.848893][T14129] Cannot create hsr debugfs directory [ 2695.268173][T14129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2695.289922][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2695.299495][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2695.315881][T14129] 8021q: adding VLAN 0 to HW filter on device team0 [ 2695.332307][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2695.343256][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2695.352847][ T820] bridge0: port 1(bridge_slave_0) entered blocking state [ 2695.360713][ T820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2695.385784][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2695.395213][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2695.405215][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2695.414438][ T820] bridge0: port 2(bridge_slave_1) entered blocking state [ 2695.421662][ T820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2695.436410][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2695.457260][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 2695.470160][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2695.482755][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2695.493347][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2695.508713][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2695.528389][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2695.539150][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2695.562980][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2695.574541][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2695.595224][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2695.605244][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2695.621871][T14129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2695.661833][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2695.671262][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2695.694896][T14129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2695.801762][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2695.812405][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2695.851261][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2695.860842][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2695.871823][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2695.882743][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2695.901762][T14129] device veth0_vlan entered promiscuous mode [ 2695.924472][T14129] device veth1_vlan entered promiscuous mode [ 2695.968728][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2695.980335][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2695.990363][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2696.000510][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2696.021152][T14129] device veth0_macvtap entered promiscuous mode [ 2696.038344][T14129] device veth1_macvtap entered promiscuous mode [ 2696.066087][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2696.076186][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2696.091604][T14129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2696.103340][T14129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2696.113541][T14129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2696.124288][T14129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2696.134375][T14129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2696.145264][T14129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2696.155412][T14129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2696.166302][T14129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2696.179193][T14129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2696.191039][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2696.201719][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2696.225952][T14129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2696.236543][T14129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2696.247429][T14129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2696.258225][T14129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2696.268515][T14129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2696.279282][T14129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2696.289394][T14129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2696.300125][T14129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2696.313472][T14129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2696.323877][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2696.335095][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2696.602526][T21493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2696.610710][T21493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2696.638533][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2696.759318][T21429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2696.767569][T21429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2696.775650][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2696.879633][T14359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2696.887510][T14359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2696.902264][T14359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2696.910206][T14359] batman_adv: batadv0: Removing interface: batadv_slave_1 00:21:43 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:21:43 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000006e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=""/84, 0x54}}, {{&(0x7f0000001740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000002b00)=[{0x0}, {&(0x7f0000002900)=""/67, 0x43}, {0x0}], 0x3}, 0x400}, {{0x0, 0x0, &(0x7f0000003dc0)=[{0x0}, {&(0x7f0000003c40)=""/164, 0xa4}, {&(0x7f0000003d00)=""/191, 0xbf}], 0x3}, 0x7fff}, {{&(0x7f0000004040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000005480)=[{&(0x7f00000040c0)=""/235, 0xeb}, {0x0}, {&(0x7f0000005200)=""/218, 0xda}, {0x0}, {0x0}], 0x5, &(0x7f0000005500)=""/221, 0xdd}, 0x4dd}], 0x4, 0x0, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f0000007340)='bpf_lsm_task_getpgid\x00') 00:21:43 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a014200009021100000108"], 0x40}}, 0x0) 00:21:43 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x20401, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) 00:21:43 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:43 executing program 0: syz_btf_id_by_name$bpf_lsm(&(0x7f0000007340)='bpf_lsm_task_getpgid\x00') [ 2697.325308][T14369] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2697.537569][ T7] Bluetooth: hci5: command 0x041b tx timeout 00:21:43 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:43 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) 00:21:44 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a014200009021100000108"], 0x40}}, 0x0) [ 2698.125793][T14384] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:44 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) read$dsp(r0, 0x0, 0x0) 00:21:44 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 00:21:44 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:21:45 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:21:45 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:45 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a014200009021100000108"], 0x40}}, 0x0) 00:21:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private2}}) 00:21:45 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2699.237679][T14398] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:45 executing program 2: syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x121d02) 00:21:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) dup2(r0, r1) 00:21:46 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a01420000902110000010802"], 0x40}}, 0x0) 00:21:46 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0) 00:21:46 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:46 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x28, r0, 0x60d, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x4}]}, 0x28}}, 0x0) [ 2700.208259][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:46 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r0, &(0x7f0000002980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000040, 0x0) [ 2700.634419][ T9172] usb 1-1: new high-speed USB device number 5 using dummy_hcd 00:21:47 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a01420000902110000010802"], 0x40}}, 0x0) 00:21:47 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2700.785410][T14417] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 00:21:47 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000600)=""/233, 0xe9}], 0x2}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6612, 0x0) [ 2700.869632][T14418] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 2700.878644][ T9172] usb 1-1: Using ep0 maxpacket: 16 [ 2700.996475][ T9172] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2701.108893][T14420] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2701.176003][ T9172] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2701.185433][ T9172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2701.193593][ T9172] usb 1-1: Product: syz [ 2701.199256][ T9172] usb 1-1: Manufacturer: syz [ 2701.204010][ T9172] usb 1-1: SerialNumber: syz 00:21:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x8}]}, 0x1c}}, 0x0) [ 2701.412696][T14411] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2701.449451][ T9172] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 2701.973336][T14432] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2702.047725][T31639] usb 1-1: USB disconnect, device number 5 [ 2702.896953][T21492] device hsr_slave_0 left promiscuous mode [ 2702.917230][T21492] device hsr_slave_1 left promiscuous mode [ 2702.927801][T21492] device bridge_slave_1 left promiscuous mode [ 2702.934883][T21492] bridge0: port 2(bridge_slave_1) entered disabled state [ 2702.952491][T21492] device bridge_slave_0 left promiscuous mode [ 2702.959485][T21492] bridge0: port 1(bridge_slave_0) entered disabled state [ 2702.992263][T21492] device veth1_macvtap left promiscuous mode [ 2702.998876][T21492] device veth0_macvtap left promiscuous mode [ 2703.005355][T21492] device veth1_vlan left promiscuous mode [ 2703.011263][T21492] device veth0_vlan left promiscuous mode [ 2705.450185][T21492] team0 (unregistering): Port device team_slave_1 removed [ 2705.471553][T21492] team0 (unregistering): Port device team_slave_0 removed [ 2705.490573][T21492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2705.512649][T21492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2705.585131][T21492] bond0 (unregistering): Released all slaves [ 2705.663813][T14451] IPVS: ftp: loaded support on port[0] = 21 [ 2705.901512][T14451] chnl_net:caif_netlink_parms(): no params data found [ 2706.042404][T14451] bridge0: port 1(bridge_slave_0) entered blocking state [ 2706.049927][T14451] bridge0: port 1(bridge_slave_0) entered disabled state [ 2706.060398][T14451] device bridge_slave_0 entered promiscuous mode [ 2706.077989][T14451] bridge0: port 2(bridge_slave_1) entered blocking state [ 2706.085641][T14451] bridge0: port 2(bridge_slave_1) entered disabled state [ 2706.095708][T14451] device bridge_slave_1 entered promiscuous mode [ 2706.154052][T14451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2706.172119][T14451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2706.227787][T14451] team0: Port device team_slave_0 added [ 2706.241631][T14451] team0: Port device team_slave_1 added [ 2706.294053][T14451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2706.301438][T14451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2706.330485][T14451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2706.353486][T14451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2706.361264][T14451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2706.387737][T14451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2706.458149][T14451] device hsr_slave_0 entered promiscuous mode [ 2706.470113][T14451] device hsr_slave_1 entered promiscuous mode [ 2706.479509][T14451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2706.487313][T14451] Cannot create hsr debugfs directory [ 2706.894494][T14451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2706.918582][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2706.927900][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2706.947376][T14451] 8021q: adding VLAN 0 to HW filter on device team0 [ 2706.961785][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2706.971922][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2706.981569][T31639] bridge0: port 1(bridge_slave_0) entered blocking state [ 2706.989092][T31639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2707.003562][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2707.023014][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2707.033144][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2707.043808][ T9172] bridge0: port 2(bridge_slave_1) entered blocking state [ 2707.051264][ T9172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2707.071931][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2707.093887][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2707.114955][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2707.125737][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2707.151317][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2707.160697][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2707.171610][ T3302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2707.182659][T31639] Bluetooth: hci5: command 0x0409 tx timeout [ 2707.192106][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2707.202059][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2707.223059][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2707.233332][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2707.254980][T14451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2707.291135][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2707.299410][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2707.321129][T14451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2707.427840][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2707.437709][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2707.491425][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2707.501559][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2707.517639][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2707.526303][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2707.541436][T14451] device veth0_vlan entered promiscuous mode [ 2707.568556][T14451] device veth1_vlan entered promiscuous mode [ 2707.613442][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2707.623329][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2707.633397][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2707.643769][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2707.672111][T14451] device veth0_macvtap entered promiscuous mode [ 2707.688297][T14451] device veth1_macvtap entered promiscuous mode [ 2707.715975][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2707.726130][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2707.746510][T14451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2707.758660][T14451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.769179][T14451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2707.779862][T14451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.790094][T14451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2707.801077][T14451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.811176][T14451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2707.821887][T14451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.835416][T14451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2707.844446][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2707.854905][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2707.881385][T14451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2707.892197][T14451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.903307][T14451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2707.914149][T14451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.924265][T14451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2707.934865][T14451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.944907][T14451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2707.955598][T14451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.970238][T14451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2707.979114][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2707.989697][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2708.353677][T21493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2708.362174][T21493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2708.378163][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2708.459814][T31242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2708.468122][T31242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2708.480021][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2708.583201][T14681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2708.591167][T14681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2708.602158][T14681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2708.610354][T14681] batman_adv: batadv0: Removing interface: batadv_slave_1 00:21:55 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:21:55 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="b3", 0x1}], 0x1}, 0x0) 00:21:55 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:55 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a01420000902110000010802"], 0x40}}, 0x0) 00:21:55 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}}) 00:21:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b0b, &(0x7f0000000400)='wlan1\x00\x1f\x1a\xec\xb5\x12\x03F\xd9U\x1c\x00\x00U\x00\x00\x00\x00\x00\x00\xf2-\xda\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b8\x84c\xf2\xc2\fpp.{\xb2\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\x05\x00^9P\xee\x8aG\xdd2\x9d\xe9\x00\x00\x00)-v\x91WQ\xfd\xdcSE;\x9d\xc3\xc1LO\xf1\xf7\xbe\xdc\xd0Y\a\xe4\xcd\xdf\x11\r\x99\xfe#N\a\xc6\xf3I\x89tZU#Ifx\xc3\xeb\xbe\xb6efpM\xc8\xaa\x88BA\n\xd1\x16\x81\x96ZI\xb2\xb5\xf2\xe6\xf5\x00\x92\r\xf6\x8d\x95\x9db\xe2\xc4\xad\xcb>\x890x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2710.105675][T14710] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:21:56 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:56 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) [ 2710.326066][T23538] usb 3-1: Using ep0 maxpacket: 16 [ 2710.462826][T23538] usb 3-1: config 1 interface 0 altsetting 82 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 2710.474396][T23538] usb 3-1: config 1 interface 0 altsetting 82 bulk endpoint 0x82 has invalid maxpacket 64 [ 2710.484710][T23538] usb 3-1: config 1 interface 0 altsetting 82 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2710.498066][T23538] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2710.525114][ T3302] usb 1-1: config 1 interface 0 altsetting 82 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2710.536424][ T3302] usb 1-1: config 1 interface 0 altsetting 82 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2710.549975][ T3302] usb 1-1: config 1 interface 0 has no altsetting 0 00:21:56 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2710.728699][T14724] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:57 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x4, 0x30, 0x33, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 2710.797426][ T3302] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2710.807030][ T3302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2710.815628][ T3302] usb 1-1: Product: 欢鐢藠ﷅ绡ﴵ䌡塔ς虧녅旔 [ 2710.823248][ T3302] usb 1-1: Manufacturer: ъ [ 2710.830225][ T3302] usb 1-1: SerialNumber: syz [ 2710.845368][T23538] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2710.854738][T23538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2710.862890][T23538] usb 3-1: Product: 欢鐢藠ﷅ绡ﴵ䌡塔ς虧녅旔 [ 2710.870621][T23538] usb 3-1: Manufacturer: ъ [ 2710.875344][T23538] usb 3-1: SerialNumber: syz [ 2710.968900][T14706] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2711.023127][T14706] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2711.036292][T14708] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2711.078302][T14708] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2711.160164][T14723] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:21:57 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:21:57 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:21:57 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000000)=@ethernet={0x0, @remote}, 0x80, 0x0}, 0x0) [ 2711.716665][T23538] usb 3-1: bad CDC descriptors [ 2711.749471][ T3302] usb 1-1: bad CDC descriptors 00:21:58 executing program 0: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002680), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x1000000) [ 2711.802049][T23538] usb 3-1: USB disconnect, device number 13 [ 2711.827400][ T3302] usb 1-1: USB disconnect, device number 6 00:21:58 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x4, 0x30, 0x33, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 2712.225119][T14754] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2712.323919][T14757] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2712.529363][T14751] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:21:58 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 00:21:58 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x4, 0x30, 0x33, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 00:21:59 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:21:59 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2713.031770][T14761] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2713.267436][T14766] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:59 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x541b, 0x0) [ 2713.575357][T14767] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2714.554857][T31242] device hsr_slave_0 left promiscuous mode [ 2714.569510][T31242] device hsr_slave_1 left promiscuous mode [ 2714.583626][T31242] device bridge_slave_1 left promiscuous mode [ 2714.591021][T31242] bridge0: port 2(bridge_slave_1) entered disabled state [ 2714.610512][T31242] device bridge_slave_0 left promiscuous mode [ 2714.620259][T31242] bridge0: port 1(bridge_slave_0) entered disabled state [ 2714.646782][T31242] device veth1_macvtap left promiscuous mode [ 2714.653345][T31242] device veth0_macvtap left promiscuous mode [ 2714.660067][T31242] device veth1_vlan left promiscuous mode [ 2714.666115][T31242] device veth0_vlan left promiscuous mode [ 2717.111081][T31242] team0 (unregistering): Port device team_slave_1 removed [ 2717.129390][T31242] team0 (unregistering): Port device team_slave_0 removed [ 2717.149393][T31242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2717.170894][T31242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2717.254852][T31242] bond0 (unregistering): Released all slaves [ 2717.324632][T14782] IPVS: ftp: loaded support on port[0] = 21 [ 2717.559822][T14782] chnl_net:caif_netlink_parms(): no params data found [ 2717.688538][T14782] bridge0: port 1(bridge_slave_0) entered blocking state [ 2717.696668][T14782] bridge0: port 1(bridge_slave_0) entered disabled state [ 2717.706684][T14782] device bridge_slave_0 entered promiscuous mode [ 2717.728224][T14782] bridge0: port 2(bridge_slave_1) entered blocking state [ 2717.736203][T14782] bridge0: port 2(bridge_slave_1) entered disabled state [ 2717.746193][T14782] device bridge_slave_1 entered promiscuous mode [ 2717.802215][T14782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2717.820191][T14782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2717.870960][T14782] team0: Port device team_slave_0 added [ 2717.885074][T14782] team0: Port device team_slave_1 added [ 2717.930054][T14782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2717.937574][T14782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2717.964194][T14782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2717.982734][T14782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2717.990537][T14782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2718.018286][T14782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2718.080646][T14782] device hsr_slave_0 entered promiscuous mode [ 2718.093390][T14782] device hsr_slave_1 entered promiscuous mode [ 2718.104983][T14782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2718.112659][T14782] Cannot create hsr debugfs directory [ 2718.545304][T14782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2718.568290][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2718.578020][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2718.595863][T14782] 8021q: adding VLAN 0 to HW filter on device team0 [ 2718.624901][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2718.635642][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2718.645354][ T9172] bridge0: port 1(bridge_slave_0) entered blocking state [ 2718.652611][ T9172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2718.662019][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2718.672277][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2718.681479][ T9172] bridge0: port 2(bridge_slave_1) entered blocking state [ 2718.688906][ T9172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2718.701954][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2718.712819][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2718.733079][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2718.757119][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2718.767764][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2718.782538][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2718.799973][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2718.810607][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2718.827130][T31639] Bluetooth: hci5: command 0x0409 tx timeout [ 2718.834870][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2718.844917][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2718.861974][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2718.872597][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2718.893790][T14782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2718.933359][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2718.941725][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2718.961932][T14782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2719.069299][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2719.079597][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2719.123889][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2719.134040][T31639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2719.160488][T14782] device veth0_vlan entered promiscuous mode [ 2719.185439][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2719.195044][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2719.223233][T14782] device veth1_vlan entered promiscuous mode [ 2719.271115][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2719.280274][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2719.290270][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2719.300575][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2719.319021][T14782] device veth0_macvtap entered promiscuous mode [ 2719.335974][T14782] device veth1_macvtap entered promiscuous mode [ 2719.358107][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2719.368209][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2719.395322][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2719.406053][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.416133][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2719.429407][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.440226][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2719.450905][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.460977][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2719.471684][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.485929][T14782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2719.495144][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2719.505481][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2719.523840][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2719.536625][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.548499][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2719.559275][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.569427][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2719.580162][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.590318][T14782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2719.601138][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.615231][T14782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2719.623880][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2719.634488][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2719.929963][T31242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2719.939424][T31242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2719.948504][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2720.026742][T31242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2720.035320][T31242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2720.046684][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2720.186567][T15012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2720.194397][T15012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2720.204773][T15012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2720.212274][T15012] batman_adv: batadv0: Removing interface: batadv_slave_1 00:22:06 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:22:06 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x4, 0x30, 0x33, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 00:22:06 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}]}) 00:22:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:06 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:06 executing program 0: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002680), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xeffd) [ 2720.651923][T15021] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2720.700760][T15022] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2720.712274][T15023] tmpfs: Bad value for 'mpol' [ 2720.733908][T15023] tmpfs: Bad value for 'mpol' [ 2720.745879][T15024] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:22:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) 00:22:07 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) 00:22:07 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:22:07 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:07 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) 00:22:08 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:22:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) socket$kcm(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) [ 2721.708181][T15039] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:08 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg(r0, &(0x7f0000004a00)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x80, 0x0, 0x0, &(0x7f0000003600)=ANY=[@ANYBLOB="40000000000000000000000000000000930de81f884508c492574554e9b1f320f837d5ddca8b331190ccf5f8239c968351b353d4460fa507436f7418a3430000a8000000000000001a0000000200000022d4f43a229733843023ed4a81d27148d4e1d43b32f720e62bb62f61cb5708d7a8d6e3596bc97a55a04ed3e8fc375e09fb408a761b8e6cf62a62ce253fc097990be137d6114bbbff85e29487c09d1b31024b0a6a874afe65c49bc75d6bbaf28084d4145199c4ca4d87ffeac84f5c006b0a8a7a792b4aa0b6546b40febd718152937a6204c7cc3fbc08af7cba597d7267555ea4c0000000002800000000000000110000000000000048821ed93345b8023a4bbab45b6d59a06f0300000000000010100000000000000b010000050000009c36910ad4583232a37ca8a5e1da02aaf7af7dc0956870df8d687fa18c24aff1a243480edb19c3c32bd84854030c2ec4f45951999ab87b1172c633f64c7afd939ad295a6863b739cc5ea46dea3b3ab96c8948e90f07fae4ff251a602d1d1cc3239ec35c52b3c2a757534d85b658257fce725ea129857275ad3e77134ff2046997a1d777241e8ab8330022bb8ef4d0bf2eb0a1851e6a9b17f7360a334bff73eb65395b23abc32fd2b6ed91295c8dc72a26e86fa8e4a8b05ac25373989ca153f8dfac391ad5bac85796735e5b36b24a88326fbee3a4f1f8215b48b62f3770d26a1e3b26e8c36afdb106bfab862afa947abedcdd3c05d646ab1a8ec8daf860287ce2d43dd51c11c626997124d55ce0ca638308d756b08d6808449e6faef729d33af61899d81d965557d2b3fef89836ff6c512a65136ed4f08215714eac0310d56246a1116bcea75ad3c3494119325dcf9f3ee80c7e9d419485bbc4e2f4fa2360af0ebb24681b0e9b6832dbcdcda14619ec12a5c89cb497df07e4abc447e62a8f2cc158b69c354aec5425358db9abce808ed29869f930f2800b0a9e19bc090bb937c572f9e3a25dae3d417a6e5d457ad41bf89c4de871b906d30228ec03d4bf83d3df9775ea2642de57076a08ddad79dfe3bc558cd8ceee622a108d42c0f153a4ae743be94fa1c87f594606f8be7d50b94e73fffe371d8411a625b6a5f7cfd7707b265e04e579471b50376733914af71cbd72a2dafe8dc3b958db438c9a2c10e0a63aab2df09e56adb485089a3029eee578c2cd3f0f2e07e26061c468a67c413d555f2a0b89ab90b293b661016240cebc2b292c3b285c0286541e3ed7de90f5b8d962a7f8b9c41064cecd864f31129a5e102a06872dcea21c844ecad5e68ffc4534005736a64e50c411b579211478a916ce6256725037cd0c03709864f2715ba7ca3bfbe2c25ce82c4c59bf0c03f743c515b10e6bf8fb9d32ad525bda9b6a523df7aacbe8a09c34606e364fbea25bfa3f42563e489f6fa8c88b858e7d48dfb1e3779593ccb0f759a6953a4338c1b5d202c35f15b0f7aa3cd0769f403a34bde13c2e87cf13aa0a3d66c883c6d002858701a7639606e98e29a1eda3bb0fc042aeefec59bbbdb0a9461b5fdc399eb34c66991315e99ec2f28687f8fd3b37d1a0fc4903b3f9b5f27a2bb8f9200d5a83a110bbfc222c56016fe23bdd128f3c09d2794baf0f56f1573a22292fc5331434cf6b593be23a0ea9472c28b96d3d25366af5d54428b3dea4c423f9ff383db37e1d7f68965e656a957b3ed2e992f41534255e1b6d6f83b2310792a0cf5cc1a1a74030fae6a2487a7003f17de8014ca4063757e2d3c0d57677078705657920198be1843e509d6358ad387b3c5519fa8794dcdb26f0ab1cca7dea5bfcedb1033829175030b60fff8cfda37754b13353ff41cd6f09d84649095345587a11e10dad8fbf820d34bad5a79553111068f16fcaa4c2096ad14ed9703d2c6c70a947bc88ad4a2282ac31d6948caf0b703bdd1efa9006e1150d5eff39308b61efce0fe5f9b5226a4abd03b230d3869bc1eeafc6051a6b118be24a3711cf588b427344461086f0ef26be51da457f1ae37b046341cd3055a00193e7003a9d0ff4d0adb1f76d5f15406e981157c2fcacb6846bc3a0e42fbf5ad4b7b069ff06363dc2994a94666602e1893489aaac0e339de6befe34a0429cf91a5d9e9b023e9078c04b7e407dc69095781cda58033529140b54205f06a97826c83ea7d419a70e0c8cf1ce3b1f003de3a999471d6d024ae65f7d8625f5a974bf1a7cb1e2b1e9e5dfc3be604f57f6859284cae6a241f4f087f5cc6dcba917d1fd79a7f0a37643c9c38f46b8a00226aef15bc10f8778dfd5e4f80627c4f5685f2d9a18300e978bd655a0aa7f15d0a06219b474230fe6e37d5bd88f1e3a2aa7a66e88d28c275c3b00ed6445a57fd89aa16cc8ff785110aff8fa78f62e44166325e0db707a0f9afec53643573df1f599a6eec3278d75d33d2387fdddd8f9d91e5b6e442291d75a4d2855afb4791e2485407b4706e4067b6ef8721ae518869e38df4e80888b8af1d6306cbdbbf212796fadf6350c97ad44496ab9222d789376d8bc65d990c0a90cd75913134381d3cd2428d0bd26a4127994e5d0e62ff5e37f346e5951091d095e6494eba5bc4f27cd45ea6f95bcc53c62c5eb63c7d4fb14458f5e787655a05d29497bf5fd7efc87578aac105e171b5950aebf061899413044def1c5f206ddda05632bd2d2b9196fee1cb89fe39a17cd0c3b033b06d3fe7e57ae0f7bf1facd2c633c4be77dc99cbbc9ea29a3a343a823bcbf5c214655b570149a941c4e07d8e88e4d0c79a3c0a2b6f15085b89d1d570e9c4a0a4562207628820c0abbfc1216b6b65e9f1355fdc3d2af0b78962b57e4c2aad0d8ea445f8a7e289fa6dc5d813df5d5d3ea3ae55f3b390d9f28060cd262d10a1cc9bb61110dcf42cf1fbf8a2c1cd23a443e4b66e424e5f29c292b0dfaf883a5a99ded7ed6e466038c7efd887d809328afc2a87a20b45c597225e78deab3b91781f28baaa3e0ef7a6a4f04bd3457c76b034eabaf361568dad614c68540adb382425d875a2dcdf330cfa1645f05eb24f05ebb4c07e6d4504082c29b5f49144adc40498b4058df1f0952cbc31ca58cd9a6f21ac6e967135664ed409436d89d0f2153c431b3eb8535d39bd7a35ba3e71e677672db77ff05c796b39befdd5d8f41c86431f47fdb85981f508e1fc0dd1bee8a729faaefd14646d8e415bf302f220daa23ba77a27427ee7a456a0168a77f310dbbce3d3fe9cf5308da0c6fcbd5e24e95cece632103a3419c237ff38686e1fdcfdf430d029f0302d8f9bdd2d70791e00f6ddc2c193fddfdf44dfa7d4d9fc252c0ce0f4d91e7f518fb5407b5f46c740bf21111ed9d92a7529528c0a6601965b58f47eea0379cc65a5f1860841154d19c00d5cc60d917d99c41874bfe6745f9aa9adb6570cadc019b1769a06e8af31854b9d63f916bfdda4394aedc13a46c4272af713bff379f80ac64f3c2618fd1d1ff9f9255e29bd47b58d5b355b6e9e735c6489d59b1a0a072dcc07fbc25ba66fd37cd268c9b74b93f4aa698898df6bb2784b4f43704ad893b63a4c7f071a9e89a28298dad967eee4f9df4d85017b9fd4b8549e61b38313f3ff1c8a3f91d4510cb2bf059dd0482f569e3fdace64a6794be608ba2387223c3baa4a211dc1d10dd857e47ca14b53d78c7950ed3b5a9f4fdce584eae813219dd028cf97cd415c532527d33a9b8439d1c662da892206547226259dfec5bf74cc8cbb4e1cd3ecd78c2ea7fc258f35fc1455c09296ec7eaa02e271bd04f112344fe0dcc286aa249f96fd9af5438b8e457bf420527865738dc1b9641048c8ea9c2205a23b5ba9659fe582559f4a20cd6a3287f0b06a3f88f95d7994cf2ee3e0528b14d463efa79eb0787aac808a614a3df7ea3a3ac71d40b2ba59bfd967872848249198fcd7933d8c70af603d4fe7f776d8ca834c6709b0d1736b2411a445486fd8234b48b356c96e046fc6ce90e27df13c675038da04744b12c2f32a26335450388bd0097899cb397f6e686c4bda6b84db96bda053031acea3ccc1ff0d764f48673cf90792492e5c926fb788c092623a641cb8cd2637e4cbd34735028f1e6e83d6c7f7ef7b4f1fc3b29710818ae5f7d0af01a67d861b0b5546ac0ba4f1555f5fec4482502d741aef2421e3679bc6b2a6322fbf21a22d7ffd9cbb2aa6d63765adc4cd83d692f4c5ba550279852267a1c3c7972ff5c7660f663641da491e35244636982de13672809d467739a12cf4f071cf24d9edd7af8e121013245936e16ef8fd119cb0d4cd06f0e440a55c3c619ee725c8cbe3e998cd845097d958500fdb716fe290d3888e22adef92651d37026e06b78eb1a67d0fc568e260d350a42cfd87f8693357349c601abbe63fc592f0ea9fe42d363a91117836ecf7b9b7afbc25431791d1091f5a1eb957454e5ad9e6de3e2d611c478d93c4cd314ac456e97315762d6339420cb70b35d885063b9f60679dda7406d1bddff6980e98a0caa51108330c594bc89b47ed192d9e9088453ca937eb6594708b871469cc09a6ce50aee850775bff57eee389d223c38e64425a71367326a80cf8984838e07a9f784ae2db6e5082e64bc8b43e9c95dd3effd85431389bf72ac3ceb51d8380b7343d933e294051ace75f97fb4e2410aa0967e5c427eaec1e631516485ac8a94850ed2527fdc0edc804278c4f38b306a63724781d7a0df85f92fa1210878027846293001754fa1b8cf1a14e1bbf3de38ee15db2ee6af47233a3fb75744f1a747ac0a74dba380f317d290dcdcf9ee9e64d34099ea733fd0d9bde3813d02b91247b57f39f2256b76278a9cf9e5702c93cf8195538676551de7d9c134681031ef8cbaf2d6ef3b1a029aa7d7e6a891975067705eba41095e3cac9fa9ecbb61590e5ee9d9dff95851174e56d27bab9e4a6d983926660b3e84c6d2f29268fd3af5d1959c51e83b0de47fd6b16235c175cfad0f0fc295d42b28a6ff6006c67d30a8448a1812f5538b31e7c1e475737e9a541a5641fcf0446e55b7011cd8a8d16f9ebe03a51df9f4b72ebb76ff5f609dc02b0ca22ce7255c7ebc4581cbdcc8d9bb56ef5e1ef56599d63b1a52641c96d93aecef761268e88f189241ff479c950dd2ecf5107e8183f21e767050ee478c87b64335b19d7fc08eba25ed8fd6013a69b53ee80bfa684187a18a2df9d6e66c6367e1a238a998ef50e280e45141f27df63c0e42a1049bd8135ee5ebb12d5d0b0a69bbe053891411d599395cd60e40f90e2c0056dc02eb5a8c954ad759bd31af8e96f6dd534487684ddd3b372902dfbba7e8716f19dda7cda752a15b0a67235dd9a0987e21f94657eea4eb8bc033cd40253b06b9370bba23b6576bee4bbbf9cb354ed3722d929c76cff6f9f84118fd3df4b52714b4b32707dec965cb76f69bc6d17e91dae6f9f933a1081e5125f7ced8f5114e32b6a9a185530353b473e688681cb384b4c33e1c8aa8bd5ffa8cfe9107f8a162f862c9fb9cdb132dbd1065411c59f013e7a5a6ecedd670bd3866923fbc0235b1acb3ecdbf440e7bab07fc2306ac9026dc24ec62de4f5a95b8e41ea293871102729881774eb6a59f851e99a64a08449a37b66d429fa1a3730b6efbaceb2a61915e0d4a4500c11038c5e0defc5668dbc7624953d4e6ea247b94e82d27e899db94362b1c60cb53bd48c40f0af212e33fc708934cbab8b6e1b90253924c03582f8a78633982a75e1bc9b7e2995b60b3d0494087de598a52c9e5d226c077285cf110e484f238498dc4f22cf5ddb292236639038ce095f8901d740277748d224418587f512982d905eb4be5d42793f85b07bba53247abcf5a8b5080ecce6337005ea9521ef02621fa24ccbb93a5fba3ffb20da2ec9f90e228bf8ae279cb390d194f52c2437b5f2cd7c3d30e30491e5cc40ecb05ace4a9b287184d443b840f3ebb06442c37443c0614261cad06c514a68b2f6f28381401064a716ef2aa5b24ae1c93532f6f76d7d6c6aa331c2910c2e8c99fb540c2730a144d321d4d66f927e247767da600b7ba9a1d693f9f1e82bc1df7c2e9da4a4b433f2f13a272d458c87348d29d831a681d6b5f52a0bf3be4d46a5cecc557d84849138a1f213777104e0429077ebedb5bf85274c236bb076f37fb0530a48374b1edf3c814dae3c9cf598c084d7ce9aafe1673939aa557210bd90b0c92d114838dfd852cb656df5590d8000000000000000701000068"], 0x13c8}, 0x0) 00:22:08 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:08 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="00004000000000022800"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:08 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x400300}}, 0x0) 00:22:08 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:22:08 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000080)=""/41) 00:22:09 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x5450, 0x0) 00:22:09 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:09 executing program 0: migrate_pages(0x0, 0x80, 0x0, &(0x7f00000000c0)=0x4) 00:22:09 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="00004000000000022800"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:09 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x8, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 00:22:09 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:09 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) 00:22:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:22:10 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001880)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001680)=[{&(0x7f0000000300)=""/166, 0xa6}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 00:22:10 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="00004000000000022800"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2724.248348][T15086] RDS: rds_bind could not find a transport for ::ffff:172.20.20.0, load rds_tcp or rds_rdma? [ 2725.239036][T21492] device hsr_slave_0 left promiscuous mode [ 2725.247023][T21492] device hsr_slave_1 left promiscuous mode [ 2725.259943][T21492] device bridge_slave_1 left promiscuous mode [ 2725.268387][T21492] bridge0: port 2(bridge_slave_1) entered disabled state [ 2725.282755][T21492] device bridge_slave_0 left promiscuous mode [ 2725.289874][T21492] bridge0: port 1(bridge_slave_0) entered disabled state [ 2725.304932][T21492] device veth1_macvtap left promiscuous mode [ 2725.310981][T21492] device veth0_macvtap left promiscuous mode [ 2725.317516][T21492] device veth1_vlan left promiscuous mode [ 2725.323404][T21492] device veth0_vlan left promiscuous mode [ 2727.693885][T21492] team0 (unregistering): Port device team_slave_1 removed [ 2727.715127][T21492] team0 (unregistering): Port device team_slave_0 removed [ 2727.738802][T21492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2727.757451][T21492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2727.830302][T21492] bond0 (unregistering): Released all slaves [ 2727.893789][T15099] IPVS: ftp: loaded support on port[0] = 21 [ 2728.100470][T15099] chnl_net:caif_netlink_parms(): no params data found [ 2728.215366][T15099] bridge0: port 1(bridge_slave_0) entered blocking state [ 2728.222720][T15099] bridge0: port 1(bridge_slave_0) entered disabled state [ 2728.233241][T15099] device bridge_slave_0 entered promiscuous mode [ 2728.252444][T15099] bridge0: port 2(bridge_slave_1) entered blocking state [ 2728.260507][T15099] bridge0: port 2(bridge_slave_1) entered disabled state [ 2728.270413][T15099] device bridge_slave_1 entered promiscuous mode [ 2728.355983][T15099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2728.376972][T15099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2728.446058][T15099] team0: Port device team_slave_0 added [ 2728.462771][T15099] team0: Port device team_slave_1 added [ 2728.508310][T15099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2728.515477][T15099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2728.544435][T15099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2728.567962][T15099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2728.575654][T15099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2728.602136][T15099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2728.667110][T15099] device hsr_slave_0 entered promiscuous mode [ 2728.682651][T15099] device hsr_slave_1 entered promiscuous mode [ 2728.690749][T15099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2728.699051][T15099] Cannot create hsr debugfs directory [ 2729.095337][T15099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2729.118071][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2729.127470][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2729.143499][T15099] 8021q: adding VLAN 0 to HW filter on device team0 [ 2729.165698][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2729.175864][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2729.185722][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 2729.193066][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2729.209072][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2729.226531][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2729.236735][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2729.246312][ T820] bridge0: port 2(bridge_slave_1) entered blocking state [ 2729.253668][ T820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2729.275165][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2729.295262][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2729.318013][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2729.327902][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2729.340576][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2729.363229][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2729.373909][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2729.415062][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2729.425331][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2729.435270][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2729.444890][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2729.459543][T15099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2729.499862][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2729.508153][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2729.530256][T15099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2729.534544][ T7104] Bluetooth: hci5: command 0x0409 tx timeout [ 2729.637890][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2729.647783][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2729.691545][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2729.701217][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2729.712332][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2729.721851][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2729.740174][T15099] device veth0_vlan entered promiscuous mode [ 2729.765568][T15099] device veth1_vlan entered promiscuous mode [ 2729.815930][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2729.825564][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2729.835611][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2729.845892][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2729.863414][T15099] device veth0_macvtap entered promiscuous mode [ 2729.888444][T15099] device veth1_macvtap entered promiscuous mode [ 2729.920350][T15099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2729.931022][T15099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2729.941847][T15099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2729.952656][T15099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2729.962757][T15099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2729.973477][T15099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2729.983687][T15099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2729.994356][T15099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2730.008866][T15099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2730.018803][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2730.028969][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2730.038912][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2730.049396][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2730.099002][T15099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2730.110107][T15099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2730.120302][T15099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2730.131005][T15099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2730.141177][T15099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2730.151950][T15099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2730.162181][T15099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2730.172929][T15099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2730.188946][T15099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2730.200074][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2730.210960][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2730.536728][T11815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2730.545999][T11815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2730.572562][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2730.650170][T21492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2730.659360][T21492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2730.668207][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2730.786116][T15329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2730.795431][T15329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2730.805086][T15329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2730.812680][T15329] batman_adv: batadv0: Removing interface: batadv_slave_1 00:22:17 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:22:17 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:17 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) 00:22:17 executing program 0: pselect6(0x40, &(0x7f0000000380), 0x0, &(0x7f0000000400)={0xffffffffffff6c21}, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={[0x7d45]}, 0x8}) 00:22:17 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x4020940d, 0x0) 00:22:17 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2731.197793][T15338] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:17 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:17 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x3}}, 0x10) 00:22:17 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000e80)=[{0x15, 0x0, 0x1}, {}, {0x6}]}) 00:22:17 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:17 executing program 0: clock_gettime(0x0, &(0x7f0000000000)={0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={r0}, 0x0) [ 2731.940362][ T3128] ieee802154 phy0 wpan0: encryption failed: -22 [ 2731.947016][ T3128] ieee802154 phy1 wpan1: encryption failed: -22 [ 2732.000153][ T34] audit: type=1326 audit(1625790138.291:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15353 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7f97549 code=0x0 00:22:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001840)=@filter={'filter\x00', 0xe, 0x8, 0x90, [], 0x0, 0x0, &(0x7f00000002c0)=[{}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x4}]}, 0xe0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 00:22:18 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:22:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) [ 2732.313778][T15352] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:18 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x1}, 0x8) 00:22:18 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:19 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:22:19 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) [ 2732.787016][ T34] audit: type=1326 audit(1625790139.081:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15353 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7f97549 code=0x0 00:22:19 executing program 2: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x1}, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 00:22:19 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x200, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) [ 2733.391176][T15377] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:19 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:20 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:20 executing program 2: syz_mount_image$afs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{}, {@dyn}]}) 00:22:20 executing program 0: syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0x200) 00:22:20 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) [ 2734.788458][T15410] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:21 executing program 2: setresuid(0xee01, 0xee01, 0x0) r0 = geteuid() setresuid(r0, 0xffffffffffffffff, 0x0) 00:22:24 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x1}, 0x8) 00:22:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x32}, 0x40) [ 2738.372747][ T405] device hsr_slave_0 left promiscuous mode [ 2738.382989][ T405] device hsr_slave_1 left promiscuous mode [ 2738.391995][ T405] device bridge_slave_1 left promiscuous mode [ 2738.399463][ T405] bridge0: port 2(bridge_slave_1) entered disabled state [ 2738.410642][ T405] device bridge_slave_0 left promiscuous mode [ 2738.417573][ T405] bridge0: port 1(bridge_slave_0) entered disabled state [ 2738.433207][ T405] device veth1_macvtap left promiscuous mode [ 2738.439635][ T405] device veth0_macvtap left promiscuous mode [ 2738.446179][ T405] device veth1_vlan left promiscuous mode [ 2738.452140][ T405] device veth0_vlan left promiscuous mode [ 2741.313354][ T405] team0 (unregistering): Port device team_slave_1 removed [ 2741.330697][ T405] team0 (unregistering): Port device team_slave_0 removed [ 2741.353338][ T405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2741.373179][ T405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2741.451333][ T405] bond0 (unregistering): Released all slaves [ 2741.525952][T15466] IPVS: ftp: loaded support on port[0] = 21 [ 2741.771581][T15466] chnl_net:caif_netlink_parms(): no params data found [ 2741.880191][T15466] bridge0: port 1(bridge_slave_0) entered blocking state [ 2741.887861][T15466] bridge0: port 1(bridge_slave_0) entered disabled state [ 2741.897825][T15466] device bridge_slave_0 entered promiscuous mode [ 2741.918613][T15466] bridge0: port 2(bridge_slave_1) entered blocking state [ 2741.926210][T15466] bridge0: port 2(bridge_slave_1) entered disabled state [ 2741.936193][T15466] device bridge_slave_1 entered promiscuous mode [ 2742.012028][T15466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2742.046421][T15466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2742.113122][T15466] team0: Port device team_slave_0 added [ 2742.127523][T15466] team0: Port device team_slave_1 added [ 2742.195631][T15466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2742.202785][T15466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2742.229424][T15466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2742.250142][T15466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2742.257508][T15466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2742.283824][T15466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2742.361233][T15466] device hsr_slave_0 entered promiscuous mode [ 2742.370431][T15466] device hsr_slave_1 entered promiscuous mode [ 2742.380688][T15466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2742.388623][T15466] Cannot create hsr debugfs directory [ 2742.727798][T15466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2742.769514][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2742.778876][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2742.795336][T15466] 8021q: adding VLAN 0 to HW filter on device team0 [ 2742.812740][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2742.823810][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2742.833688][T23538] bridge0: port 1(bridge_slave_0) entered blocking state [ 2742.841161][T23538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2742.860665][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2742.878674][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2742.889010][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2742.898857][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 2742.906437][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2742.928954][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2742.949649][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2742.970767][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2742.980949][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2742.993216][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2743.010573][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2743.021115][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2743.040912][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2743.051299][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2743.070299][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2743.080665][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2743.098083][T15466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2743.132560][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2743.140487][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2743.165538][T15466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2743.260298][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2743.270851][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2743.311588][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2743.321496][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2743.337298][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2743.347935][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2743.362627][T15466] device veth0_vlan entered promiscuous mode [ 2743.387376][T15466] device veth1_vlan entered promiscuous mode [ 2743.432144][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2743.441305][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2743.451778][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2743.462124][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2743.479288][T15466] device veth0_macvtap entered promiscuous mode [ 2743.495618][T15466] device veth1_macvtap entered promiscuous mode [ 2743.529647][T15466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2743.540466][T15466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.550859][T15466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2743.561575][T15466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.571687][T15466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2743.582367][T15466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.592416][T15466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2743.603061][T15466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.616766][T15466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2743.626042][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2743.635707][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2743.645138][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2743.654878][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2743.675589][T15466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2743.687121][T15466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.697409][T15466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2743.708188][T15466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.718336][T15466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2743.729030][T15466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.739090][T15466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2743.749876][T15466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.762994][T15466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2743.778246][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2743.788784][T23538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2744.129072][ T405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2744.137380][ T405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2744.199622][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2744.224976][ T405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2744.232918][ T405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2744.243799][ T3253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2744.329946][T15748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2744.337880][T15748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2744.354784][T15748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2744.362344][T15748] batman_adv: batadv0: Removing interface: batadv_slave_1 00:22:30 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:22:30 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:30 executing program 2: setresuid(0xee01, 0xee01, 0x0) r0 = geteuid() setresuid(r0, 0xffffffffffffffff, 0x0) 00:22:30 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b000000", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:30 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWFLOWTABLE={0x14}, @NFT_MSG_DELRULE={0x14}, @NFT_MSG_NEWSET={0x14}], {0x14}}, 0xcc}}, 0x0) 00:22:30 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x1}, 0x8) [ 2744.706954][T15756] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2744.818718][T15782] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 00:22:31 executing program 2: setresuid(0xee01, 0xee01, 0x0) r0 = geteuid() setresuid(r0, 0xffffffffffffffff, 0x0) 00:22:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x9, 0x5, &(0x7f0000000000)=@framed={{}, [@call, @ldst={0x0, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xda, &(0x7f0000000140)=""/218, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000017c0), 0x8, 0x10, 0x0}, 0x78) 00:22:32 executing program 2: setresuid(0xee01, 0xee01, 0x0) r0 = geteuid() setresuid(r0, 0xffffffffffffffff, 0x0) 00:22:32 executing program 0: setresuid(0xee01, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) 00:22:32 executing program 2: setresuid(0xee01, 0xee01, 0x0) setresuid(0x0, 0xffffffffffffffff, 0x0) 00:22:33 executing program 1: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x22c2, 0x0) 00:22:33 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:22:33 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:33 executing program 0: setresuid(0xee01, 0xee01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004b00)={0x0, 0x3, &(0x7f0000004940)=@framed, &(0x7f00000049c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:22:33 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b000000", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:33 executing program 2: setresuid(0x0, 0xffffffffffffffff, 0x0) 00:22:33 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 00:22:34 executing program 2: setresuid(0x0, 0xffffffffffffffff, 0x0) 00:22:34 executing program 0: setresuid(0x0, 0xee01, 0x0) r0 = geteuid() r1 = geteuid() r2 = geteuid() setresuid(r0, r2, r1) 00:22:34 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2747.846283][T15827] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 00:22:34 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) [ 2748.130509][T15824] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:34 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b000000", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:34 executing program 2: setresuid(0x0, 0xffffffffffffffff, 0x0) 00:22:34 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) write$rfkill(r0, &(0x7f00000000c0), 0x8) 00:22:35 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:35 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) [ 2748.837105][T15839] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 00:22:35 executing program 2: r0 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000200)={{0x77359400}, {r1, r2+60000000}}, 0x0) 00:22:35 executing program 0: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x21000484) 00:22:35 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b0000000800", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:35 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 00:22:35 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 2749.546614][T15845] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2749.797213][T15856] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2750.699260][ T405] device hsr_slave_0 left promiscuous mode [ 2750.711319][ T405] device hsr_slave_1 left promiscuous mode [ 2750.728388][ T405] device bridge_slave_1 left promiscuous mode [ 2750.735304][ T405] bridge0: port 2(bridge_slave_1) entered disabled state [ 2750.753553][ T405] device bridge_slave_0 left promiscuous mode [ 2750.760502][ T405] bridge0: port 1(bridge_slave_0) entered disabled state [ 2750.791336][ T405] device veth1_macvtap left promiscuous mode [ 2750.797742][ T405] device veth0_macvtap left promiscuous mode [ 2750.803995][ T405] device veth1_vlan left promiscuous mode [ 2750.810136][ T405] device veth0_vlan left promiscuous mode [ 2752.931926][ T405] team0 (unregistering): Port device team_slave_1 removed [ 2752.951171][ T405] team0 (unregistering): Port device team_slave_0 removed [ 2752.972001][ T405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2752.993260][ T405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2753.077143][ T405] bond0 (unregistering): Released all slaves [ 2753.403307][T15869] IPVS: ftp: loaded support on port[0] = 21 [ 2754.313705][T15869] chnl_net:caif_netlink_parms(): no params data found [ 2754.557645][T15869] bridge0: port 1(bridge_slave_0) entered blocking state [ 2754.565163][T15869] bridge0: port 1(bridge_slave_0) entered disabled state [ 2754.575301][T15869] device bridge_slave_0 entered promiscuous mode [ 2754.619644][T15869] bridge0: port 2(bridge_slave_1) entered blocking state [ 2754.627534][T15869] bridge0: port 2(bridge_slave_1) entered disabled state [ 2754.637406][T15869] device bridge_slave_1 entered promiscuous mode [ 2754.766321][T15869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2754.799275][T15869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2754.873592][T15869] team0: Port device team_slave_0 added [ 2754.887279][T15869] team0: Port device team_slave_1 added [ 2754.938975][T15869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2754.946244][T15869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2754.973194][T15869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2754.990734][T15869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2754.998026][T15869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2755.025004][T15869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2755.090576][T15869] device hsr_slave_0 entered promiscuous mode [ 2755.100580][T15869] device hsr_slave_1 entered promiscuous mode [ 2755.110139][T15869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2755.118584][T15869] Cannot create hsr debugfs directory [ 2755.325728][T15869] bridge0: port 2(bridge_slave_1) entered blocking state [ 2755.332911][T15869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2755.340863][T15869] bridge0: port 1(bridge_slave_0) entered blocking state [ 2755.348546][T15869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2755.381033][ T7106] bridge0: port 1(bridge_slave_0) entered disabled state [ 2755.390979][ T7106] bridge0: port 2(bridge_slave_1) entered disabled state [ 2755.470348][T15869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2755.496017][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2755.505603][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2755.523348][T15869] 8021q: adding VLAN 0 to HW filter on device team0 [ 2755.540762][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2755.551371][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2755.560995][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 2755.568579][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2755.588128][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2755.598345][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2755.609057][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 2755.616653][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2755.643000][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2755.665420][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2755.685672][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2755.696754][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2755.711730][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2755.728162][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2755.739039][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2755.757880][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2755.768111][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2755.789000][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2755.799363][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2755.817167][T15869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2755.858560][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2755.866464][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2755.888905][T15869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2755.994705][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2756.005088][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2756.043344][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2756.053848][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2756.072449][T15869] device veth0_vlan entered promiscuous mode [ 2756.090566][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2756.100250][T31817] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2756.121319][T15869] device veth1_vlan entered promiscuous mode [ 2756.163773][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2756.174314][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2756.184070][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2756.194325][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2756.211046][T15869] device veth0_macvtap entered promiscuous mode [ 2756.230823][T15869] device veth1_macvtap entered promiscuous mode [ 2756.266240][T15869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2756.278082][T15869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2756.288282][T15869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2756.299029][T15869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2756.309274][T15869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2756.320053][T15869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2756.330228][T15869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2756.341233][T15869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2756.354967][T15869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2756.367737][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2756.377850][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2756.387682][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2756.398269][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2756.415360][T15869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2756.426165][T15869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2756.438133][T15869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2756.448777][T15869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2756.458986][T15869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2756.469682][T15869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2756.479776][T15869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2756.490513][T15869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2756.504494][T15869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2756.516130][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2756.526575][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2756.795274][T31242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2756.803208][T31242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2756.818557][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2756.945861][T31242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2756.953810][T31242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2756.962567][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2757.072874][T16135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2757.081907][T16135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2757.093815][T16135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2757.101685][T16135] batman_adv: batadv0: Removing interface: batadv_slave_1 00:22:43 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:22:43 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 00:22:43 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b0000000800", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:43 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 00:22:43 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 00:22:43 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2757.578501][T16145] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2757.645342][T16149] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 00:22:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 00:22:44 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 00:22:44 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:44 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b0000000800", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x1000) [ 2758.230300][T16162] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2758.271204][T16164] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 00:22:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x5, 0xa, 0x32}, 0x40) 00:22:44 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:22:44 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 00:22:44 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b000000080003", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:44 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:44 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000080)={0x0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001840)=@filter={'filter\x00', 0xe, 0x8, 0x90, [], 0x0, 0x0, &(0x7f00000002c0)=[{}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x4}]}, 0xe0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000018c0)={0x0, @loopback, 0x0, 0x0, 'rr\x00'}, 0x2c) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6760, &(0x7f0000001bc0)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001c40), &(0x7f0000001c80)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000002f00)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000002e80)}, 0x0) 00:22:45 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) [ 2758.971568][T16180] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 00:22:45 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) [ 2759.027435][T16181] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2759.064886][T16182] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 00:22:45 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b000000080003", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:45 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2759.301501][T16187] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 00:22:45 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:22:45 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$pppoe(0x18, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @dev, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) dup(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) 00:22:45 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 00:22:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) [ 2759.682540][T16196] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2759.689975][T16197] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:46 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:46 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b000000080003", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:46 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:22:46 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) [ 2760.685691][T16241] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 00:22:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xda, &(0x7f0000000140)=""/218, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:22:48 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) [ 2761.874299][T16236] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:48 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:48 executing program 2: io_setup(0x4, &(0x7f00000004c0)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000040)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 00:22:48 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:22:48 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:48 executing program 0: pselect6(0x700, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) 00:22:48 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 00:22:49 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:49 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2287, 0x7fffffffefff) 00:22:49 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xda, &(0x7f0000000140)=""/218, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:22:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 00:22:49 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:22:49 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:49 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:49 executing program 2: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0xee00, 0xffffffffffffffff, 0x0, 0xee01}}) 00:22:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 00:22:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 00:22:50 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:50 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:50 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:22:50 executing program 2: socket$unix(0x1, 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) 00:22:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 00:22:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 00:22:50 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:50 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x1, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x1}]}, 0x18}}, 0x0) 00:22:51 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:22:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) 00:22:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 00:22:51 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:51 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2765.074806][T16331] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:22:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') pread64(r0, 0x0, 0x0, 0x0) 00:22:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) 00:22:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 00:22:51 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:51 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:51 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:22:52 executing program 2: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@profile={'changeprofile ', '-\x06\\\x00'}, 0x12) 00:22:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) [ 2765.936717][T16357] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:52 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:52 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:52 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001580)={&(0x7f00000002c0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000580)=""/4096, 0x1000}, 0x40010040) 00:22:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFNAME={0x4, 0x4, 'wpan1\x00'}]}, 0x2c}}, 0x0) 00:22:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 00:22:52 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2766.678523][T16374] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:53 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:53 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:53 executing program 0: add_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, &(0x7f0000000000)="8a00", 0x2, 0xfffffffffffffffd) 00:22:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 00:22:53 executing program 2: timer_create(0x2, 0x0, &(0x7f00000003c0)) [ 2767.149034][T16388] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:53 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:53 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:53 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:22:53 executing program 0: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RSTATFS(r0, &(0x7f0000000080)={0x43}, 0x43) write$P9_RSTATFS(r0, &(0x7f0000000140)={0x43}, 0x43) 00:22:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 00:22:54 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', '\x00'}, 0x6) 00:22:54 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) [ 2767.904828][T16401] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:54 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 00:22:54 executing program 0: r0 = getpid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x30, 0x4, @tid=r0}, &(0x7f00000000c0)) 00:22:54 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:22:54 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:54 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 2768.515252][T16418] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 00:22:55 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2768.807959][T16426] input: syz1 as /devices/virtual/input/input112 00:22:55 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x40002, 0x0) [ 2768.910045][T16434] input: syz1 as /devices/virtual/input/input113 00:22:55 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) [ 2769.240063][T16446] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:55 executing program 2: add_key$fscrypt_v1(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "41ac53638ad208479034e6d58d9611e4917039e84304224e44ec977987b7fe8fa950be6a15c8de34a7a6c66543f6160e0ca7d5fc58a39cb2dda2be6b1e2fbdfe"}, 0x48, 0xfffffffffffffffd) 00:22:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 00:22:55 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:22:55 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:55 executing program 0: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @dev={0xac, 0x14, 0x14, 0x39}, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000300)=""/207, 0xcf}], 0x1, 0x0, 0x0) 00:22:55 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000032000103"], 0x14}}, 0x0) [ 2769.800606][T16458] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x5, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 00:22:56 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:56 executing program 0: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @dev={0xac, 0x14, 0x14, 0x39}, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000300)=""/207, 0xcf}], 0x1, 0x0, 0x0) 00:22:56 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) [ 2770.217306][T16470] tc_dump_action: action bad kind 00:22:56 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:22:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@gettaction={0x28, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x28}}, 0x0) 00:22:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x5, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) [ 2770.505204][T16473] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:57 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:57 executing program 0: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @dev={0xac, 0x14, 0x14, 0x39}, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000300)=""/207, 0xcf}], 0x1, 0x0, 0x0) 00:22:57 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:57 executing program 2: socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f0000000080)={0x8}, 0x0, 0x0, 0x0, 0x0) 00:22:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x5, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 00:22:57 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2771.191484][T16491] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:57 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:57 executing program 0: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @dev={0xac, 0x14, 0x14, 0x39}, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000300)=""/207, 0xcf}], 0x1, 0x0, 0x0) 00:22:57 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x5, 0xa, 0x201}], {0x14}}, 0x3c}}, 0x0) 00:22:57 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb06131d540000000000002200"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0xffffffff) read(r0, &(0x7f0000000480)=""/234, 0xea) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) [ 2771.851115][T16509] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:58 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0000000000020000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1e003300a0142000090211000001080211"], 0x40}}, 0x0) 00:22:58 executing program 0: socket(0x10, 0x3, 0x401) 00:22:58 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:22:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x5, 0xa, 0x201}], {0x14}}, 0x3c}}, 0x0) 00:22:58 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002700)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}, {{&(0x7f0000002240)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002780)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x100}}], 0x10}}], 0x2, 0x0) [ 2772.389487][T16525] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x5, 0xa, 0x201}], {0x14}}, 0x3c}}, 0x0) 00:22:58 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) 00:22:58 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:22:59 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 00:22:59 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2772.961796][T16539] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2773.016226][ T34] audit: type=1800 audit(1625790179.310:77): pid=16540 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=14511 res=0 errno=0 00:22:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1}, 0x24}}, 0x0) 00:22:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1e, 0x0, @private0}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b4560a117fffffff81004e220e227f000096d12d7b4201925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000", 0x58}], 0x1) 00:22:59 executing program 2: r0 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r0) add_key(&(0x7f0000000300)='logon\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="b6", 0x1, r1) 00:22:59 executing program 3: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2773.387824][ T34] audit: type=1800 audit(1625790179.680:78): pid=16542 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=14666 res=0 errno=0 00:22:59 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 00:22:59 executing program 4: add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x34, 0xffffffffffffffff) [ 2773.740414][T16556] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@delsa={0x3c, 0x11, 0x1, 0x0, 0x0, {@in6=@mcast2, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in6=@remote}]}, 0x3c}}, 0x0) 00:23:00 executing program 2: process_vm_writev(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000400)=""/76, 0x4c}], 0x1, &(0x7f0000003b40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 00:23:00 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:00 executing program 3: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:23:00 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x80000000000) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) 00:23:00 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 00:23:00 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000500)=ANY=[], 0x1c) sendfile(r0, r0, &(0x7f0000000080), 0x1000ffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10) [ 2774.454259][T16574] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:00 executing program 2: add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="0e", 0x1, 0xfffffffffffffffb) 00:23:01 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', 0x0}) 00:23:01 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:01 executing program 3: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:23:01 executing program 2: add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x2}) 00:23:01 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@delsa={0x3c, 0x11, 0x1, 0x0, 0x0, {@in6=@mcast2}, [@srcaddr={0x14, 0xd, @in6=@remote}]}, 0x3c}}, 0x0) [ 2775.253301][T16597] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:02 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 00:23:02 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x3, 0x10, 0x52, &(0x7f0000000080)="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"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) 00:23:02 executing program 4: add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="c1", 0x1, 0xfffffffffffffffb) 00:23:02 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 00:23:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@gettaction={0x18, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) [ 2775.999828][T16616] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2776.204371][T16628] input: syz1 as /devices/virtual/input/input114 [ 2776.300549][T16635] input: syz1 as /devices/virtual/input/input115 00:23:02 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 00:23:02 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 00:23:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0x0, 0x0, "08649b01b56824ef"}) 00:23:03 executing program 0: setresuid(0xee01, 0xee01, 0xee00) 00:23:03 executing program 1: socket$unix(0x1, 0x2, 0x0) pselect6(0x40, &(0x7f0000000080)={0x8}, 0x0, 0x0, 0x0, 0x0) [ 2776.852175][T16650] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:03 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:03 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCEXCL(r1, 0x540c) ioctl$TCSBRKP(r0, 0x5425, 0x0) 00:23:03 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 00:23:03 executing program 2: clock_gettime(0x12775e81ab5f83ad, 0x0) 00:23:03 executing program 0: r0 = socket$inet(0x2, 0x3, 0xff) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000000)={'wg0\x00', @ifru_ivalue}) 00:23:03 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2777.579843][T16673] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:04 executing program 0: syz_emit_ethernet(0x429, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c2000002bbbbbbbbbbbb86dd6c1f979a03f306fffc000000000000000000000000000000fe80"], 0x0) 00:23:04 executing program 2: r0 = socket$inet(0x2, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8953, 0x0) 00:23:04 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 00:23:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0xf8, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'rose0\x00', 'sit0\x00', {}, {}, 0x0, 0x6}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="0eaade962da8"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 00:23:04 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x1, 0x9, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40) [ 2778.225575][T16693] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0x68, 0x0, &(0x7f0000000140)) 00:23:04 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f000000b400)={'vlan0\x00', @ifru_addrs=@xdp}) 00:23:04 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:04 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006c40)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000080)="d35aad2656cb0ae774f91674911e5e95860f7d3e379db7a45331b5882064803a63b0164799e90f0daa412bc8807fbadc40b245aba44cf8d9c4e7491c4588d0983ef5af7e49745081cd99e9b9561bd56571d033c7b61cc6b4278fb568224d5b0b38dec9d1bfd3af7e9972df33a1de76871e2531ea76fbc7077b55460a12cec34c17fede2200407617af06b0f2555d66bc19a4ec1efcde9acae6f13e60babaf0eced788ae17991d139864ebc568311ecea38e98b3df4bff07c26a46756276796e136fc9889c6957d0a124b55a107fd0d5491f034bb87ee68bb0f7babfcd3691cc8d88ee86e19d22c29da48a3b602fb62f112", 0xf1}, {&(0x7f0000000180)="c7bedf5ad873ccfe3e4d4ce0e6a0790a43d7d4e84faa197a9621bc9e4a222d016df666ac2883e61c769b6cbe6ad0118e7b2e7321f1b4b27e44fe3c4a47374d0e5ca2b2c5d2587a96072ff991e3eb6889fc8a21c0a4da6bc9ce956f2c7e87ef53cb3857ed76ff8364ceffdbf41c3a37e283522223688cb8ac86bc83480c00faf8448e69e15c122fcc90a4dce21ce2cd2267b5ef5063d835b78bb73261bd369acb5de58d8d6bed9d480b0527ed0638cbad43489d1eca11bde2a14ffa151586ef773e28701055ec8e11917efaca36548d9f", 0xd0}, {&(0x7f0000000280)="268f3f06d240d93d6707aeb05997b2e5d0189f098f136c249f0025eaf4ed51f39136728d336bc37da2a6b3457914e0ce0816b56bc7ae55ef518ad940e8eeb00bcb68fbebdae9528850c7e2c2959e800b1580a4530271bfb1", 0x58}, {&(0x7f0000000300)="95bd1083ee8c5c714b99a8", 0xb}, {&(0x7f0000000340)="377ffd449e6c7d15d886be802e4c495fd52e2946bf374edd09464599bb6eb12bddb2d227dfddfa323a39a6cbcf398642862bae451ed520cbe68c7414832d9462049a796e7f3bf776541e14d81106f6e7f8224794e2539b132387daaf4c4a801d95628e726f608fb437adf57a3f5b4f71566db5e340ad665b2754a6f464e06a98bd39ff82ca09fdc5ad7f7ae02ffc5a32f3df57ae4aeea70982352030f0080519ef683f049a1cbfd3", 0xa8}, {&(0x7f0000000400)="19a003255465e5d1b0990eca95d6c8915fec7a293e44ec44e7d3881bda8375d348ed5bb06b1b3095be0ae6195556d30ceed99b3f283a161734a8de2c3170d05213417f34bf4d5f6b882a", 0x4a}, {&(0x7f0000000480)="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", 0x297}], 0x7}}], 0x1, 0x0) 00:23:04 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 00:23:05 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x2000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) 00:23:05 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @private1, @remote}}) 00:23:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 2778.873058][T16713] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x11100) 00:23:05 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:05 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 00:23:05 executing program 2: syz_emit_ethernet(0x5a, &(0x7f0000000000)={@dev, @multicast, @val={@void}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "73fecbf6f6b1f1dd36a339d661a68795f16aac2fde48ed3dbfb2eda00e9f8172472b88fc7e10ff770623cae5b01c5e09589270ace6e848f7df12d451a233676f"}}}}, 0x0) 00:23:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[{0x10}, {0x10}], 0x20}, 0x0) 00:23:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x7, 0x4, 0x9000000, 0x2, 0x0, 0x1}, 0x40) [ 2779.504859][T16733] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:05 executing program 4: r0 = socket$inet(0x2, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x894c, 0x0) 00:23:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8982, &(0x7f00000000c0)={'gre0\x00', 0x0}) 00:23:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x2, 0x0, 0xfffffff7}, 0x40) 00:23:06 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000000c0)={@dev}, 0x14) 00:23:06 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) 00:23:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x40) [ 2780.270544][T16761] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000002100)=[@pktinfo={{0x24, 0x29, 0x3e, {@private0}}}], 0x28}}], 0x2, 0x0) 00:23:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003d80)={0x18, 0x0, 0x3, 0x201, 0x70bd28, 0x25dfdbfb, {}, [@generic='M']}, 0x18}, 0x1, 0x0, 0x0, 0x6048005}, 0x400c006) 00:23:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}) 00:23:06 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:06 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) 00:23:07 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @empty}}) [ 2780.670260][T16774] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:23:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x890d, 0x0) 00:23:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5411, &(0x7f0000000000)) 00:23:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000040601"], 0x1c}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000040, &(0x7f0000000300)=@xdp, 0x80) [ 2780.936186][T16778] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2781.181634][T16793] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:23:07 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x100000, 0x800}, 0x20) 00:23:07 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) 00:23:07 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) 00:23:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006c40)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000080)="d3", 0x1}], 0x1}}], 0x1, 0x4891) 00:23:07 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:07 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8931, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) [ 2781.684800][T16802] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x0, 0x0, 0xfffffff7}, 0x40) 00:23:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000005b80)={'ip6gre0\x00', &(0x7f0000005b00)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @rand_addr=' \x01\x00'}}) 00:23:08 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000002100)=[@pktinfo={{0x24, 0x29, 0x1600bd75, {@private0}}}], 0x28}}], 0x2, 0x0) 00:23:08 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32], 0x28}}, 0x0) 00:23:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0xc0189436, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}}}) 00:23:08 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x0, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="f4000000020201"], 0xf4}}, 0x0) [ 2782.354781][T16826] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002500)={0x14, r1, 0x401}, 0x14}}, 0x0) [ 2782.491051][T16830] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r0, 0x1, 0x0, 0x0, 0x0) 00:23:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2e, 0x0, 0x0) 00:23:09 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32], 0x28}}, 0x0) [ 2782.701005][T16835] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. 00:23:09 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 00:23:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8917, &(0x7f00000000c0)={'gre0\x00', 0x0}) 00:23:09 executing program 0: syz_emit_ethernet(0x1e, &(0x7f0000000000)={@remote, @local, @void, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "1b65d40c60f4e2c2"}}}}, 0x0) 00:23:09 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x0, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2783.080913][T16847] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8}]}, 0x1c}}, 0x0) [ 2783.201932][T16850] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:09 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32], 0x28}}, 0x0) 00:23:09 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000001b40)={'ip6gre0\x00', 0x0}) 00:23:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, 0x0) 00:23:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) 00:23:10 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x0, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 2783.756171][T16869] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2783.849111][T16873] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x0, 0xb0f}, 0x40) 00:23:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xb, 0x0, 0x0, 0x8, 0x1}, 0x40) 00:23:10 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) 00:23:10 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x10}, 0x40) 00:23:10 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local}}) [ 2784.366204][T16893] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000021c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @private2}, 0x1c, 0x0}}], 0x2, 0x0) 00:23:10 executing program 0: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 00:23:10 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:10 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000002100)=[@pktinfo={{0x24, 0x11, 0x32, {@private0}}}], 0x28}}], 0x2, 0x0) 00:23:10 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) 00:23:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xff, 0x401, 0x7}, 0x40) 00:23:11 executing program 1: syz_emit_ethernet(0x429, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c2000002bbbbbbbbbbbb86dd6c"], 0x0) 00:23:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x1, 0x0, &(0x7f0000000040)) 00:23:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_virt_wifi\x00', &(0x7f0000000080)=@ethtool_stats}) 00:23:11 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:11 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) 00:23:11 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006c40)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote, 0x3}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000080)="d35aad2656cb0ae774f91674911e5e95860f7d3e379db7a45331b5882064803a63b0164799e90f0daa412bc8807fbadc40b245aba44cf8d9c4e7491c4588d0983ef5af7e49745081cd99e9b9561bd56571d033c7b61cc6b4278fb568224d5b0b38dec9d1bfd3af7e9972df33a1de76871e2531ea76fbc7077b55460a12cec34c17fede2200407617af06b0f2555d66bc19a4ec1efcde9acae6f13e60babaf0eced788ae17991d139864ebc568311ecea38e98b3df4bff07c26a46756276796e136fc9889c6957d0a124b55a107fd0d5491f034bb87ee68bb0f7babfcd3691cc8d88ee86e19d22c29da48a3b602fb62f112", 0xf1}, {&(0x7f0000000180)="c7bedf5ad873ccfe3e4d4ce0e6a0790a43d7d4e84faa197a9621bc9e4a222d016df666ac2883e61c769b6cbe6ad0118e7b2e7321f1b4b27e44fe3c4a47374d0e5ca2b2c5d2587a96072ff991e3eb6889fc8a21c0a4da6bc9ce956f2c7e87ef53cb3857ed76ff8364ceffdbf41c3a37e283522223688cb8ac86bc83480c00faf8448e69e15c122fcc90a4dce21ce2cd2267b5ef5063d835b78bb73261bd369acb5de58d8d6bed9d480b0527ed0638cbad43489d1eca11bde2a14ffa151586ef773e28701055ec8e11917efaca36548d9f", 0xd0}, {&(0x7f0000000280)="268f3f06d240d93d6707aeb05997b2e5d0189f098f136c249f0025eaf4ed51f39136728d336bc37da2a6b3457914e0ce0816b56bc7ae55ef518ad940e8eeb00bcb68fbebdae9528850c7e2c2959e800b1580a4530271bfb1", 0x58}, {&(0x7f0000000340)="377ffd449e6c7d15d886be802e4c495fd52e2946bf374edd09464599bb6eb12bddb2d227dfddfa323a39a6cbcf398642862bae451ed520cbe68c7414832d9462049a796e7f3bf776541e14d81106f6e7f8224794e2539b132387daaf4c4a801d95628e726f608fb437adf57a3f5b4f71566db5e340ad665b2754a6f464e06a98bd39ff82ca09fdc5ad7f7ae02ffc5a32f3df57ae4aeea70982352030f0080519ef683f049a1cbfd3", 0xa8}, {&(0x7f0000000400)="19a003255465e5d1b0990eca95d6c8915fec7a293e44ec44e7d3881bda8375d348ed5bb06b1b3095be0ae6195556d30ceed99b3f283a161734a8de2c3170d05213417f34bf4d5f6b882a", 0x4a}, {&(0x7f0000000480)="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", 0x28a}], 0x6}}], 0x1, 0x0) 00:23:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f0000001100)="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", 0x108) 00:23:11 executing program 1: syz_emit_ethernet(0x34, &(0x7f0000000040)={@random="0ec4081c8c56", @multicast, @val, {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@random, @random="c485f8af2e3f"}, {@broadcast, @current}}}}}, 0x0) 00:23:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:23:12 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:12 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006c40)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote, 0x3}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000080)="d35aad2656cb0ae774f91674911e5e95860f7d3e379db7a45331b5882064803a63b0164799e90f0daa412bc8807fbadc40b245aba44cf8d9c4e7491c4588d0983ef5af7e49745081cd99e9b9561bd56571d033c7b61cc6b4278fb568224d5b0b38dec9d1bfd3af7e9972df33a1de76871e2531ea76fbc7077b55460a12cec34c17fede2200407617af06b0f2555d66bc19a4ec1efcde9acae6f13e60babaf0eced788ae17991d139864ebc568311ecea38e98b3df4bff07c26a46756276796e136fc9889c6957d0a124b55a107fd0d5491f034bb87ee68bb0f7babfcd3691cc8d88ee86e19d22c29da48a3b602fb62f112", 0xf1}, {&(0x7f0000000180)="c7bedf5ad873ccfe3e4d4ce0e6a0790a43d7d4e84faa197a9621bc9e4a222d016df666ac2883e61c769b6cbe6ad0118e7b2e7321f1b4b27e44fe3c4a47374d0e5ca2b2c5d2587a96072ff991e3eb6889fc8a21c0a4da6bc9ce956f2c7e87ef53cb3857ed76ff8364ceffdbf41c3a37e283522223688cb8ac86bc83480c00faf8448e69e15c122fcc90a4dce21ce2cd2267b5ef5063d835b78bb73261bd369acb5de58d8d6bed9d480b0527ed0638cbad43489d1eca11bde2a14ffa151586ef773e28701055ec8e11917efaca36548d9f", 0xd0}, {&(0x7f0000000280)="268f3f06d240d93d6707aeb05997b2e5d0189f098f136c249f0025eaf4ed51f39136728d336bc37da2a6b3457914e0ce0816b56bc7ae55ef518ad940e8eeb00bcb68fbebdae9528850c7e2c2959e800b1580a4530271bfb1", 0x58}, {&(0x7f0000000340)="377ffd449e6c7d15d886be802e4c495fd52e2946bf374edd09464599bb6eb12bddb2d227dfddfa323a39a6cbcf398642862bae451ed520cbe68c7414832d9462049a796e7f3bf776541e14d81106f6e7f8224794e2539b132387daaf4c4a801d95628e726f608fb437adf57a3f5b4f71566db5e340ad665b2754a6f464e06a98bd39ff82ca09fdc5ad7f7ae02ffc5a32f3df57ae4aeea70982352030f0080519ef683f049a1cbfd3", 0xa8}, {&(0x7f0000000400)="19a003255465e5d1b0990eca95d6c8915fec7a293e44ec44e7d3881bda8375d348ed5bb06b1b3095be0ae6195556d30ceed99b3f283a161734a8de2c3170d05213417f34bf4d5f6b882a", 0x4a}, {&(0x7f0000000480)="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", 0x28a}], 0x6}}], 0x1, 0x0) 00:23:12 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffff"], 0x28}}, 0x0) 00:23:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000480)=@req={0x28, &(0x7f0000000440)={'sit0\x00', @ifru_addrs=@xdp={0x2c, 0x0, 0x0}}}) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000002100)=[@pktinfo={{0x24, 0x29, 0x32, {@private0, r2}}}], 0x28}}], 0x2, 0x0) 00:23:12 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'macvlan0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x20, 0x6, "ab8759f18c01"}}) [ 2786.279009][T16946] __nla_validate_parse: 5 callbacks suppressed [ 2786.279077][T16946] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000020c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x7ffffff7) 00:23:12 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006c40)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote, 0x3}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000080)="d35aad2656cb0ae774f91674911e5e95860f7d3e379db7a45331b5882064803a63b0164799e90f0daa412bc8807fbadc40b245aba44cf8d9c4e7491c4588d0983ef5af7e49745081cd99e9b9561bd56571d033c7b61cc6b4278fb568224d5b0b38dec9d1bfd3af7e9972df33a1de76871e2531ea76fbc7077b55460a12cec34c17fede2200407617af06b0f2555d66bc19a4ec1efcde9acae6f13e60babaf0eced788ae17991d139864ebc568311ecea38e98b3df4bff07c26a46756276796e136fc9889c6957d0a124b55a107fd0d5491f034bb87ee68bb0f7babfcd3691cc8d88ee86e19d22c29da48a3b602fb62f112", 0xf1}, {&(0x7f0000000180)="c7bedf5ad873ccfe3e4d4ce0e6a0790a43d7d4e84faa197a9621bc9e4a222d016df666ac2883e61c769b6cbe6ad0118e7b2e7321f1b4b27e44fe3c4a47374d0e5ca2b2c5d2587a96072ff991e3eb6889fc8a21c0a4da6bc9ce956f2c7e87ef53cb3857ed76ff8364ceffdbf41c3a37e283522223688cb8ac86bc83480c00faf8448e69e15c122fcc90a4dce21ce2cd2267b5ef5063d835b78bb73261bd369acb5de58d8d6bed9d480b0527ed0638cbad43489d1eca11bde2a14ffa151586ef773e28701055ec8e11917efaca36548d9f", 0xd0}, {&(0x7f0000000280)="268f3f06d240d93d6707aeb05997b2e5d0189f098f136c249f0025eaf4ed51f39136728d336bc37da2a6b3457914e0ce0816b56bc7ae55ef518ad940e8eeb00bcb68fbebdae9528850c7e2c2959e800b1580a4530271bfb1", 0x58}, {&(0x7f0000000340)="377ffd449e6c7d15d886be802e4c495fd52e2946bf374edd09464599bb6eb12bddb2d227dfddfa323a39a6cbcf398642862bae451ed520cbe68c7414832d9462049a796e7f3bf776541e14d81106f6e7f8224794e2539b132387daaf4c4a801d95628e726f608fb437adf57a3f5b4f71566db5e340ad665b2754a6f464e06a98bd39ff82ca09fdc5ad7f7ae02ffc5a32f3df57ae4aeea70982352030f0080519ef683f049a1cbfd3", 0xa8}, {&(0x7f0000000400)="19a003255465e5d1b0990eca95d6c8915fec7a293e44ec44e7d3881bda8375d348ed5bb06b1b3095be0ae6195556d30ceed99b3f283a161734a8de2c3170d05213417f34bf4d5f6b882a", 0x4a}, {&(0x7f0000000480)="60d5455bff7e13434890c71cab783efd08076d1f03c40761371fee1716cb96575e7c3cc17b903d5b6aadfff0059e922651d54583e6074f97cc57bd16feb4c64add53b43ced8cd7d165b32d1b3c8582484ecda9ebb0f0ecff331528f59df35ce82a069d58d64d503e1e4530a43794196d6c9d1ee2df46dc6408feeb8afc9020348fa276c40faf88cdf946c0801b979bdd5baab875f440d587d3f51c82d4ec2d6551662b009cb3446733eed79b3cb4cf031cb202b0d4cdeb22fbbd8aa6b98a6d23acb08dd5d0d365e38bffb12e96279b358274109d6413672f770f9a872f71a6e5ec40577497e870c5f20aa7d3e77bf66f42e5e59d6dd466757cc8b56ced0004bc7176a293ec7fe73b6efdb9033b10eca3bd6a6559c8241e14683385b46d9f0a756f953bd9e38167ae147d9903f7e5d3ac0dc943eb166be1c835aa96eda0106afb223db02fd66f5816798eec5b960ac946ee315625fc9ee433ddfb703e9e2a12dfba9a66512a3898237f305ac7611a09356fe987cba420ad256c478cf0db857123b3b136d9519071ba17db26cb68f7c25a6d356e46fe95f20ef9a78cdf553b638169d0bf3ca289a2d9214d649bbecc628184653e3d07929a3c897a82b9efd7c8f38bf7624efb55ea80848930f906493fa4d1a22acd312044bb5040e2f1dcfd83c2892968757dcfac2569779264912d36546566218771f21b64a449b8f2c28f8579a46215d5a572ed56ddbccc4f89add47f91bb90439712d44c203fae531105a6c36b4fca52d3f1636201ad1a583c897a8dea42dd293593ec82dea93ba3e9113a2a8019b81d8756931cde4ddf3ecbcd42dacb7450f2af0a2fa675e517177721292a1c348c56a410e22dc4a4171cb7dd281ae628ba6a16329ad0426d487092f77267b1abaa035be27c17d36c", 0x28a}], 0x6}}], 0x1, 0x0) [ 2786.458159][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:12 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:13 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffff"], 0x28}}, 0x0) 00:23:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@hoplimit_2292={{0x14}}, @hoplimit_2292={{0x14}}], 0x30}}], 0x1, 0x0) 00:23:13 executing program 2: syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@broadcast, @random="b8b0e03fdec9", @val={@void, {0x8100, 0x6}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @link_local, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) 00:23:13 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x0, 0x4}, 0x20) 00:23:13 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006c40)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote, 0x3}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000080)="d35aad2656cb0ae774f91674911e5e95860f7d3e379db7a45331b5882064803a63b0164799e90f0daa412bc8807fbadc40b245aba44cf8d9c4e7491c4588d0983ef5af7e49745081cd99e9b9561bd56571d033c7b61cc6b4278fb568224d5b0b38dec9d1bfd3af7e9972df33a1de76871e2531ea76fbc7077b55460a12cec34c17fede2200407617af06b0f2555d66bc19a4ec1efcde9acae6f13e60babaf0eced788ae17991d139864ebc568311ecea38e98b3df4bff07c26a46756276796e136fc9889c6957d0a124b55a107fd0d5491f034bb87ee68bb0f7babfcd3691cc8d88ee86e19d22c29da48a3b602fb62f112", 0xf1}, {&(0x7f0000000180)="c7bedf5ad873ccfe3e4d4ce0e6a0790a43d7d4e84faa197a9621bc9e4a222d016df666ac2883e61c769b6cbe6ad0118e7b2e7321f1b4b27e44fe3c4a47374d0e5ca2b2c5d2587a96072ff991e3eb6889fc8a21c0a4da6bc9ce956f2c7e87ef53cb3857ed76ff8364ceffdbf41c3a37e283522223688cb8ac86bc83480c00faf8448e69e15c122fcc90a4dce21ce2cd2267b5ef5063d835b78bb73261bd369acb5de58d8d6bed9d480b0527ed0638cbad43489d1eca11bde2a14ffa151586ef773e28701055ec8e11917efaca36548d9f", 0xd0}, {&(0x7f0000000280)="268f3f06d240d93d6707aeb05997b2e5d0189f098f136c249f0025eaf4ed51f39136728d336bc37da2a6b3457914e0ce0816b56bc7ae55ef518ad940e8eeb00bcb68fbebdae9528850c7e2c2959e800b1580a4530271bfb1", 0x58}, {&(0x7f0000000340)="377ffd449e6c7d15d886be802e4c495fd52e2946bf374edd09464599bb6eb12bddb2d227dfddfa323a39a6cbcf398642862bae451ed520cbe68c7414832d9462049a796e7f3bf776541e14d81106f6e7f8224794e2539b132387daaf4c4a801d95628e726f608fb437adf57a3f5b4f71566db5e340ad665b2754a6f464e06a98bd39ff82ca09fdc5ad7f7ae02ffc5a32f3df57ae4aeea70982352030f0080519ef683f049a1cbfd3", 0xa8}, {&(0x7f0000000400)="19a003255465e5d1b0990eca95d6c8915fec7a293e44ec44e7d3881bda8375d348ed5bb06b1b3095be0ae6195556d30ceed99b3f283a161734a8de2c3170d05213417f34bf4d5f6b882a", 0x4a}, {&(0x7f0000000480)="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", 0x28a}], 0x6}}], 0x1, 0x0) [ 2787.148559][T16971] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:13 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) [ 2787.224362][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:13 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:13 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000640), 0x8) 00:23:13 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffff"], 0x28}}, 0x0) 00:23:13 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 00:23:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x18, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 00:23:14 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000040)=@raw=[@map_val], &(0x7f00000000c0)='GPL\x00', 0x7, 0xc7, &(0x7f0000000100)=""/199, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2787.938356][T16989] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:14 executing program 4: r0 = socket(0x11, 0xa, 0x0) getsockname(r0, 0x0, &(0x7f0000000200)) 00:23:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, &(0x7f0000000080)) 00:23:14 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2788.084804][T16996] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:14 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000100)=0x10000, 0x4) 00:23:14 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff0800"], 0x28}}, 0x0) 00:23:14 executing program 1: bpf$MAP_CREATE(0x14, &(0x7f0000000000), 0x40) 00:23:14 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x0, 0x0, 0xa, 0x0, 0x1}, 0x40) [ 2788.583926][T17010] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(r0, &(0x7f0000006c40)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) 00:23:15 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:15 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 00:23:15 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff0800"], 0x28}}, 0x0) 00:23:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x7, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x40) 00:23:15 executing program 4: bpf$MAP_CREATE(0x4, 0x0, 0x0) [ 2789.211170][T17029] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:15 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x2041, 0x0, 0x0) 00:23:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000020c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote, 0x8}, 0x1c, 0x0}}], 0x1, 0x7ffffff7) 00:23:15 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:15 executing program 4: bpf$MAP_CREATE(0x19, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 00:23:15 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff0800"], 0x28}}, 0x0) 00:23:16 executing program 0: socket(0x11, 0x0, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba7860ac5cf65ac60aded8974895abaff4b4834ff930b3f1e0b02bd67aa030595eecc7a9541aa3b77e758044ab4ea6f7ae55d88fecf90809750ba6746bec66ba", 0x88012, 0x20c49a, 0x0, 0x27) [ 2789.833709][T17044] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:16 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb0b522ee96b05a6a}, 0x40) 00:23:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0xfffffffffffffcda}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) 00:23:16 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001000)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000940)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000004100)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffffff7}}], 0x18}}], 0x2, 0x0) 00:23:16 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200"], 0x28}}, 0x0) 00:23:16 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2790.244472][T17057] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 00:23:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0xfffffffffffffcda}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) 00:23:16 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200"], 0x28}}, 0x0) 00:23:17 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x1, 0x9, 0x6, 0x3, 0x9, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x40) 00:23:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8913, &(0x7f0000000000)) 00:23:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0xfffffffffffffcda}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) 00:23:17 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:17 executing program 0: bpf$MAP_CREATE(0xf, &(0x7f0000000480), 0x40) 00:23:17 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x7, 0x4, 0x0, 0x2, 0x0, 0x1}, 0x40) 00:23:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000640)='GPL\x00', 0x1, 0x89, &(0x7f0000000680)=""/137, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:23:17 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200"], 0x28}}, 0x0) 00:23:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0xfffffffffffffcda}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) 00:23:18 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/156, 0x200000, 0x1000}, 0x20) 00:23:18 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:18 executing program 4: syz_emit_ethernet(0x32, &(0x7f00000001c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, "349480"}}}}}}, 0x0) 00:23:18 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x800}, 0x1c) [ 2791.741968][T17102] __nla_validate_parse: 5 callbacks suppressed [ 2791.742030][T17102] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2791.803767][T17105] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 00:23:18 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x341}, 0x40) 00:23:18 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:23:18 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000000)=@raw=[@ldst], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:23:18 executing program 2: syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 00:23:18 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind(r0, &(0x7f00000004c0)=@ieee802154, 0x80) 00:23:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x89b0, &(0x7f0000000000)) [ 2792.519847][T17123] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:18 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2792.661608][T17126] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:19 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:23:19 executing program 0: bpf$MAP_CREATE(0x8, &(0x7f0000000000), 0x40) 00:23:19 executing program 2: bpf$MAP_CREATE(0x9, &(0x7f0000000480), 0x40) 00:23:19 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x2, 0x8, 0xdda}, 0x40) 00:23:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x0, 0x4, 0x0, 0x1}, 0x40) [ 2793.178447][T17142] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2793.312450][T17147] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:19 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000002100)=[@pktinfo={{0x24, 0x29, 0x8, {@private0}}}], 0x28}}], 0x2, 0x0) [ 2793.380123][ T3128] ieee802154 phy0 wpan0: encryption failed: -22 [ 2793.386765][ T3128] ieee802154 phy1 wpan1: encryption failed: -22 00:23:19 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:23:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0xfffffffffffffcda}]}, 0x1c}}, 0x0) 00:23:19 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 00:23:20 executing program 1: getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0) fork() getegid() semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) getegid() setregid(0x0, 0x0) [ 2793.882344][T17160] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:20 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(r0, &(0x7f0000000140)={0x18, 0x2}, 0xc) [ 2794.006458][T17166] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2794.060775][T17164] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:20 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:23:20 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000040), 0x8) 00:23:20 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 00:23:20 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2794.725573][T17185] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:21 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0xf49e41bbd7c2e014, 0x0) 00:23:21 executing program 1: fork() setregid(0x0, 0x0) 00:23:21 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0) 00:23:21 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:23:21 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r0, 0x6, 0x0) 00:23:21 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 00:23:21 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg(r0, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=[{0x1008, 0x0, 0x0, "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"}], 0x1008}, 0x0) 00:23:21 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:23:21 executing program 2: mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) 00:23:22 executing program 1: connect$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0x18}, 0xc) 00:23:22 executing program 4: pipe(0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1003, 0x0, 0x0) 00:23:22 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 00:23:22 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) 00:23:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, r1, 0x329, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x998b1c9f5cd52583}]}]}, 0x20}}, 0x0) 00:23:22 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:23:22 executing program 2: mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:23:22 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x1, 0x0) dup3(r1, r0, 0x0) 00:23:23 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1010600, 0x0) fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 00:23:23 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup3(r1, r0, 0x0) 00:23:23 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)='I', 0x1}], 0x1, &(0x7f0000001600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast2}}}], 0x20}, 0x0) 00:23:23 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:23:23 executing program 1: r0 = add_key$keyring(&(0x7f00000017c0), &(0x7f0000001800)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r0, 0x0, 0x0) 00:23:23 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 2797.249401][T17268] __nla_validate_parse: 3 callbacks suppressed [ 2797.249549][T17268] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:23 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x4, r0, 0x0) 00:23:23 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) 00:23:23 executing program 4: r0 = socket(0xa, 0x3, 0x81) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000014c0)={'sit0\x00', &(0x7f0000001440)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00'}}) 00:23:23 executing program 1: request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)=':H\x00', 0xffffffffffffffff) 00:23:23 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:23:24 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 00:23:24 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x24042, 0x4) 00:23:24 executing program 2: r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0) fcntl$dupfd(r0, 0x0, r0) 00:23:24 executing program 4: creat(&(0x7f0000000280)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) dup(r0) 00:23:24 executing program 1: open$dir(&(0x7f0000000040)='./file1\x00', 0x14b040, 0x11) [ 2798.068235][T17290] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:24 executing program 2: r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0) write$P9_RFLUSH(r0, 0x0, 0x0) [ 2798.343501][ T34] audit: type=1800 audit(1625790204.629:79): pid=17303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=14904 res=0 errno=0 00:23:24 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000140021010000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2798.458997][ T34] audit: type=1804 audit(1625790204.669:80): pid=17305 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir230968347/syzkaller.0R3xpJ/1597/file1" dev="sda1" ino=14538 res=1 errno=0 [ 2798.485018][ T34] audit: type=1804 audit(1625790204.699:81): pid=17305 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir230968347/syzkaller.0R3xpJ/1597/file1" dev="sda1" ino=14538 res=1 errno=0 [ 2798.511351][ T34] audit: type=1800 audit(1625790204.699:82): pid=17303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=14904 res=0 errno=0 00:23:24 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) dup(r0) 00:23:24 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) read$FUSE(r0, 0x0, 0x0) 00:23:25 executing program 0: creat(&(0x7f0000000280)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) 00:23:25 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x90}}, 0x0) [ 2798.854327][T17313] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:25 executing program 2: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) 00:23:25 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000140021010000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:23:25 executing program 1: r0 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) write$P9_RREAD(r0, 0x0, 0x0) [ 2799.216573][ T34] audit: type=1804 audit(1625790205.519:83): pid=17324 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir820996991/syzkaller.VVVEyg/930/file1" dev="sda1" ino=14611 res=1 errno=0 00:23:25 executing program 4: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000) 00:23:25 executing program 0: pipe2$9p(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRCREATE(r0, 0x0, 0x0) [ 2799.428945][T17332] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:25 executing program 2: semctl$SEM_STAT_ANY(0x0, 0x1, 0x14, &(0x7f0000000000)=""/33) 00:23:25 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000140021010000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:23:26 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x90}}, 0x0) 00:23:26 executing program 2: shmget(0x3, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) 00:23:26 executing program 4: r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 00:23:26 executing program 1: r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0) r1 = dup(r0) write$P9_RLERROR(r1, 0x0, 0x0) 00:23:26 executing program 0: open$dir(&(0x7f0000000040)='./file1\x00', 0x143040, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x8000, 0x15) [ 2800.073412][T17348] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:26 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400210100000000000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:23:26 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x90}}, 0x0) 00:23:26 executing program 1: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x2a040, 0x0) 00:23:26 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup(r0) getsockopt$packet_buf(r1, 0x107, 0x0, 0x0, &(0x7f0000000100)) 00:23:26 executing program 4: r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x143040, 0x0) dup(r0) 00:23:27 executing program 0: creat(&(0x7f0000000280)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) [ 2800.744801][T17371] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:27 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400210100000000000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2801.139916][ T34] audit: type=1804 audit(1625790207.439:84): pid=17389 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir820996991/syzkaller.VVVEyg/933/file1" dev="sda1" ino=14538 res=1 errno=0 00:23:27 executing program 2: r0 = eventfd(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_DIRENT(r1, &(0x7f0000000000)={0x10}, 0x10) [ 2801.249382][ T34] audit: type=1804 audit(1625790207.489:85): pid=17389 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir820996991/syzkaller.VVVEyg/933/file1" dev="sda1" ino=14538 res=1 errno=0 00:23:27 executing program 4: creat(&(0x7f0000000280)='./file1\x00', 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4000, 0x0, &(0x7f0000000080)) 00:23:27 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3], 0x90}}, 0x0) 00:23:27 executing program 1: creat(&(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200, 0x10) 00:23:27 executing program 0: r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) [ 2801.455112][T17392] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:27 executing program 2: timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_gettime(0x0, 0x0) [ 2801.748999][ T34] audit: type=1804 audit(1625790208.049:86): pid=17405 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir806215812/syzkaller.hFla9e/1705/file1" dev="sda1" ino=14908 res=1 errno=0 [ 2801.822365][T17408] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:28 executing program 4: creat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000040)='./file1\x00', 0x20000, 0x4) 00:23:28 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400210100000000000000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2801.857281][ T34] audit: type=1804 audit(1625790208.159:87): pid=17409 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir820996991/syzkaller.VVVEyg/934/file1" dev="sda1" ino=14929 res=1 errno=0 00:23:28 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) creat(&(0x7f0000000180)='./file1\x00', 0x0) r1 = open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) dup3(r0, r1, 0x0) [ 2801.974953][ T34] audit: type=1804 audit(1625790208.199:88): pid=17409 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir820996991/syzkaller.VVVEyg/934/file1" dev="sda1" ino=14929 res=1 errno=0 00:23:28 executing program 0: r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0) write$P9_RSTAT(r0, &(0x7f0000000180)=ANY=[], 0x40) 00:23:28 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3], 0x90}}, 0x0) [ 2802.312002][T17418] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:28 executing program 2: creat(&(0x7f0000000280)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) dup(r0) 00:23:28 executing program 4: creat(&(0x7f0000000280)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x400, 0x2) 00:23:28 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400210100000000000000000200", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:23:28 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r1 = shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmdt(r1) 00:23:29 executing program 0: open$dir(&(0x7f0000000100)='./file0\x00', 0x1c0, 0x0) [ 2802.730437][T17433] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:29 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3], 0x90}}, 0x0) 00:23:29 executing program 2: r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) dup3(r1, r0, 0x0) [ 2803.076591][T17444] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) [ 2803.183059][T17448] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:29 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x11) 00:23:29 executing program 0: creat(&(0x7f0000000280)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80101, 0x0) 00:23:29 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400210100000000000000000200", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) [ 2803.486754][ T34] kauditd_printk_skb: 6 callbacks suppressed [ 2803.486817][ T34] audit: type=1804 audit(1625790209.789:95): pid=17456 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir980746173/syzkaller.CDGdla/1554/file1" dev="sda1" ino=14927 res=1 errno=0 00:23:29 executing program 2: r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RWSTAT(r1, 0x0, 0x0) [ 2803.519143][ T34] audit: type=1804 audit(1625790209.799:96): pid=17456 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir980746173/syzkaller.CDGdla/1554/file1" dev="sda1" ino=14927 res=1 errno=0 [ 2803.577694][T17458] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:30 executing program 4: r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0) r1 = dup(r0) write$P9_RREAD(r1, 0x0, 0x0) [ 2803.843249][T17467] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:30 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB], 0x90}}, 0x0) 00:23:30 executing program 1: open$dir(&(0x7f0000000040)='./file0\x00', 0x143040, 0xd4) [ 2803.955297][T17470] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:30 executing program 0: creat(&(0x7f0000000280)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x400, 0x0) 00:23:30 executing program 2: shmget(0x3, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil) 00:23:30 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400210100000000000000000200", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:23:30 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) [ 2804.463334][T17484] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:30 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) fcntl$dupfd(r0, 0x0, r0) [ 2804.601864][T17490] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:31 executing program 2: creat(&(0x7f0000000040)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x20000, 0x0) [ 2804.672866][ T34] audit: type=1804 audit(1625790210.969:97): pid=17493 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir820996991/syzkaller.VVVEyg/938/file1" dev="sda1" ino=14921 res=1 errno=0 00:23:31 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB], 0x90}}, 0x0) [ 2804.760632][T17494] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:31 executing program 0: shmget(0x3, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) 00:23:31 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000140021010000000000000000020000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:23:31 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x513440, 0x0) [ 2805.099284][ T34] audit: type=1804 audit(1625790211.399:98): pid=17505 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir980746173/syzkaller.CDGdla/1557/file1" dev="sda1" ino=13952 res=1 errno=0 00:23:31 executing program 2: open$dir(&(0x7f0000000040)='./file1\x00', 0x143040, 0x0) open$dir(&(0x7f0000000080)='./file1\x00', 0x0, 0x21) 00:23:31 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000002100)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x0, 0x200000000000010c, '\x00', [@ra, @jumbo]}}}], 0x28}}], 0x2, 0x0) 00:23:31 executing program 0: r0 = eventfd(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r1, r2, 0x0) 00:23:31 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB], 0x90}}, 0x0) 00:23:32 executing program 4: creat(&(0x7f0000000280)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x201, 0x130) 00:23:32 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000140021010000000000000000020000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:23:32 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000002100)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x0, 0x200000000000010c, '\x00', [@ra, @jumbo]}}}], 0x28}}], 0x2, 0x0) 00:23:32 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r0) 00:23:32 executing program 0: r0 = eventfd(0x1) read$eventfd(r0, &(0x7f0000000080), 0x8) 00:23:32 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000002100)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x0, 0x200000000000010c, '\x00', [@ra, @jumbo]}}}], 0x28}}], 0x2, 0x0) 00:23:32 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x100, 0x28) 00:23:32 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000140021010000000000000000020000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) 00:23:32 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f76746930000000000000000000"], 0x90}}, 0x0) 00:23:32 executing program 2: r0 = eventfd(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RMKDIR(r1, &(0x7f0000000000)={0x14}, 0x14) 00:23:33 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) 00:23:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000002100)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x0, 0x200000000000010c, '\x00', [@ra, @jumbo]}}}], 0x28}}], 0x2, 0x0) 00:23:33 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r1) 00:23:33 executing program 4: r0 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000bfd000/0x400000)=nil, 0x16567e095fec4e36) 00:23:33 executing program 3: semget$private(0x0, 0x1, 0x7) 00:23:33 executing program 0: r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x143040, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup3(r0, r1, 0x0) 00:23:33 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f76746930000000000000000000"], 0x90}}, 0x0) 00:23:34 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:23:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) sendmsg(r1, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x0) 00:23:34 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x3c) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) socket$kcm(0xa, 0x0, 0x11) 00:23:34 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f000000e500)={0x0, 0x0, 0x0}, 0x0) sendmsg(r0, &(0x7f000000e7c0)={0x0, 0x0, &(0x7f000000e780)=[{&(0x7f000000e5c0)="b3", 0x1}], 0x1}, 0x4000080) 00:23:34 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000340)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xd8, &(0x7f0000000100)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2807.946513][T17587] __nla_validate_parse: 9 callbacks suppressed [ 2807.946579][T17587] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:34 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='ext4_discard_blocks\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0185879, &(0x7f0000000080)) 00:23:34 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f76746930000000000000000000"], 0x90}}, 0x0) 00:23:34 executing program 3: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000480)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97\x04\x03\xdc\r') bpf$PROG_LOAD(0x5, &(0x7f0000004380)={0x0, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000030000000000000000d2100018130000f5c8393579fa803ccb17ee792018bfd918e7b210515f789cc3d7c024b6e22b2343aef882de555b76f49be02548c936b2598f69a65e5c25caf7b4ff2bd7e926b05e4609cd2ca7c2deed7b49f11f55533f9b86549b677bf16326742f7b316ce6247b46b5c75daab13292851e29bdf0ab3454b4289e11c171c95eaa81587a383dc7022a65", @ANYBLOB="00000e21d1ed0000200040000000000085000000720000007060100000"], &(0x7f00000002c0)='syzkaller\x00', 0x100000, 0x1008, &(0x7f0000002480)=""/4104, 0x40f00, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000004240), 0x8, 0x10, 0x0}, 0x78) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240440d0) socket$kcm(0x29, 0x0, 0x0) sendmsg(r1, &(0x7f0000000680)={0x0, 0x13000003, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff1f}], 0x8, 0x0, 0x0, 0xf00}, 0x780f8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x84) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97\x04\x03\xdc\r') bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x0, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000700000000000000000100008500e78c7137410800f220430fb70a3e467c0000000000003625339dfd22203899d27f00004df0da2c4abd7a99cce306713f24061ae16d504dab1b4e63cf43c442e51115b79900ddf769bf08a8b0229d16b034f8229a65b2a0bae8"], &(0x7f0000000640)='syzkaller\x00', 0x5, 0xcd, &(0x7f0000002200)=""/205, 0x41000, 0x13, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002340)={0x0, 0xc}, 0x10}, 0x78) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000980)='lo\x00\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00y.\xfc*_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7f\r\xb2\xcf\x8a\xc9(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0-\x96\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 00:23:35 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='ext4_discard_blocks\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0185879, &(0x7f0000000080)) 00:23:35 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/35, 0x23}], 0x1}, 0x0) 00:23:35 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e6574646576"], 0x90}}, 0x0) 00:23:35 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000d580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:23:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x2060) [ 2809.821369][T17635] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:36 executing program 1: socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000300)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) 00:23:36 executing program 0: mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) 00:23:36 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e6574646576"], 0x90}}, 0x0) 00:23:37 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r0) bpf$ITER_CREATE(0x21, 0x0, 0x0) 00:23:37 executing program 3: socketpair(0x9, 0x0, 0x0, &(0x7f0000002f40)) 00:23:37 executing program 2: r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x801, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0xf31c}], 0x1, 0x0, 0x0, 0xf00}, 0xfc) 00:23:37 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000340)=@framed, &(0x7f00000000c0)='GPL\x00', 0x5, 0xd8, &(0x7f0000000100)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:23:37 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000480)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97\x04\x03\xdc\r') perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240440d0) socket$kcm(0x29, 0x0, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x13000003, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff1f}], 0x8, 0x0, 0x0, 0xf00}, 0x780f8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000980)='lo\x00\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00y.\xfc*_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7f\r\xb2\xcf\x8a\xc9(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0-\x96\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e6574646576"], 0x90}}, 0x0) 00:23:37 executing program 2: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) 00:23:37 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) 00:23:37 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\xfe') 00:23:37 executing program 0: socketpair(0x2c, 0x3, 0x21f7, &(0x7f0000000040)) 00:23:37 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf5ffffff}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0xd8, &(0x7f0000000100)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2811.613981][T17694] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:38 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) unlink(&(0x7f00000000c0)='./file0\x00') r1 = socket$kcm(0x2, 0x1, 0x84) close(r1) 00:23:38 executing program 4: perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpu.stat\x00', 0x26e1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8) openat$cgroup_ro(r2, &(0x7f0000000280)='memory.swap.current\x00', 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000dd80)={0x1b, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0xd4, &(0x7f0000000380)=""/212, 0x40f00, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f000000dac0)={0x5, 0x0, 0x8}, 0x10, 0x0, r3}, 0x78) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200)=r1, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='.*,\xe4%\x00') r4 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0)={r1}, 0x8) perf_event_open(0x0, 0x0, 0x8, r4, 0x0) 00:23:38 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d300000000000001400350069"], 0x90}}, 0x0) 00:23:38 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x48}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xd8, &(0x7f0000000100)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:23:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x81, 0x0, 0x2, 0x994, 0xffffffffffffffff, 0x8, '\x00', 0x0, r1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000300)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @map={0x18, 0x1, 0x1, 0x0, r3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb47a}, @map={0x18, 0x7, 0x1, 0x0, r1}, @ldst={0x2, 0x3, 0x6, 0x4, 0x0, 0x1, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1d3, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000380)='GPL\x00', 0x1ff, 0xc2, &(0x7f00000003c0)=""/194, 0x41100, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0xe, 0x4, 0x4}, 0x10}, 0x78) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xa, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@generic={0x81, 0x6, 0xe, 0x20, 0xfffffff8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}]}, 0x0, 0x3ff, 0x1000, &(0x7f0000000a00)=""/4096, 0x40f00, 0xe, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a40)={0x5, 0xd, 0x1, 0x6}, 0x10}, 0x78) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) 00:23:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x81, 0x0, 0x2, 0x994, 0xffffffffffffffff, 0x8, '\x00', 0x0, r1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xe, &(0x7f0000000300)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @map={0x18, 0x1, 0x1, 0x0, r4}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb47a}, @map={0x18, 0x7, 0x1, 0x0, r1}, @ldst={0x2, 0x3, 0x6, 0x4, 0x5, 0x1, 0xfffffffffffffff0}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x48b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1d3, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000380)='GPL\x00', 0x1ff, 0xc2, &(0x7f00000003c0)=""/194, 0x41100, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0xe, 0x4, 0x4}, 0x10}, 0x78) socket$kcm(0x2, 0x6, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xa, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@generic={0x81, 0x6, 0xe, 0x20, 0xfffffff8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}]}, &(0x7f00000009c0)='GPL\x00', 0x3ff, 0x1000, &(0x7f0000000a00)=""/4096, 0x40f00, 0xe, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000001a00)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001a40)={0x5, 0xd, 0x1, 0x6}, 0x10}, 0x78) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0xffffffffffffffff, r3, 0x0, 0x2d2, &(0x7f0000001b00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) r5 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6) 00:23:38 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8910, &(0x7f0000000000)) 00:23:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x81, 0x0, 0x2, 0x994, 0xffffffffffffffff, 0x8, '\x00', 0x0, r1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000300)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @map={0x18, 0x1, 0x1, 0x0, r3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb47a}, @ldst={0x2, 0x3, 0x6, 0x0, 0x5, 0x1}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x48b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1d3, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000380)='GPL\x00', 0x1ff, 0xc2, &(0x7f00000003c0)=""/194, 0x41100, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0xe, 0x4, 0x4}, 0x10}, 0x78) socket$kcm(0x2, 0x6, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x1ad) 00:23:38 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x400d1) 00:23:39 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d300000000000001400350069"], 0x90}}, 0x0) 00:23:39 executing program 2: socketpair(0xa, 0x3, 0x0, &(0x7f0000002f40)) 00:23:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x81, 0x0, 0x2, 0x994, 0xffffffffffffffff, 0x8, '\x00', 0x0, r1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000300)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @map={0x18, 0x1, 0x1, 0x0, r3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb47a}, @map={0x18, 0x7, 0x1, 0x0, r1}, @ldst={0x2, 0x3, 0x6, 0x4, 0x0, 0x1, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1d3, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000380)='GPL\x00', 0x1ff, 0xc2, &(0x7f00000003c0)=""/194, 0x41100, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0xe, 0x4, 0x4}, 0x10}, 0x78) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xa, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@generic={0x81, 0x6, 0xe, 0x20, 0xfffffff8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}]}, 0x0, 0x3ff, 0x1000, &(0x7f0000000a00)=""/4096, 0x40f00, 0xe, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a40)={0x5, 0xd, 0x1, 0x6}, 0x10}, 0x78) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) 00:23:39 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "a8"}]}}, &(0x7f0000000540)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 00:23:39 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0xd8, &(0x7f0000000100)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:23:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x81, 0x0, 0x2, 0x994, 0xffffffffffffffff, 0x8, '\x00', 0x0, r1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000300)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @map={0x18, 0x1, 0x1, 0x0, r3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb47a}, @ldst={0x2, 0x3, 0x6, 0x0, 0x5, 0x1}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x48b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1d3, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000380)='GPL\x00', 0x1ff, 0xc2, &(0x7f00000003c0)=""/194, 0x41100, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0xe, 0x4, 0x4}, 0x10}, 0x78) socket$kcm(0x2, 0x6, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x1ad) 00:23:40 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d300000000000001400350069"], 0x90}}, 0x0) 00:23:40 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r1, &(0x7f0000007880)={&(0x7f0000007440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000007740)=[{&(0x7f00000074c0)=""/236, 0xec}, {&(0x7f00000075c0)=""/61, 0x3d}, {&(0x7f0000007600)=""/217, 0xd9}, {&(0x7f0000007700)=""/17, 0x11}], 0x4, &(0x7f0000007780)=""/217, 0xd9}, 0x40) 00:23:40 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 00:23:40 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x11b, 0x4, &(0x7f0000000040), 0x20000044) bpf$MAP_CREATE(0x0, 0x0, 0x0) 00:23:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x81, 0x0, 0x2, 0x994, 0xffffffffffffffff, 0x8, '\x00', 0x0, r1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000300)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @map={0x18, 0x1, 0x1, 0x0, r3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb47a}, @map={0x18, 0x7, 0x1, 0x0, r1}, @ldst={0x2, 0x3, 0x6, 0x4, 0x0, 0x1, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1d3, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000380)='GPL\x00', 0x1ff, 0xc2, &(0x7f00000003c0)=""/194, 0x41100, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0xe, 0x4, 0x4}, 0x10}, 0x78) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xa, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@generic={0x81, 0x6, 0xe, 0x20, 0xfffffff8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}]}, 0x0, 0x3ff, 0x1000, &(0x7f0000000a00)=""/4096, 0x40f00, 0xe, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a40)={0x5, 0xd, 0x1, 0x6}, 0x10}, 0x78) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) 00:23:41 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c300000"], 0x90}}, 0x0) 00:23:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x81, 0x0, 0x2, 0x994, 0xffffffffffffffff, 0x8, '\x00', 0x0, r1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000300)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @map={0x18, 0x1, 0x1, 0x0, r3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb47a}, @ldst={0x2, 0x3, 0x6, 0x0, 0x5, 0x1}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x48b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1d3, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000380)='GPL\x00', 0x1ff, 0xc2, &(0x7f00000003c0)=""/194, 0x41100, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0xe, 0x4, 0x4}, 0x10}, 0x78) socket$kcm(0x2, 0x6, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x1ad) 00:23:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xd8, &(0x7f0000000100)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:23:41 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0xd8, &(0x7f0000000100)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:23:41 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a1, &(0x7f0000000000)) 00:23:41 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 00:23:41 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8904, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)) 00:23:41 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c300000"], 0x90}}, 0x0) 00:23:41 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x5, 0x0, 0x0) 00:23:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000011c0)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @dev, 'bond_slave_1\x00'}}, 0x80, 0x0, 0x0, &(0x7f0000001200)=[{0x10}], 0x20001210}, 0x0) 00:23:42 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x9, 0x4}, {0xe}, {}, {0x1}, {0x10, 0x5}]}]}}, &(0x7f00000000c0)=""/232, 0x4e, 0xe8, 0x1}, 0x20) 00:23:42 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x14, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:23:42 executing program 4: syz_open_dev$hiddev(&(0x7f0000000500), 0x0, 0x0) 00:23:42 executing program 3: r0 = openat$vmci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, 0x0) 00:23:42 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c300000"], 0x90}}, 0x0) 00:23:42 executing program 2: openat$vhost_vsock(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) 00:23:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8910, 0x0) 00:23:42 executing program 1: r0 = openat$zero(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) setns(r0, 0x0) 00:23:43 executing program 3: r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) execveat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x100) 00:23:43 executing program 4: syz_io_uring_setup(0x653d, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0x4c6, &(0x7f0000000640), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) 00:23:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x40) 00:23:43 executing program 1: r0 = openat$uinput(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x5421, 0x85d0000) 00:23:43 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x2, 0x4) 00:23:43 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000"], 0x90}}, 0x0) 00:23:43 executing program 3: setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x0, 0x4) 00:23:43 executing program 4: socketpair(0x2, 0x0, 0xccf6, &(0x7f0000000400)) 00:23:43 executing program 1: r0 = openat$uinput(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x5451, 0x0) 00:23:43 executing program 2: open$dir(&(0x7f00000032c0)='./file0\x00', 0x84c1, 0x0) 00:23:43 executing program 0: openat$vga_arbiter(0xffffff9c, 0x0, 0x9eb06db2bf194ae6, 0x0) 00:23:44 executing program 3: r0 = openat$vmci(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x2, &(0x7f0000000440)) 00:23:44 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000"], 0x90}}, 0x0) 00:23:44 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) accept4$unix(r0, 0x0, 0x0, 0x1000) 00:23:44 executing program 0: socket(0x11, 0x3, 0x5) 00:23:44 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000a40), 0x400, 0x0) 00:23:44 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc04c5611, 0x0) 00:23:44 executing program 3: r0 = openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) 00:23:44 executing program 4: openat$full(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) 00:23:44 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x80000000) 00:23:44 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, 0x0) 00:23:45 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) 00:23:45 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000"], 0x90}}, 0x0) 00:23:45 executing program 3: sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x0) 00:23:45 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x0) 00:23:45 executing program 0: ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000040)={0x1}) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) 00:23:45 executing program 2: r0 = openat$fb0(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180), &(0x7f00000001c0), 0x0}) 00:23:45 executing program 3: openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) 00:23:45 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)=[{0x0}, {0x0}, {&(0x7f0000001180)='-', 0x1}], 0x3}, 0x0) 00:23:45 executing program 2: syz_io_uring_setup(0x653d, &(0x7f00000000c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0x1229, &(0x7f0000000540), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000005c0), 0x0) syz_io_uring_setup(0x4c6, &(0x7f0000000640), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) 00:23:45 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c300000000000000000"], 0x90}}, 0x0) 00:23:45 executing program 0: r0 = openat$vmci(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000440)=0x80000) 00:23:46 executing program 3: ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000000)={0x0, 0x2, 0x7fff, 0x7}) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000040)={0x3, 0x0, 0x8c}) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0) r0 = syz_io_uring_setup(0x653d, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000300)={0x1c, "7e6a9f41ce284306af0c32e8322e5001fd599703c8a0be7cf3dd475e"}) syz_io_uring_setup(0x4c6, &(0x7f0000000640)={0x0, 0xbec8, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 00:23:46 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}], 0x28}, 0x0) 00:23:46 executing program 2: r0 = openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000006c0)={0x0, 0x2}) 00:23:46 executing program 0: socketpair(0xa, 0x5, 0x0, &(0x7f00000002c0)) 00:23:46 executing program 4: r0 = getpid() process_vm_readv(r0, &(0x7f0000001700)=[{&(0x7f00000000c0)=""/117, 0x75}, {0x0}, {&(0x7f0000000180)=""/231, 0xe7}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001940)=[{&(0x7f0000001780)=""/76, 0x4c}, {&(0x7f0000001800)=""/144, 0x90}], 0x2, 0x0) 00:23:46 executing program 2: r0 = openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000006c0)={0x0, 0x2}) 00:23:46 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) connect(r0, 0x0, 0x0) 00:23:47 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c300000000000000000"], 0x90}}, 0x0) 00:23:47 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x200000ae, &(0x7f0000000200)=[{0x0}, {0x0}, {&(0x7f0000000180)=' ', 0x1}], 0x3}, 0x0) 00:23:47 executing program 4: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 00:23:47 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000300)={0x2, @pix_mp}) 00:23:47 executing program 2: r0 = openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000006c0)={0x0, 0x2}) 00:23:47 executing program 0: openat$dlm_monitor(0xffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000c80), 0xffffffffffffffff) 00:23:47 executing program 1: r0 = openat$vmci(0xffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7ab, 0x0) 00:23:47 executing program 3: openat$full(0xffffff9c, &(0x7f00000006c0), 0x20000, 0x0) 00:23:47 executing program 4: ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) syz_io_uring_setup(0x653d, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_open_dev$hiddev(&(0x7f0000000500), 0x0, 0x0) syz_io_uring_setup(0x1229, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000005c0), 0x0) syz_io_uring_setup(0x4c6, &(0x7f0000000640)={0x0, 0xbec8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000700)) syz_io_uring_setup(0x2f02, &(0x7f0000000780)={0x0, 0x813a, 0x6, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 00:23:47 executing program 2: r0 = openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000006c0)={0x0, 0x2}) 00:23:47 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c300000000000000000"], 0x90}}, 0x0) 00:23:48 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0) 00:23:48 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000001700)=[{&(0x7f00000000c0)=""/117, 0x75}], 0x1, &(0x7f0000001940)=[{&(0x7f0000001800)=""/144, 0x90}, {0x0}], 0x2, 0x0) 00:23:48 executing program 3: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000004c0)) 00:23:48 executing program 4: openat$dsp(0xffffff9c, &(0x7f0000002600), 0x0, 0x0) 00:23:48 executing program 2: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000006c0)={0x0, 0x2}) 00:23:48 executing program 1: r0 = openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc04c560f, &(0x7f0000000400)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "745f0cae"}, 0x0, 0x0, @userptr}) 00:23:48 executing program 0: syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) shmget(0x2, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 00:23:48 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:48 executing program 3: openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) 00:23:48 executing program 2: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000006c0)={0x0, 0x2}) 00:23:49 executing program 4: r0 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) read$dsp(r0, 0x0, 0x0) 00:23:49 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x9, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) [ 2822.860836][T17994] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:49 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x84140) 00:23:49 executing program 3: syz_io_uring_setup(0x653d, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) 00:23:49 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:49 executing program 2: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000006c0)={0x0, 0x2}) 00:23:49 executing program 4: r0 = openat$vmci(0xffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)) 00:23:49 executing program 1: openat$cachefiles(0xffffff9c, 0x0, 0x490000, 0x0) 00:23:49 executing program 0: unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 00:23:49 executing program 3: openat$vga_arbiter(0xffffff9c, &(0x7f0000000000), 0x4000, 0x0) [ 2823.576394][T18012] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:50 executing program 2: r0 = openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000006c0)={0x0, 0x2}) 00:23:50 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:50 executing program 4: openat2$dir(0xffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x4}, 0x18) 00:23:50 executing program 1: read$dsp(0xffffffffffffffff, 0x0, 0x0) 00:23:50 executing program 0: r0 = openat$uinput(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x4020940d, 0x0) 00:23:50 executing program 3: r0 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x0, {0x0, 0x0, 0xfffffe01}}) 00:23:50 executing program 2: r0 = openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000006c0)={0x0, 0x2}) 00:23:50 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) connect(r0, &(0x7f0000000000)=@xdp, 0xffffffd4) [ 2824.478810][T18036] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:50 executing program 0: r0 = openat$vmci(0xffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x402c5828, &(0x7f0000000180)) 00:23:50 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc04c5611, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bef62bd4"}, 0x0, 0x0, @userptr}) 00:23:50 executing program 3: openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x4202, 0x0) 00:23:51 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:51 executing program 2: r0 = openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000006c0)={0x0, 0x2}) 00:23:51 executing program 4: r0 = openat$adsp1(0xffffff9c, &(0x7f00000002c0), 0x8201, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) 00:23:51 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{0x0, 0x8000000}, {0x0}, {&(0x7f0000000180)=' ', 0x1}], 0x3}, 0x0) 00:23:51 executing program 1: openat$dlm_monitor(0xffffff9c, 0x0, 0x408000, 0x0) 00:23:51 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000380)=@abs={0x1}, 0x6e) 00:23:51 executing program 2: openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000006c0)={0x0, 0x2}) 00:23:51 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:52 executing program 0: unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 00:23:52 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, 0x3f7, 0x0, 0x0, 0x0, {0x7, 0x7, './file0', './file0'}}, 0x28}}, 0x0) 00:23:52 executing program 1: r0 = openat$vmci(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) 00:23:52 executing program 4: r0 = openat$vmci(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) 00:23:52 executing program 2: openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000006c0)={0x0, 0x2}) 00:23:52 executing program 0: r0 = openat$vmci(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x5452, 0x0) 00:23:52 executing program 3: openat$ashmem(0xffffff9c, &(0x7f0000000740), 0x0, 0x0) 00:23:52 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf2500000000", @ANYRES32, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:52 executing program 1: syz_open_procfs$userns(0x0, &(0x7f0000000100)) 00:23:52 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0xc}}], 0xc}, 0x0) 00:23:52 executing program 2: openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000006c0)={0x0, 0x2}) 00:23:53 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x2008, 0x103) 00:23:53 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000c40)={0x0, @rc={0x1f, @fixed}, @can, @can, 0x7ff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)='netpci0\x00'}) 00:23:53 executing program 1: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0xb28163f8db49b872}, 0x10) 00:23:53 executing program 4: r0 = openat$uinput(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0xc0189436, 0x0) 00:23:53 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 00:23:53 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:23:53 executing program 2: r0 = openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 00:23:53 executing program 1: syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_io_uring_setup(0x5174, &(0x7f0000000c80), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000d00), &(0x7f0000000d40)) 00:23:54 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = getpid() sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x18, 0x1, 0x2, {r1}}}], 0x18}, 0x0) 00:23:54 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 00:23:54 executing program 3: r0 = openat$uinput(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x5421, 0xffffffff) 00:23:54 executing program 2: r0 = openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 00:23:54 executing program 1: rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) 00:23:54 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2828.167330][ T34] audit: type=1326 audit(1625790234.468:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18122 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7fdb549 code=0x0 00:23:54 executing program 4: r0 = getpid() process_vm_readv(r0, &(0x7f0000001700)=[{&(0x7f00000000c0)=""/117, 0x75}], 0x1, &(0x7f0000001940)=[{&(0x7f0000001780)=""/76, 0x4c}, {0x0}], 0x2, 0x0) 00:23:54 executing program 3: r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) 00:23:54 executing program 2: r0 = openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 00:23:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x1, @raw_data="0184eabb992283c885f2b5321b78588a3c401eac4115701eb0c5201424bc28d364572cded700d47669d7f54b29a384dc1513009be7edeb8d5819301957229567825487c1ae8eceb6306306fc893c26516059734d06a63fbe6b72ec9dca7d742da1d45e5f2e3546393ceb537ecb95ee804d50ba9878551fcb1898833bed920dc9dd33de4de97732dfd145c7fb06d816b6a90255d449562cea0cda69865343379e032d7a021f17c3220b96dd2e5a9678e9293995c420e0a7030631ec4b369702b9d9bfbd81b43b5a73"}}) 00:23:55 executing program 4: ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) 00:23:55 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) [ 2828.981302][ T34] audit: type=1326 audit(1625790235.278:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18122 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7fdb549 code=0x0 00:23:55 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000100)=0x4000, 0x4) 00:23:55 executing program 0: ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0) syz_io_uring_setup(0x653d, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) read$hiddev(0xffffffffffffffff, &(0x7f0000000400)=""/188, 0xbc) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) r0 = syz_io_uring_setup(0x4c6, &(0x7f0000000640)={0x0, 0x0, 0x20, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000006c0), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000780)={0x0, 0x813a, 0x6, 0x2, 0x3cf, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000840)) 00:23:55 executing program 2: r0 = openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000006c0)) 00:23:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x1, @raw_data="0184eabb992283c885f2b5321b78588a3c401eac4115701eb0c5201424bc28d364572cded700d47669d7f54b29a384dc1513009be7edeb8d5819301957229567825487c1ae8eceb6306306fc893c26516059734d06a63fbe6b72ec9dca7d742da1d45e5f2e3546393ceb537ecb95ee804d50ba9878551fcb1898833bed920dc9dd33de4de97732dfd145c7fb06d816b6a90255d449562cea0cda69865343379e032d7a021f17c3220b96dd2e5a9678e9293995c420e0a7030631ec4b369702b9d9bfbd81b43b5a73"}}) 00:23:55 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {0x6}]}) 00:23:55 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:55 executing program 3: r0 = openat$fb0(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0}) 00:23:56 executing program 2: r0 = openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000006c0)) 00:23:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x1, @raw_data="0184eabb992283c885f2b5321b78588a3c401eac4115701eb0c5201424bc28d364572cded700d47669d7f54b29a384dc1513009be7edeb8d5819301957229567825487c1ae8eceb6306306fc893c26516059734d06a63fbe6b72ec9dca7d742da1d45e5f2e3546393ceb537ecb95ee804d50ba9878551fcb1898833bed920dc9dd33de4de97732dfd145c7fb06d816b6a90255d449562cea0cda69865343379e032d7a021f17c3220b96dd2e5a9678e9293995c420e0a7030631ec4b369702b9d9bfbd81b43b5a73"}}) [ 2829.787431][ T34] audit: type=1326 audit(1625790236.078:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18163 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7f74549 code=0x0 00:23:56 executing program 0: r0 = openat$ashmem(0xffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000780)='unlock all\x00') 00:23:56 executing program 3: getitimer(0x0, &(0x7f0000000740)) 00:23:56 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:56 executing program 2: r0 = openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000006c0)) 00:23:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x1, @raw_data="0184eabb992283c885f2b5321b78588a3c401eac4115701eb0c5201424bc28d364572cded700d47669d7f54b29a384dc1513009be7edeb8d5819301957229567825487c1ae8eceb6306306fc893c26516059734d06a63fbe6b72ec9dca7d742da1d45e5f2e3546393ceb537ecb95ee804d50ba9878551fcb1898833bed920dc9dd33de4de97732dfd145c7fb06d816b6a90255d449562cea0cda69865343379e032d7a021f17c3220b96dd2e5a9678e9293995c420e0a7030631ec4b369702b9d9bfbd81b43b5a73"}}) 00:23:56 executing program 0: keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000240), &(0x7f0000000580)=ANY=[], 0x0, 0x0) [ 2830.613304][ T34] audit: type=1326 audit(1625790236.908:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18163 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7f74549 code=0x0 00:23:57 executing program 3: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) 00:23:57 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x40, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, 0x0) 00:23:57 executing program 2: ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) r0 = syz_io_uring_setup(0x653d, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000500), 0xf915, 0x0) syz_io_uring_setup(0x1229, &(0x7f0000000540)={0x0, 0xcb41, 0x4, 0x3, 0x2f1, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) r1 = syz_io_uring_setup(0x4c6, &(0x7f0000000640)={0x0, 0xbec8, 0x20, 0x1, 0x3a7, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) syz_io_uring_setup(0x2f02, &(0x7f0000000780)={0x0, 0x813a, 0x6, 0x2, 0x3cf, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000800), &(0x7f0000000840)) socket$inet_udp(0x2, 0x2, 0x0) 00:23:57 executing program 1: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x1, @raw_data="0184eabb992283c885f2b5321b78588a3c401eac4115701eb0c5201424bc28d364572cded700d47669d7f54b29a384dc1513009be7edeb8d5819301957229567825487c1ae8eceb6306306fc893c26516059734d06a63fbe6b72ec9dca7d742da1d45e5f2e3546393ceb537ecb95ee804d50ba9878551fcb1898833bed920dc9dd33de4de97732dfd145c7fb06d816b6a90255d449562cea0cda69865343379e032d7a021f17c3220b96dd2e5a9678e9293995c420e0a7030631ec4b369702b9d9bfbd81b43b5a73"}}) 00:23:57 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 00:23:57 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:57 executing program 3: syz_io_uring_setup(0x1229, &(0x7f0000000540), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000005c0), 0x0) syz_io_uring_setup(0x4c6, &(0x7f0000000640), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) 00:23:57 executing program 2: r0 = openat$uinput(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x5421, 0x8049000) 00:23:57 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000680)=[@cred={{0x18}}], 0x18}, 0x0) 00:23:57 executing program 1: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x1, @raw_data="0184eabb992283c885f2b5321b78588a3c401eac4115701eb0c5201424bc28d364572cded700d47669d7f54b29a384dc1513009be7edeb8d5819301957229567825487c1ae8eceb6306306fc893c26516059734d06a63fbe6b72ec9dca7d742da1d45e5f2e3546393ceb537ecb95ee804d50ba9878551fcb1898833bed920dc9dd33de4de97732dfd145c7fb06d816b6a90255d449562cea0cda69865343379e032d7a021f17c3220b96dd2e5a9678e9293995c420e0a7030631ec4b369702b9d9bfbd81b43b5a73"}}) 00:23:58 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:58 executing program 2: r0 = openat$vmci(0xffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x4020940d, &(0x7f0000000180)) 00:23:58 executing program 3: openat$dlm_monitor(0xffffff9c, &(0x7f0000000640), 0x0, 0x0) 00:23:58 executing program 1: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x1, @raw_data="0184eabb992283c885f2b5321b78588a3c401eac4115701eb0c5201424bc28d364572cded700d47669d7f54b29a384dc1513009be7edeb8d5819301957229567825487c1ae8eceb6306306fc893c26516059734d06a63fbe6b72ec9dca7d742da1d45e5f2e3546393ceb537ecb95ee804d50ba9878551fcb1898833bed920dc9dd33de4de97732dfd145c7fb06d816b6a90255d449562cea0cda69865343379e032d7a021f17c3220b96dd2e5a9678e9293995c420e0a7030631ec4b369702b9d9bfbd81b43b5a73"}}) 00:23:58 executing program 4: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000180)) [ 2832.243430][T18235] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:58 executing program 3: r0 = openat$vmci(0xffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) 00:23:58 executing program 0: r0 = openat$vmci(0xffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) io_uring_setup(0x4bd6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x69}) 00:23:58 executing program 2: syz_io_uring_setup(0x653d, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0x4c6, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000700)) 00:23:58 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:58 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x1, @raw_data="0184eabb992283c885f2b5321b78588a3c401eac4115701eb0c5201424bc28d364572cded700d47669d7f54b29a384dc1513009be7edeb8d5819301957229567825487c1ae8eceb6306306fc893c26516059734d06a63fbe6b72ec9dca7d742da1d45e5f2e3546393ceb537ecb95ee804d50ba9878551fcb1898833bed920dc9dd33de4de97732dfd145c7fb06d816b6a90255d449562cea0cda69865343379e032d7a021f17c3220b96dd2e5a9678e9293995c420e0a7030631ec4b369702b9d9bfbd81b43b5a73"}}) 00:23:58 executing program 4: openat$vmci(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 00:23:59 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) [ 2832.953763][T18254] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000004c0), 0xffffffffffffffff) 00:23:59 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x1, @raw_data="0184eabb992283c885f2b5321b78588a3c401eac4115701eb0c5201424bc28d364572cded700d47669d7f54b29a384dc1513009be7edeb8d5819301957229567825487c1ae8eceb6306306fc893c26516059734d06a63fbe6b72ec9dca7d742da1d45e5f2e3546393ceb537ecb95ee804d50ba9878551fcb1898833bed920dc9dd33de4de97732dfd145c7fb06d816b6a90255d449562cea0cda69865343379e032d7a021f17c3220b96dd2e5a9678e9293995c420e0a7030631ec4b369702b9d9bfbd81b43b5a73"}}) 00:23:59 executing program 0: io_setup(0x7, &(0x7f00000034c0)) io_setup(0x8, &(0x7f0000000080)) 00:23:59 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:23:59 executing program 2: socket$inet(0x2, 0x2, 0x2) 00:23:59 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 00:23:59 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x1, @raw_data="0184eabb992283c885f2b5321b78588a3c401eac4115701eb0c5201424bc28d364572cded700d47669d7f54b29a384dc1513009be7edeb8d5819301957229567825487c1ae8eceb6306306fc893c26516059734d06a63fbe6b72ec9dca7d742da1d45e5f2e3546393ceb537ecb95ee804d50ba9878551fcb1898833bed920dc9dd33de4de97732dfd145c7fb06d816b6a90255d449562cea0cda69865343379e032d7a021f17c3220b96dd2e5a9678e9293995c420e0a7030631ec4b369702b9d9bfbd81b43b5a73"}}) 00:24:00 executing program 4: r0 = openat$vmci(0xffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x10, 0x0) [ 2833.878213][T18285] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.5'. 00:24:00 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 00:24:00 executing program 0: io_uring_setup(0x2ad1, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0x23}) 00:24:00 executing program 1: syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x1, @raw_data="0184eabb992283c885f2b5321b78588a3c401eac4115701eb0c5201424bc28d364572cded700d47669d7f54b29a384dc1513009be7edeb8d5819301957229567825487c1ae8eceb6306306fc893c26516059734d06a63fbe6b72ec9dca7d742da1d45e5f2e3546393ceb537ecb95ee804d50ba9878551fcb1898833bed920dc9dd33de4de97732dfd145c7fb06d816b6a90255d449562cea0cda69865343379e032d7a021f17c3220b96dd2e5a9678e9293995c420e0a7030631ec4b369702b9d9bfbd81b43b5a73"}}) 00:24:00 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:24:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x0, "189fa2a0bd59dfce358ce54cd9ac0efec0dca541917b18df8410cb1e1e45b4ef"}) 00:24:00 executing program 4: fork() r0 = getpid() process_vm_readv(r0, &(0x7f0000001700)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/231, 0xe7}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001940)=[{&(0x7f0000001780)=""/76, 0x4c}, {&(0x7f0000001800)=""/144, 0x90}], 0x2, 0x0) 00:24:00 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 00:24:01 executing program 0: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f00000004c0), 0x0, 0x0) io_uring_setup(0x4bd6, &(0x7f0000000580)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, 0x0, 0x0) openat$dlm_monitor(0xffffff9c, 0x0, 0x0, 0x0) [ 2834.700087][T18309] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.5'. 00:24:01 executing program 1: syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x1, @raw_data="0184eabb992283c885f2b5321b78588a3c401eac4115701eb0c5201424bc28d364572cded700d47669d7f54b29a384dc1513009be7edeb8d5819301957229567825487c1ae8eceb6306306fc893c26516059734d06a63fbe6b72ec9dca7d742da1d45e5f2e3546393ceb537ecb95ee804d50ba9878551fcb1898833bed920dc9dd33de4de97732dfd145c7fb06d816b6a90255d449562cea0cda69865343379e032d7a021f17c3220b96dd2e5a9678e9293995c420e0a7030631ec4b369702b9d9bfbd81b43b5a73"}}) 00:24:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 00:24:01 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:24:01 executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 00:24:01 executing program 4: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$uinput(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001680)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 00:24:01 executing program 1: syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x1, @raw_data="0184eabb992283c885f2b5321b78588a3c401eac4115701eb0c5201424bc28d364572cded700d47669d7f54b29a384dc1513009be7edeb8d5819301957229567825487c1ae8eceb6306306fc893c26516059734d06a63fbe6b72ec9dca7d742da1d45e5f2e3546393ceb537ecb95ee804d50ba9878551fcb1898833bed920dc9dd33de4de97732dfd145c7fb06d816b6a90255d449562cea0cda69865343379e032d7a021f17c3220b96dd2e5a9678e9293995c420e0a7030631ec4b369702b9d9bfbd81b43b5a73"}}) 00:24:01 executing program 0: syz_io_uring_setup(0x653d, &(0x7f00000000c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1229, &(0x7f0000000540), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000005c0), 0x0) syz_io_uring_setup(0x4c6, &(0x7f0000000640), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) 00:24:01 executing program 2: syz_io_uring_setup(0x2f02, &(0x7f0000000780)={0x0, 0x0, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000800), &(0x7f0000000840)) [ 2835.550249][T18332] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.5'. 00:24:02 executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 00:24:02 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:24:02 executing program 4: request_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 00:24:02 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, 0x0) 00:24:02 executing program 2: socketpair(0x18, 0x0, 0x4, &(0x7f00000004c0)) 00:24:02 executing program 0: syz_io_uring_setup(0x653d, &(0x7f00000000c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) syz_open_dev$hiddev(&(0x7f0000000500), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000540), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4c6, &(0x7f0000000640), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) syz_io_uring_setup(0x5174, &(0x7f0000000c80), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) [ 2836.311258][T18359] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.5'. 00:24:02 executing program 4: sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) 00:24:02 executing program 3: bind$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 00:24:02 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf250000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:24:02 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, 0x0) 00:24:03 executing program 2: r0 = openat$fb0(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000240)={0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)}) 00:24:03 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{0x0, 0x7ffff000}, {0x0}, {&(0x7f0000000180)=' ', 0x1}], 0x3}, 0x0) 00:24:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x48081) 00:24:03 executing program 3: socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) [ 2837.169534][T18380] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.5'. 00:24:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, 0x0) 00:24:03 executing program 2: syz_open_dev$media(&(0x7f0000000500), 0x0, 0x4000) 00:24:03 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf250000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:24:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x4800) ioctl$NBD_DISCONNECT(r0, 0xab08) 00:24:03 executing program 3: socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 00:24:03 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0xc}}, @cred={{0x18}}], 0x24}, 0x0) 00:24:04 executing program 2: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) 00:24:04 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @raw_data="0184eabb992283c885f2b5321b78588a3c401eac4115701eb0c5201424bc28d364572cded700d47669d7f54b29a384dc1513009be7edeb8d5819301957229567825487c1ae8eceb6306306fc893c26516059734d06a63fbe6b72ec9dca7d742da1d45e5f2e3546393ceb537ecb95ee804d50ba9878551fcb1898833bed920dc9dd33de4de97732dfd145c7fb06d816b6a90255d449562cea0cda69865343379e032d7a021f17c3220b96dd2e5a9678e9293995c420e0a7030631ec4b369702b9d9bfbd81b43b5a73"}}) [ 2837.928551][T18397] block nbd0: NBD_DISCONNECT [ 2838.031972][T18401] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.5'. 00:24:04 executing program 0: io_uring_setup(0x0, &(0x7f0000000580)) 00:24:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000080)="8f1eecf32c38ea788eeb1a60825d481c9c78f611624b294b2e251a50b161217b945709133225a2a99dccd824820c2c971a0bdd57f9c8380d9042a2081f09cf9eca74d19e6634b71732776396e4acf9334e585947c41ac70bfb65c7569c57f1a81686ea236b646b3ea49003d7f8df023e845f62f7f942034f6ad61e7d989426911ea7f71b495d9de2d0fc41e6b0904f6e5d99982783d408bd0a11e1f801346553cd90852b18a14e82cb7fb85d33b8b02f72649016b2a0dc57d13a04a60fd56a5503377c861ae0736d72b3da9a8f98ad59a3ea65558353325dc7bcfe36b9735a63b533858174", 0xe5}, {&(0x7f0000000180)="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", 0xddc}], 0x2}, 0x0) 00:24:04 executing program 3: socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 00:24:04 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf250000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:24:04 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$uinput(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x10, 0x1, 0x1, [r1]}}], 0x10}], 0x1, 0x0) 00:24:04 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @raw_data="0184eabb992283c885f2b5321b78588a3c401eac4115701eb0c5201424bc28d364572cded700d47669d7f54b29a384dc1513009be7edeb8d5819301957229567825487c1ae8eceb6306306fc893c26516059734d06a63fbe6b72ec9dca7d742da1d45e5f2e3546393ceb537ecb95ee804d50ba9878551fcb1898833bed920dc9dd33de4de97732dfd145c7fb06d816b6a90255d449562cea0cda69865343379e032d7a021f17c3220b96dd2e5a9678e9293995c420e0a7030631ec4b369702b9d9bfbd81b43b5a73"}}) 00:24:04 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, 0x0, 0x0) 00:24:05 executing program 4: getitimer(0x2, &(0x7f0000000740)) 00:24:05 executing program 0: openat$nvram(0xffffff9c, 0x0, 0x0, 0x0) [ 2838.848494][T18419] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.5'. 00:24:05 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDDISABIO(r0, 0x4b37) 00:24:05 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, @raw_data="0184eabb992283c885f2b5321b78588a3c401eac4115701eb0c5201424bc28d364572cded700d47669d7f54b29a384dc1513009be7edeb8d5819301957229567825487c1ae8eceb6306306fc893c26516059734d06a63fbe6b72ec9dca7d742da1d45e5f2e3546393ceb537ecb95ee804d50ba9878551fcb1898833bed920dc9dd33de4de97732dfd145c7fb06d816b6a90255d449562cea0cda69865343379e032d7a021f17c3220b96dd2e5a9678e9293995c420e0a7030631ec4b369702b9d9bfbd81b43b5a73"}}) 00:24:05 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf25000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:24:05 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, 0x0, 0x0) 00:24:05 executing program 4: r0 = openat$vmci(0xffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7b3, &(0x7f0000000180)) 00:24:05 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "a36ce6ffe3b4cf4eddf32d07997254b808057e732d8533fcffb2235e3f0d0b7353089f84e0ff6524d7c2d73fb53d55df3ecbfcf4a599b788bcd88374aec9e7f3"}, 0x48, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000003c0)={r1}, &(0x7f0000000400)={'enc=', 'pkcs1', ' hash=', {'sha3-224\x00'}}, 0x0, 0x0) 00:24:06 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 00:24:06 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x24042, 0x0) [ 2839.678187][T18439] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.5'. 00:24:06 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, 0x0, 0x0) 00:24:06 executing program 4: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x18, 0x0, 0x4, &(0x7f00000004c0)) 00:24:06 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf25000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:24:06 executing program 0: socket(0x15, 0x5, 0xfff) [ 2840.194332][ T34] audit: type=1800 audit(1625790246.488:103): pid=18449 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=13862 res=0 errno=0 [ 2840.216298][ T34] audit: type=1800 audit(1625790246.508:104): pid=18449 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=13862 res=0 errno=0 00:24:06 executing program 1: syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) 00:24:06 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f00000005c0)=[{0x3, 0x0, 0x0, 0xffff}]}) 00:24:06 executing program 2: openat$cachefiles(0xffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(ctr(des3_ede))\x00'}, 0x58) 00:24:06 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0), 0x4) [ 2840.593770][T18459] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.5'. 00:24:07 executing program 0: request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0xfffffffffffffff9) 00:24:07 executing program 1: openat$nvram(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) 00:24:07 executing program 5: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001100010029bd0000fddbdf25000000", @ANYRES32=r3, @ANYBLOB="100801001000000008001b00fd000000400034801400350076657468305f746f5f626f6e640000001400350069705f767469300000000000000000001400350076657468315f6d616376746170000000140035006e657464657673696d3000000000000014003500697036746e6c30000000000000000000"], 0x90}}, 0x0) 00:24:07 executing program 4: r0 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000400)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r0}, &(0x7f00000002c0)={'enc=', 'pkcs1', ' hash=', {'sha224-generic\x00'}}, 0x0, 0x0) 00:24:07 executing program 3: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, 0x0) 00:24:07 executing program 0: r0 = openat$vmci(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) openat$nvram(0xffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x4bd6, &(0x7f0000000580)) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(0xffffffffffffffff, 0x7b3, 0x0) r1 = openat$dlm_monitor(0xffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7aa, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x20008800) 00:24:07 executing program 2: r0 = getpid() process_vm_readv(r0, &(0x7f0000001700)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/231, 0xe7}, {0x0}, {0x0}], 0x5, &(0x7f0000001940)=[{&(0x7f0000001780)=""/76, 0x4c}, {&(0x7f0000001800)=""/144, 0x90}], 0x2, 0x0) 00:24:07 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x2c}, 0x0) [ 2841.400905][T18488] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.5'. 00:24:07 executing program 4: mknodat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0) 00:24:07 executing program 3: r0 = openat$uinput(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40049409, 0x0) 00:24:08 executing program 2: r0 = openat$dsp(0xffffff9c, &(0x7f0000002600), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000002640)) 00:24:08 executing program 0: r0 = openat$uinput(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x402c5829, 0x0) 00:24:08 executing program 1: io_setup(0x7, &(0x7f0000000040)=0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) io_submit(r0, 0x1, &(0x7f00000019c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000900)="f877e8b5fa184de42ec2ceb9f333fe6c8d05eb6e7d3a13bd476195930b13d6bc8eef783e593d4444fab0af5b0139fa95b53dfdeeaaa82e3748ded1e2a669556569f126ec77effaf8ca1fafe9320d0fcc1dc963938549cde16ec197943a8aaa27863a5044cb9fddddc9508ad4f06a5929b0910f6af1b1e335d9f7eae9eb1123ad75ac1715426620f9152cb1e06813d356067f12f56ed71e8cc4e8d9e96ac585b77d9cc7a99c3f6799b804d418da50de76093898370d4ae531f816c7ec444eddbbc492d7a7ff5657016d0210ee52d2c6b72a21919b840e39fc7c4b5b876a9a783979bdb9f107071375396b03706e09abfca65ba813e0dbbdb0fe7c5e981e9cab22d26fb9c2abe98cd8c634185dc1edcdacdc7cc6c4c02de2afb359363693a127d766e38f1cc73d1f507e33b350083d043135615f2e2b782df05c5680e40dbe21f69724d66beacea49734fd8b7eba0d80a5b918a95cc82d7c766141ad00b4c19e1be28f40670575b8a8923262a02320c11fa5f3d7ea9007ca882a6cd344c35f094abd4af7b1a3fe30347effa73712b6ddd4cbf8e1a7e887a1b6e02fb95e4c116be0553fe38298bad7c78cbe6df63619ab19f51d81994870ee65ff0320128794671c6420fdc6d54937b2a03f3fbe17ead10ce343b72a95bf60066eeeb2a3651546375a11502136da5f3412923d0328c2570c96c5893e06818db79a6a54c22d9ea42bf5", 0x201}]) 00:24:08 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000340)='u', 0x1}], 0x1}, 0x80) 00:24:08 executing program 4: setrlimit(0x0, &(0x7f0000000000)={0x2, 0x4}) 00:24:08 executing program 5: syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) openat$nvram(0xffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x0, 0x3, &(0x7f0000000a80)=@framed, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 00:24:08 executing program 2: openat$adsp1(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) 00:24:08 executing program 0: ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, 0x0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) 00:24:08 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x7, 0xc0, 0x2, 0x8}, {0x6, 0x20, 0x1, 0x1c00}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) setxattr$incfs_size(0x0, 0x0, 0x0, 0x0, 0x0) 00:24:08 executing program 1: add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 00:24:09 executing program 3: socket(0x1e, 0x0, 0x7) 00:24:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000000180)="d5", 0x1}], 0x2}, 0x0) 00:24:09 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f00000004c0)) [ 2843.031764][ T34] audit: type=1326 audit(1625790249.328:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18526 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7f3b549 code=0x0 00:24:09 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) 00:24:09 executing program 1: r0 = openat$vmci(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0xc020660b, 0x0) 00:24:09 executing program 4: r0 = openat$uinput(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x801c581f, 0x0) 00:24:09 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r0, 0x1}, 0x14}}, 0x0) 00:24:10 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) 00:24:10 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r0, 0x1}, 0x14}}, 0x0) 00:24:10 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000080)="8f1eecf32c38ea788eeb1a60825d", 0xe}, {&(0x7f0000000180)="d5", 0x1}, {&(0x7f0000001180)='-', 0x1}], 0x3}, 0x0) [ 2843.839681][ T34] audit: type=1326 audit(1625790250.138:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18526 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7f3b549 code=0x0 00:24:10 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x18}], 0x1, 0x0) 00:24:10 executing program 0: socketpair(0x29, 0x2, 0xfffffffd, &(0x7f0000000040)) 00:24:10 executing program 2: openat$adsp1(0xffffff9c, &(0x7f0000000240), 0x101000, 0x0) 00:24:10 executing program 3: r0 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz0\x00'}) 00:24:10 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='net_prio.prioidx\x00', 0x0, 0x0) 00:24:10 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x0) 00:24:10 executing program 0: r0 = socket(0x11, 0x3, 0x0) getsockname$l2tp(r0, 0x0, &(0x7f0000000080)) 00:24:10 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x441, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v2, 0x14, 0x0) 00:24:10 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 00:24:10 executing program 1: r0 = syz_io_uring_setup(0x653d, &(0x7f00000000c0)={0x0, 0xbea9, 0x2, 0x0, 0x20f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) syz_io_uring_setup(0x4c6, &(0x7f0000000640)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) syz_io_uring_setup(0x0, &(0x7f0000000780)={0x0, 0x813a}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000800), 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 00:24:11 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{0x0}, {0x0}, {&(0x7f0000000180)=' ', 0x1}], 0x3, 0x0, 0x2}, 0x0) 00:24:11 executing program 4: r0 = openat$vmci(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7b1, 0x0) 00:24:11 executing program 0: r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)={@my=0x0}) 00:24:11 executing program 5: openat$dlm_monitor(0xffffff9c, 0x0, 0x20400, 0x0) 00:24:11 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) 00:24:11 executing program 2: syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) openat$adsp1(0xffffff9c, 0x0, 0x0, 0x0) openat$adsp1(0xffffff9c, &(0x7f00000002c0), 0x8201, 0x0) 00:24:11 executing program 1: socket(0x2b, 0x1, 0x20000007) 00:24:11 executing program 0: r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000004c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) 00:24:11 executing program 4: io_setup(0x7, &(0x7f0000000040)=0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) io_submit(r0, 0x1, &(0x7f00000019c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000900)="f877e8b5fa184de42e", 0x9}]) 00:24:11 executing program 3: r0 = openat$uinput(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x401c5820, 0x0) 00:24:12 executing program 5: r0 = openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc04c560f, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "745f0cae"}, 0x0, 0x0, @userptr}) 00:24:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=[@rights={{0xc}}], 0xc}, 0x0) 00:24:12 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{0x0}, {0x0}, {&(0x7f0000000180)=' ', 0x33fe0}], 0x3}, 0x0) 00:24:12 executing program 2: io_setup(0x7, &(0x7f0000000040)=0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) io_submit(r0, 0x1, &(0x7f00000019c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 00:24:12 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) lstat(0x0, &(0x7f00000003c0)) sendmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x2c}, 0x0) 00:24:12 executing program 3: syz_io_uring_setup(0x4c6, &(0x7f0000000640)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) 00:24:12 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000340)=@abs={0x1}, 0x6e) 00:24:12 executing program 5: socket(0x0, 0x80d, 0x0) 00:24:12 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000006c0)) 00:24:12 executing program 4: r0 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40049409, 0x4000d) 00:24:12 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) setxattr$incfs_size(0x0, 0x0, 0x0, 0x0, 0x0) 00:24:13 executing program 3: io_setup(0x8, &(0x7f00000000c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000bc0)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 00:24:13 executing program 1: r0 = openat$dsp(0xffffff9c, &(0x7f0000002600), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) 00:24:13 executing program 0: r0 = openat$vmci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) 00:24:13 executing program 5: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000080)) syz_io_uring_setup(0x653d, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0x4c6, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2f02, &(0x7f0000000780)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) [ 2846.937804][ T34] audit: type=1326 audit(1625790253.237:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18626 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7f97549 code=0x0 00:24:13 executing program 4: r0 = openat$uinput(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x541b, 0x0) 00:24:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000c40)={0x0, @rc={0x1f, @fixed}, @can, @can, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)='netpci0\x00'}) 00:24:13 executing program 3: syz_io_uring_setup(0x1229, &(0x7f0000000540), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 00:24:13 executing program 0: openat$uinput(0xffffff9c, 0x0, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/168, 0x2000, 0x1000}, 0x1c) 00:24:13 executing program 4: add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 00:24:13 executing program 5: syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) 00:24:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) [ 2847.747016][ T34] audit: type=1326 audit(1625790254.047:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18626 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7f97549 code=0x0 00:24:14 executing program 2: r0 = openat$fb0(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000140)=[0x0], &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)}) 00:24:14 executing program 1: openat$dlm_plock(0xffffff9c, &(0x7f0000000740), 0x280, 0x0) 00:24:14 executing program 3: request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0xfffffffffffffffc) 00:24:14 executing program 5: r0 = getpid() process_vm_readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/96, 0x60}], 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)=""/176, 0xb0}], 0x1, 0x0) 00:24:14 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x38}, 0x10) 00:24:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x0, "189fa2a0bd59dfce358ce54cd9ac0efec0dca541917b18df8410cb1e1e45b4ef"}) 00:24:14 executing program 3: r0 = openat$uinput(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0xc0045878, 0x0) 00:24:14 executing program 1: openat$dsp(0xffffff9c, &(0x7f0000002600), 0x600000, 0x0) 00:24:14 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$uinput(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [r1, r0]}}], 0x14}, 0x0) 00:24:14 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000180)=' ', 0x1}], 0x1}, 0x0) 00:24:15 executing program 0: process_vm_readv(0x0, &(0x7f0000001700)=[{&(0x7f00000000c0)=""/117, 0x75}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001940)=[{0x0}, {0x0}], 0x2, 0x0) 00:24:15 executing program 4: r0 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) read$dsp(r0, &(0x7f0000000480)=""/4096, 0x1000) 00:24:15 executing program 3: io_uring_setup(0x4bd6, &(0x7f0000000580)) openat$dlm_monitor(0xffffff9c, 0x0, 0x0, 0x0) 00:24:15 executing program 2: syz_io_uring_setup(0x653d, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), 0x0) syz_open_dev$hiddev(&(0x7f0000000500), 0x0, 0x0) syz_io_uring_setup(0x4c6, &(0x7f0000000640), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2f02, &(0x7f0000000780)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 00:24:15 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) 00:24:15 executing program 5: r0 = openat$uinput(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40046602, 0x0) 00:24:15 executing program 0: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) 00:24:15 executing program 4: pipe(&(0x7f00000007c0)) 00:24:15 executing program 3: r0 = openat$vmci(0xffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x5452, &(0x7f0000000180)={@hyper}) 00:24:15 executing program 1: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, 0x0) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0) syz_io_uring_setup(0x653d, &(0x7f00000000c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) read$hiddev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x4c6, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000c80)={0x0, 0x7ba, 0x0, 0x0, 0x3b5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000d00), 0x0) 00:24:15 executing program 5: ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, 0x0) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0) r0 = syz_io_uring_setup(0x653d, &(0x7f00000000c0)={0x0, 0xbea9, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) read$hiddev(0xffffffffffffffff, &(0x7f0000000400)=""/188, 0xbc) syz_open_dev$hiddev(&(0x7f0000000500), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) syz_io_uring_setup(0x4c6, &(0x7f0000000640)={0x0, 0xbec8, 0x20, 0x1, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) syz_io_uring_setup(0x2f02, &(0x7f0000000780)={0x0, 0x0, 0x6, 0x2, 0x3cf}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 00:24:15 executing program 2: r0 = fork() process_vm_readv(r0, &(0x7f0000001100)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001380)=[{&(0x7f0000001140)=""/16, 0x10}], 0x1, 0x0) 00:24:16 executing program 0: ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x7}) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0) syz_io_uring_setup(0x653d, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000000400)=""/188, 0xbc) syz_open_dev$hiddev(&(0x7f0000000500), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000600)) syz_io_uring_setup(0x4c6, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x3a7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000c80), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000d40)) 00:24:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(ctr(des3_ede))\x00'}, 0x58) 00:24:16 executing program 3: openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) 00:24:16 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x7, 0x0, 0x2}, {0x6, 0x0, 0x0, 0x1c00}]}) 00:24:16 executing program 5: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) 00:24:16 executing program 2: getresgid(&(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000001600)) 00:24:16 executing program 3: r0 = openat$vmci(0xffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7b3, 0x0) 00:24:16 executing program 0: openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000002c0)={0x0, 0x0, 0x0, "49de226976761bebb8760c21ded710f045d0818acd93e97059dfcc8c83a7121d"}) io_uring_setup(0x4bd6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x2}) openat$dlm_monitor(0xffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) [ 2850.580558][ T34] audit: type=1326 audit(1625790256.877:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18748 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7fcb549 code=0x0 00:24:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:24:17 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x40000023, 0x0, 0x0) 00:24:17 executing program 2: r0 = openat$vmci(0xffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x541b, 0x0) 00:24:17 executing program 3: r0 = openat$uinput(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x402c5828, 0x0) 00:24:17 executing program 0: r0 = openat$ashmem(0xffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) 00:24:17 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r1 = openat$adsp1(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r0, 0x1}, 0x14}}, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:24:17 executing program 5: openat$vga_arbiter(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2851.400522][ T34] audit: type=1326 audit(1625790257.697:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18748 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7fcb549 code=0x0 00:24:17 executing program 1: syz_io_uring_setup(0x5174, &(0x7f0000000c80), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000d00), &(0x7f0000000d40)) 00:24:18 executing program 3: r0 = socket(0x18, 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:24:18 executing program 2: socketpair(0x18, 0x0, 0x0, &(0x7f00000004c0)) 00:24:18 executing program 0: syz_io_uring_setup(0x1229, &(0x7f0000000540)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) 00:24:18 executing program 5: r0 = openat$vmci(0xffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x2, &(0x7f0000000180)) 00:24:18 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x10, r0, 0x0) 00:24:18 executing program 2: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x4800) 00:24:18 executing program 1: bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x38) 00:24:18 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x0) 00:24:18 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000640), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 00:24:18 executing program 5: add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000003c0), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 00:24:19 executing program 4: openat2$dir(0xffffff9c, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0xa}, 0x18) 00:24:19 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000140)={0x2, 0x0, @private=0xa010101}, 0x10) 00:24:19 executing program 1: syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) 00:24:19 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r0, &(0x7f0000001140)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 00:24:19 executing program 3: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x100081}, 0x20) 00:24:19 executing program 5: openat$nvram(0xffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') 00:24:19 executing program 4: io_setup(0x7, &(0x7f0000000040)=0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) io_submit(r0, 0x1, &(0x7f00000019c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000900)="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", 0x401}]) 00:24:19 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000002800)={0x1ec4, 0x12, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x109, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "16c2d774cabb7dddc3c84c434b6f6d831d1c15ff7207d9627790dd05d9bb619c715146b8ccf18f84fa4abdda7303f497818b92bca87b70cb397716a8cbcc1c26f161ea521189080f8cfdc7133eaf09c55a3fdc1a2e7280386f3c7d003d17a075941508a2f6d08a88b5cecd4b3d628ec161a343d3b45c620998117e3d1feda1b754d18bdab36c7eed68e7647091886d303cdb09d77ca9f431dd2536a353103d8cc8d80597052f91ff474ab08fed419cf08992b45e8fbaba3040788eb8215cbbc2b55910f541903ef96d4c9f48d4dc90c8374ebb5a28770a9c9a7cf3a79a81c6604297567068"}, @INET_DIAG_REQ_BYTECODE={0x1001, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x81, 0x1, "1a888bd184c3b34019522ca1053b8a29e96146f0f6704e2c19e8f52af1bc596d761f64e2c15cc675ca7777581bdb09dcf4d6574d6bdc67c4c4654a887989bfbf9abf3275aa17518b0dad3b39602847496b7edda40943f2ab672347042c1f4db9648dacd68fdf50d3ca0fd2ff498b61c6595c5988827419acb2da6dec9f"}, @INET_DIAG_REQ_BYTECODE={0xb5, 0x1, "d6283c8bcb154bc73c61908f52b9d520ca8cc1b08b22935761cf15b232ed6b5238ec7d119589826fdc26f00b7383e0cbd45bf4df513803797ed2c332bc1caf42c5bdd8f1a6b72afe002415a5f013d5e6832bcbb26b54ebe3f64ed4cd7eefc6cd390b1ca053a64733270855dd24ea23766ca289cc9d829392af442e1aeb2a005fc3092cbcb41df70ad69010235758234df2fc5dc32bacc997835515c2ce4f2deb8b2e12580d3c5145cb083e40bd263f61ca"}, @INET_DIAG_REQ_BYTECODE={0xb3d, 0x1, "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"}]}, 0x1ec4}}, 0x0) 00:24:19 executing program 2: pipe(&(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, 0x0) 00:24:19 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/168, 0x2000, 0x1000}, 0x1c) 00:24:19 executing program 3: r0 = openat$uinput(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x80046601, 0x0) 00:24:19 executing program 5: r0 = openat$vmci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0) 00:24:20 executing program 4: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, 0x0) syz_open_dev$hiddev(&(0x7f0000000500), 0x0, 0x0) 00:24:20 executing program 1: r0 = openat$vmci(0xffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x40046602, &(0x7f0000000180)) 00:24:20 executing program 2: openat$dlm_monitor(0xffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000c80), 0xffffffffffffffff) 00:24:20 executing program 0: openat$vga_arbiter(0xffffff9c, &(0x7f0000000040), 0x9eb06db2bf194ae6, 0x0) 00:24:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000004c0), r0) 00:24:20 executing program 5: io_uring_setup(0x2ad1, &(0x7f00000003c0)={0x0, 0x34bb, 0x2, 0x0, 0x23}) 00:24:20 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) 00:24:20 executing program 1: socketpair(0x11, 0x3, 0xfff, &(0x7f0000000080)) 00:24:20 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000), 0xffffffff, 0x2) 00:24:20 executing program 0: r0 = io_uring_setup(0x37a9, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 00:24:21 executing program 3: r0 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045565, 0x4000d) 00:24:21 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000000140)) [ 2854.819664][ T3128] ieee802154 phy0 wpan0: encryption failed: -22 [ 2854.826358][ T3128] ieee802154 phy1 wpan1: encryption failed: -22 00:24:21 executing program 4: r0 = openat$vmci(0xffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7ac, 0x0) 00:24:21 executing program 1: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_provisioning(&(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x0, 0x0, @b}, 0x48, r0) 00:24:21 executing program 2: r0 = openat$full(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000005c0)='net_prio.prioidx\x00', 0x0, 0x0) 00:24:21 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffa) 00:24:21 executing program 5: ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) 00:24:21 executing program 3: socket(0x0, 0x0, 0x1) 00:24:21 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x3, 0x1, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0x8, 0x0, 0x2}], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:24:21 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f000001e5c0)={0x0, 0x0, &(0x7f000001e500)=[{&(0x7f000001d000)=""/39, 0x27}], 0x1}, 0x0) 00:24:22 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x8e01d420dffe8641, 0x0) close(r0) 00:24:22 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0) 00:24:22 executing program 2: io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300), 0x8}) 00:24:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, 0x0) 00:24:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000880)={0xf}, 0x40) 00:24:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:24:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:24:22 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:24:22 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000001}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 00:24:22 executing program 0: socketpair(0x25, 0x1, 0x0, &(0x7f0000000240)) 00:24:22 executing program 3: socketpair(0x1f, 0x0, 0x0, &(0x7f0000001400)) 00:24:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000880)={0xf, 0x0, 0x0, 0x7}, 0x40) 00:24:23 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001300)) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004680)={&(0x7f0000001340)=@id={0x1e, 0x3, 0x0, {0x0, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000003680)}, 0x0) 00:24:23 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x48) 00:24:23 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000840)={&(0x7f0000000640)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2}}, 0x10, 0x0}, 0x0) 00:24:23 executing program 0: perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:24:23 executing program 3: r0 = socket$kcm(0x10, 0x8000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000000140)=""/195, 0xc3}], 0x4}, 0x0) 00:24:23 executing program 2: r0 = socket$kcm(0x10, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xc, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)="2e0000001a008118ffffffffff0000020a000000000000000000bfffffff00000000000026a4000000", 0x29}], 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0xfffffffffffffefe, 0x0, 0x0, 0x7, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}, 0x20, 0x808d9, 0x0, 0x0, 0x0, 0x2}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)) close(r1) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x7, 0x0, &(0x7f00000004c0)='GPL\x00', 0x1f, 0x1f, &(0x7f0000000500)=""/31, 0x41100, 0x1, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000540)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x6, 0x737, 0x5}, 0x10, r4}, 0x78) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000100)='GPL\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/282]) 00:24:23 executing program 1: socketpair(0x23, 0x0, 0x8130, &(0x7f0000000300)) 00:24:23 executing program 5: socketpair(0xa, 0x0, 0xffffffff, &(0x7f0000000040)) 00:24:23 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x48) 00:24:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[0x0], 0x1}, 0x20) 00:24:23 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000003600)=[{0x0}, {&(0x7f0000001400)="94", 0x1}], 0x2}, 0x0) 00:24:24 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="bb65d052ff40bc765af29704314b206926a70e7442c06c91aa0feef6", 0x1c}, {&(0x7f00000001c0)="60896d94412c718bd1edbe2edac0727d3f71e84c11608159ba8b801549aff40f084b3dae51ab32fdfd674ead40ec832bb572567e1e55faa8528b7316156b70b9beaf98b1c8cd456a66512a3e03128aa6fa9f2868400649bf6d1ee3c474da72d594de68f98f0468656f86091def3ebecff198546ea8fe67d49e03be119abbc543ae383acc9506d6d44a1b8f76587ae9edb40fe27a67a55dd2e447de01", 0x9c}, {&(0x7f0000000680)="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", 0xce5}], 0x3}, 0x0) 00:24:24 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x48) 00:24:24 executing program 1: perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:24:24 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00'}, 0x10) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) 00:24:24 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000a00)=""/161, 0x2e, 0xa1, 0x1}, 0x20) 00:24:24 executing program 5: perf_event_open$cgroup(&(0x7f0000000100)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:24:25 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={0x0, 0x0, 0x8}, 0x10) 00:24:25 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x48) 00:24:25 executing program 0: socket$kcm(0x10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b0b, &(0x7f0000000400)='wlan1\x00\x1f\x1a\xec\xb5\x12\x03F\xd9U\x1c\x00\x00U\x00\x00\x00\x00\x00\x00\xf2-\xda\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b8\x84c\xf2\xc2\fpp.{\xb2\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\x05\x00^9P\xee\x8aG\xdd2\x9d\xe9\x00\x00\x00)-v\x91WQ\xfd\xdcSE;\x9d\xc3\xc1LO\xf1\xf7\xbe\xdc\xd0Y\a\xe4\xcd\xdf\x11\r\x99\xfe#N\a\xc6\xf3I\x89tZU#Ifx\xc3\xeb\xbe\xb6efpM\xc8\xaa\x88BA\n\xd1\x16\x81\x96ZI\xb2\xb5\xf2\xe6\xf5\x00\x92\r\xf6\x8d\x95\x9db\xe2\xc4\xad\xcb>\x890xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000005400)={0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002fc0)="4b5bffd0c1198f40977a9c7a146bfac5de89d41aa48434d206768a736e8a036f8d7ee5d6ad1ad65bda0844cc437b04a462d05bf85a0e91d65e31e1bb69f138", 0x3f}, {&(0x7f0000003040)="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", 0x380}], 0x2, 0x0, 0x1378}, 0x4044) sendmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000300)=@isdn={0x22, 0x0, 0x9, 0x3f}, 0x80, &(0x7f0000000700)=[{0x0}], 0x1, &(0x7f0000001ac0)=[{0x60, 0x116, 0x7fff, "08193b4765dc9b78ace4a86cb796e709e0a7be6ae7e7039fade9320b600096638da378ee98599ef46747dec3273b3c753515b8780a9e9f56d0894839448ada49f136946c2c0d4c5709"}, {0x18, 0x112, 0xa0, "d0"}, {0x10, 0x109}, {0x10, 0x107, 0xd4a}, {0x10, 0x10a, 0x2}, {0x78, 0xff, 0xf0000000, "38299749455a005ea344766f027630814178ad8ad0860a4b4f33e68e604262c26a45e3dd0dc30b6be958f6cd623e33e669941a3de69d0e49f168512f8784b4ab8d1a6b64b44dedc4dcb1422e4862841e1378071dac93d0148261819d5dadd6dec5205fda243168"}, {0x10, 0x1, 0x8}], 0x130}, 0x0) r3 = gettid() perf_event_open(0x0, r3, 0x7, r0, 0x9) r4 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r4, &(0x7f0000000380)={0x0, 0xfffffffffffffe0c, &(0x7f0000000680)=[{&(0x7f0000005600)=""/102380, 0x1731f}], 0x1, 0x0, 0x60}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa278b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg(r4, &(0x7f0000000a80)={&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, 0x0}, 0x140) r5 = socket$kcm(0x29, 0x0, 0x0) sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0xd8, 0x11, 0xffffffff, "6fd502d927ab3239681f4450e2ba8c4ed1aeec4693bdf783828e1b0c1c0c35f69fb898f715d88b09e33928f505c624598435b63b21b1f70e7f48f17738387b053a4490bcc4bcb2c5e4c78dd3e04c01360f87158d9e0d4993c475aca5e6845065d0c116670bd1df5753ad31f458e576c60415e4db0ecd37316d498f11e145095c13544324051866a0d1e4d0682638ded87dbce6d0bd9213c42a2fab7bf824f0881c01256f7f87f1713ca8659f4543ad04d949a913b1f696bb020cc310c61d571513ccae09"}, {0x48, 0x29, 0x0, "a653d3a5230f55193b99860b6603a7baae1dcf026f90d8f34fd81e8460232b8d2f0887f0ac14c66f827de6e8520b4a2a037e9a"}], 0x120}, 0x4040044) 00:24:25 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x78) 00:24:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400), 0x48}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000540), 0x2bf70) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305839, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc028660f, &(0x7f00000005c0)=0x40c000000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) 00:24:25 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x7}]}]}}, &(0x7f0000001800)=""/4096, 0x32, 0x1000, 0x1}, 0x20) [ 2859.033548][T18954] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 2859.042730][T18954] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 2859.056116][T18950] netlink: 'syz-executor.0': attribute type 29 has an invalid length. 00:24:25 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x48) [ 2859.078756][T18956] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 2859.124694][T18956] netlink: 'syz-executor.0': attribute type 29 has an invalid length. 00:24:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001900)={'syzkaller1\x00'}) [ 2859.228517][T18950] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 2859.238017][T18950] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 2859.248537][T18956] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 2859.257929][T18954] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 2859.277598][T18959] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 2859.338038][ T34] audit: type=1800 audit(1625790265.637:111): pid=18960 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=13913 res=0 errno=0 00:24:25 executing program 2: socketpair(0x22, 0x0, 0x4, &(0x7f0000000080)) 00:24:25 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0xfffffffffffffffe, 0x0) 00:24:25 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:24:25 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:24:26 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x48) 00:24:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1f}, 0x40) 00:24:26 executing program 2: perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:24:26 executing program 0: socketpair(0x11, 0x3, 0xc6fc, &(0x7f0000000000)) 00:24:26 executing program 3: socketpair(0x28, 0x0, 0xa30, &(0x7f0000000040)) 00:24:26 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) write$cgroup_int(r0, &(0x7f0000000200), 0x7af19) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) 00:24:26 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x48) 00:24:26 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000500)) 00:24:26 executing program 2: perf_event_open$cgroup(&(0x7f0000000100)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:24:26 executing program 0: r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002e0, 0xe10, 0x9000a00, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) recvmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x7f, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1f00000000000000, &(0x7f0000000600)={0x2, 0x4, 0x400000, 0x8000000000000002, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x40) 00:24:26 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000750000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000fc0)={0x0}, 0x10) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() 00:24:27 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x48) 00:24:27 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x5, &(0x7f0000000000)=@framed={{}, [@map]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:24:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1c", 0x1}, {&(0x7f0000000080)="06", 0x1}], 0x2}, 0x0) 00:24:27 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r0) 00:24:27 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 00:24:27 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x48) 00:24:27 executing program 1: socket$kcm(0x10, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000005400)={0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002fc0)="4b5bffd0c1198f40977a9c7a146bfac5de89d41aa48434d206768a736e8a036f8d7ee5d6ad1ad65bda0844cc437b04a462d05bf85a0e91d65e31e1bb69f1383a0968a57c568f", 0x46}, {&(0x7f0000003040)="82960aab19ac05d73f537238143d8ef54c6a5c2d56f74833b05db2937203648c68ba742f4b074936750bbdd4d46ef95d31171ff66c8964202c880176410a704c45227ef6538c2e4838b852a442898c82d6b37b658ec42fd2972c6395089800c1c7e92dc631a0cba8aa2b4d5ff0233079de5896affa2685bbcafec2b25b62ca2a6a6765730f8778273c9733ba18b151dab6c1f9838a6f5e53fa7f81a5cccc48aa040d234f18abd1c72b9b773eb82328983365721a03461a81344f8597e3c8e8ca3b6a77ef64838dced010aa5ddb85f4f5e4686156c5ad290e400ef32e1d8b517f9a479ff6d00ba0cc3b55c49bce79b17f0c70c91aa1f646516419bc86c5557b780a35d05b29f1412fdb70c2598a0f1048da5c588f8f1920184ffd39e8711ff6f36ec3ba0ae5f5e651266d76ac3c25b4b29f7c0d026a74656f865e6e72ec4d253076306d9aabffc81660adc17baf57304eb7ca4a20a2803a9d0493668ffb952ecac46f179c8165a222bda4b166b39b29b00d98a64f97fdd6df68fc6e0f02db145c0506357f0fc403dfa309c109d4df9ab39f0e2b389ae3434565c5c28d3c6ea819409e183590fc4140f8fbd0d3e77957e0e107c0e60f3e64a6c93c6ae1e6a936ac321c9f6a1c3a015bb911b1c5206b10b5ff9f041da197c33e3352ffc46570e2b591c4ae5a451731780ea46312ecf6095557992c643936f4d9810ec804e658e90b863d1b1967c0ec62ef92696a32a9f4d7a7083101b8703c9c2fab31dce8cba68be55570c48a55f7aaed6aa1bd1d44256d7ee131440d54826537fc1b918397ffbcf76cc089060ed736cb7eb87c04c3ab561232995fd2e60931bbdd0451149cb0b3e4c27663cda7587af177cb7acd898a7a35219d6e94ca9853807038246a1828926b81c7f156e1334cea26d1437dfc39467325fca20974e52f67a57f0213452be0d51e047ec5c82c7cfdb7690516c9f07ecdbb03a7f9c0ced86c5c91d86ce73b1ec90ecef187dae70ed1179c5a0416221505c8cb9a91a2f6cc5a7bc40d27eb967b1d641314a419bf00d5660c1876b74a99768b4838c9a36a2bf8904930de34a00d637be8450f0bfe2074f94d80280ff11d71f9581f60824221b2742a4c331b742f421ff79585453e0cadd9090d61dcc18bf346ab3671b46337b8e099bf486fc3bfb41dd80150ae20bebbfb98e90b34170b2cc186617f4c603b5087057ed2803cb68ce28dc3501416e4a17d368e6024e58b103d52057cedc0a8782b5f3d99c37df83eef2b82637b1bbfc0f71c75491fcac80e79843266bc50b9ab5998bd91a22daf76e1bfa8a2d28a46dd29202e5a4493e3ab203fa6fe0066300f6347649a4494b5eee558850d9ce38b7d1ec34574959849b6705e65ee5eb9500b40269f361972281c3a47db5e95819ad51c8598ecc29e3689489dadf7e85e25c598f449861ed18a378fc0d8340ae36327c86330a9361582152361f88474b1c85ddedb33295fbc23391164755a61ddfb3264394ab843d073cf473c992d4983715eac9d6e7e4391524fa1a1f04da32c71db1cf285b552c41b59e18111384587a2cc84007e42f5409d4948daed226baf4fceb9f13727c658e3bfbee446338cb14590d3591f5a06b0cae08001dd5a7497ad121ae87c81bf31fbda703439d7e6e153bcdb889f0c49dbc234ce028b413df21b3863d69d813df93fe21040928eab034623e17a35cb0af777a521830c4e577b58a8dbdd15ee24bfc9d68b54ed4fa5ef63fcb5422e5d9d2803ca7e62b54722aaa476dc84a49c6f5fe64d19dd514f44c5e93f551e98dd18a274558ec6637623655bdc2f9d0a12769d9f463a36ba9903e250c0b8a1cf18e554df90e415e9d36b8283dff938e04a4c75c1eb05abf617512d3877f67161354ebfedd8e35be1b3ed4959d86bc41426c9dd08de97da6a94b8ce2501254dd1ba565f28974227911c3666fb9c1a05298e3312b197a2683a6f648c62c4f80524539bf69a02b754698c72995e1e99e0bbfb1b91a3118bb77391bdab508eacd931eb457ee518b27185e7f8a49c4e54c494d423550883bb3082d7a17942a33de2a81dbdf386216fd390a6a48fa5c45a70da5ab09607b5f82600f90efff383071977d86b1dfdb9010eb8696b65af5b182a8c4d2765367c4fb0c97197dc55fd0f9a1547c91fd6c80dc27f23da8aa312608478dc70fb4d949434c563dc5475bf2494374fa62b8b849fc043577c8f5f6f83fd1665b02e0b50ef4a04478dbc8dc405996ef9bd7591fc33e1098b99ec0354fc8f5e23d4854835759053ca12120ff1ccb54a32f75314979f700e74781bf6ed6556f707d0d8754cf93aac06ceffc3da784d2f894a574cc2fc17c39c4d60bfc6fe43be68230fc6e13f5082b20fe3f80abc085fff8d6ee045b27c0416be2f876d81318e83b061d7c79ac4aacb6f9a71204fd3068914c19f515ea853ed87f047fb9475096f75a1b34406b6071d57ea20781e79cbe00a7b7688b6d5817491bc120d6c849a360a67f86dee3be59f4abe228ae4b837d629ea9a057edaf20663b314b9d3ad1b52400801e6089f512b2621ad858c954f83d4e8a16f18a0821cdf35fc519d39835c0e700217d88d0fe946e08b15b2b25ab38db3f989b3a49127f131326948aa35dd59a4c2abd984304d51822b5873956c76c648dad6fcd807762f6eef3e8fd7c7c1cf969a4fce590a1257c9dcae8f346fdc5caf685962e20e188852debd1258987bfe0b43516df22f15ca86d8b6385f780c2711e7a93d21046ffc69bc63ced02f28dc964c781f1c11bde5e331acba52ece4e3d9f819ef2ce1e1316b378b2578613a9bc55941b99818b87ae9b53f01b9c9a56510a36a996f4279b6b508ba59da75e772ae8d023f29673f20e24abee69d70e0b5ef7f", 0x800}], 0x2, &(0x7f0000004080)=ANY=[@ANYBLOB="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"], 0x1378}, 0x4044) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0xde, 0x0, 0x799, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x4509, 0xff, 0x0, 0x0, 0x7d6f, 0x1ba40360}, 0x0, 0x7, r0, 0x9) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0xfffffffffffffe0c, &(0x7f0000000680)=[{&(0x7f0000005600)=""/102380, 0x1731f}], 0x1, 0x0, 0x60}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa278b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000a80)={&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, 0x0, 0x0, &(0x7f0000000980)=""/196, 0xc4}, 0x140) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b0b, &(0x7f0000000400)='wlan1\x00\x1f\x1a\xec\xb5\x12\x03F\xd9U\x1c\x00\x00U\x00\x00\x00\x00\x00\x00\xf2-\xda\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b8\x84c\xf2\xc2\fpp.{\xb2\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\x05\x00^9P\xee\x8aG\xdd2\x9d\xe9\x00\x00\x00)-v\x91WQ\xfd\xdcSE;\x9d\xc3\xc1LO\xf1\xf7\xbe\xdc\xd0Y\a\xe4\xcd\xdf\x11\r\x99\xfe#N\a\xc6\xf3I\x89tZU#Ifx\xc3\xeb\xbe\xb6efpM\xc8\xaa\x88BA\n\xd1\x16\x81\x96ZI\xb2\xb5\xf2\xe6\xf5\x00\x92\r\xf6\x8d\x95\x9db\xe2\xc4\xad\xcb>\x890xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x2e, 0x0, &(0x7f0000000580)) 00:24:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, 0x0, 0x0, 0x40002000, &(0x7f0000004b40)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006980)=[{{&(0x7f0000004d00)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000004d80)=""/122, 0x7a}, {&(0x7f0000004e00)=""/135, 0x87}, {&(0x7f0000004ec0)=""/166, 0xa6}, {&(0x7f0000004f80)=""/51, 0x33}], 0x4, &(0x7f0000005000)=""/111, 0x6f}, 0x10000}, {{&(0x7f0000005080)=@nfc_llcp, 0x80, &(0x7f0000006680)=[{&(0x7f0000005100)=""/4096, 0x1000}, {&(0x7f0000006100)=""/246, 0xf6}, {&(0x7f0000006200)=""/163, 0xa3}, {&(0x7f00000062c0)=""/61, 0x3d}, {&(0x7f0000006300)=""/73, 0x49}, {&(0x7f0000006380)=""/103, 0x67}, {&(0x7f0000006400)=""/109, 0x6d}, {&(0x7f0000006480)=""/198, 0xc6}, {&(0x7f0000006580)=""/237, 0xed}], 0x9, &(0x7f0000006740)=""/83, 0x53}, 0x1}, {{0x0, 0x0, &(0x7f0000006900)=[{&(0x7f00000067c0)=""/240, 0xf0}, {&(0x7f00000068c0)=""/35, 0x23}], 0x2, &(0x7f0000006940)=""/19, 0x13}, 0x4}], 0x3, 0x40000042, &(0x7f0000006a40)={0x77359400}) recvmmsg(r0, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000006f00)=[{&(0x7f0000006a80)=""/195, 0xc3}, {&(0x7f0000006b80)=""/201, 0xc9}, {&(0x7f0000006c80)=""/217, 0xd9}, {&(0x7f0000006d80)=""/96, 0x60}, {&(0x7f0000006e00)=""/125, 0x7d}, {&(0x7f0000006e80)=""/86, 0x56}], 0x6}, 0x401}, {{&(0x7f0000006f80)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000007300)=[{&(0x7f0000007000)=""/65, 0x41}, {&(0x7f0000007080)=""/205, 0xcd}, {&(0x7f0000007180)=""/207, 0xcf}, {&(0x7f0000007280)=""/104, 0x68}], 0x4, &(0x7f0000007340)=""/215, 0xd7}, 0x800}], 0x2, 0x40000100, &(0x7f00000074c0)={0x77359400}) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000007500)={@none, 0x1}) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000007540)=0xd7a, 0x4) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) recvmmsg(r2, &(0x7f0000007d40)=[{{&(0x7f0000007580)=@x25, 0x80, &(0x7f0000007c00)=[{&(0x7f0000007600)=""/202, 0xca}, {&(0x7f0000007700)=""/120, 0x78}, {&(0x7f0000007780)=""/98, 0x62}, {&(0x7f0000007800)=""/187, 0xbb}, {&(0x7f00000078c0)=""/91, 0x5b}, {&(0x7f0000007940)=""/220, 0xdc}, {&(0x7f0000007a40)=""/163, 0xa3}, {&(0x7f0000007b00)=""/13, 0xd}, {&(0x7f0000007b40)=""/173, 0xad}], 0x9, &(0x7f0000007cc0)=""/111, 0x6f}, 0x7}], 0x1, 0x0, &(0x7f0000007d80)={0x77359400}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000007e40)={0x0, @l2={0x1f, 0x88, @any, 0x6, 0x3}, @l2tp={0x2, 0x0, @private=0xa010102, 0x4}, @ax25={0x3, @null, 0x7}, 0x9, 0x0, 0x0, 0x0, 0x7fd, &(0x7f0000007e00)='ip6gre0\x00', 0x5, 0x80000000, 0x7}) openat$bsg(0xffffffffffffff9c, &(0x7f0000007ec0), 0x40, 0x0) 00:24:29 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0xef, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x8}}]}}}]}}]}}, 0x0) 00:24:29 executing program 2: io_setup(0x1f, &(0x7f0000000100)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x3938700}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x676f]}, 0x8}) 00:24:29 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wlan1\x00'}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000240)) 00:24:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 00:24:29 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x48) [ 2863.674753][ T9530] usb 1-1: new high-speed USB device number 7 using dummy_hcd 00:24:30 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x38, 0x0, &(0x7f0000000580)) 00:24:30 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:24:30 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x2, &(0x7f0000000000)=@raw=[@exit, @func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:24:30 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x48) [ 2863.935655][ T9530] usb 1-1: Using ep0 maxpacket: 8 [ 2864.079292][ T9530] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 00:24:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)={0x14, r1, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) 00:24:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000001a00)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x20}}, 0x0) [ 2864.286207][ T9530] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2864.295601][ T9530] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2864.303774][ T9530] usb 1-1: Product: syz [ 2864.308328][ T9530] usb 1-1: Manufacturer: syz [ 2864.313071][ T9530] usb 1-1: SerialNumber: syz 00:24:30 executing program 3: lstat(&(0x7f00000006c0)='./file0\x00', 0x0) [ 2864.408532][T19065] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2864.680813][T19097] validate_nla: 12 callbacks suppressed [ 2864.680939][T19097] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 2864.699803][T19098] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2864.709677][T19098] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:24:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) dup3(r3, r1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4008ae89, &(0x7f0000000640)={"03000000dd245c8434000000c9c8dc1964325fa96fa42b76700000402bec0ba41f0125003a40c8a4ce0000003b00041f01ffff80003c5ca2c2000000ee377abaece6b88378e3d63a03000040361d264ffa8b46485f02baee010100c04252066178868d1ef4b5ffff5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525a7e8c499a573577736800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa006a832d309fcda5bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478fbe65449b404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df1e7c9c71bc08a282fc2c142856b5569aff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684364673dcfa9235ea5a2ff23c4bb5c5acb2e8976dcac779ff000000000000003d185afe28b774b99d38c90937428617de4cdd6f53c419ce31054182fd898af706f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e9605ab8c3c43840abd17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba16f70f558b2246ad95ccf7d3f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3efb254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f47692613e28387e955722908dd88b56163be8312ff47c5b6f070072975af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8fdcda85ce975ec1381b1cec6ddaa76e186719d81916430000000000edffffffffffffff00"}) 00:24:31 executing program 2: syz_genetlink_get_family_id$wireguard(&(0x7f0000002600), 0xffffffffffffffff) 00:24:31 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x48) 00:24:31 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8020, 0x0) [ 2864.826322][ T7106] usb 1-1: USB disconnect, device number 7 [ 2864.918397][T19111] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2864.928388][T19111] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:24:31 executing program 1: add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 00:24:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x2c, 0xe, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x22, 0x1, "13607dc686a34d3e05bdec1b9753e3df64a5c03e78b4d420b0b085f79ee2"}}]}]}, 0x40}}, 0x0) 00:24:31 executing program 5: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x8}}]}}}]}}]}}, 0x0) 00:24:31 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x48) 00:24:32 executing program 1: add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 00:24:32 executing program 0: syz_open_dev$hiddev(&(0x7f0000000680), 0x0, 0x80040) 00:24:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x2c, 0xe, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x22, 0x1, "13607dc686a34d3e05bdec1b9753e3df64a5c03e78b4d420b0b085f79ee2"}}]}]}, 0x40}}, 0x0) [ 2866.123747][T31817] usb 6-1: new high-speed USB device number 6 using dummy_hcd 00:24:32 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x48) [ 2866.458669][T31817] usb 6-1: Using ep0 maxpacket: 8 [ 2866.629832][T31817] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 00:24:33 executing program 0: fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x145, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) syz_open_pts(r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1) 00:24:33 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x48) 00:24:33 executing program 1: add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) [ 2866.959060][T31817] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2866.968396][T31817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2866.977167][T31817] usb 6-1: Product: syz [ 2866.981453][T31817] usb 6-1: Manufacturer: syz [ 2866.986380][T31817] usb 6-1: SerialNumber: syz [ 2867.060903][T19119] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. [ 2867.137774][T19145] raw-gadget gadget: fail, usb_ep_enable returned -22 00:24:33 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8020, 0x0) 00:24:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x2c, 0xe, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x22, 0x1, "13607dc686a34d3e05bdec1b9753e3df64a5c03e78b4d420b0b085f79ee2"}}]}]}, 0x40}}, 0x0) 00:24:33 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x48) 00:24:34 executing program 5: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x8}}]}}}]}}]}}, 0x0) 00:24:34 executing program 1: add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) [ 2867.675336][ T7106] usb 6-1: USB disconnect, device number 6 00:24:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x2c, 0xe, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x22, 0x1, "13607dc686a34d3e05bdec1b9753e3df64a5c03e78b4d420b0b085f79ee2"}}]}]}, 0x40}}, 0x0) [ 2867.963853][T19180] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. 00:24:34 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8020, 0x0) 00:24:34 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x48) 00:24:34 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x0) connect$netlink(r0, 0x0, 0x0) [ 2868.504458][T31817] usb 6-1: new high-speed USB device number 7 using dummy_hcd 00:24:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) dup3(r3, r1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4008ae89, &(0x7f0000000640)={"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"}) 00:24:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getpeername(r0, &(0x7f00000001c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000240)=0x80) [ 2868.612012][T19193] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. [ 2868.766154][T31817] usb 6-1: Using ep0 maxpacket: 8 00:24:35 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 00:24:35 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8020, 0x0) 00:24:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x18, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x10, 0x1, "13607dc686a34d3e05bdec1b"}}]}]}, 0x2c}}, 0x0) [ 2868.885726][T31817] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 00:24:35 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) [ 2869.115698][T31817] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2869.125165][T31817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2869.133307][T31817] usb 6-1: Product: syz [ 2869.137837][T31817] usb 6-1: Manufacturer: syz [ 2869.142540][T31817] usb 6-1: SerialNumber: syz [ 2869.350527][T19186] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2869.360393][T19223] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. 00:24:36 executing program 5: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x8}}]}}}]}}]}}, 0x0) 00:24:36 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x30, 0x0, &(0x7f0000000580)) [ 2869.931815][T23538] usb 6-1: USB disconnect, device number 7 00:24:36 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 00:24:36 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x10, &(0x7f0000000540)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x89, &(0x7f0000000300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:24:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000880)=@buf={0x50, &(0x7f00000007c0)="1c9c1e96c032bcad2c0e53b4cf9a3ad94c2412e34884385d4d7b5184e89c77475a544786ed199c20301c748be89c9afa995e6c53e8fc347fd29ad6f328c66aec18b157a078c534ef484445471ed90116"}) 00:24:36 executing program 3: syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0) 00:24:36 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 00:24:36 executing program 0: io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0) 00:24:36 executing program 2: statx(0xffffffffffffffff, &(0x7f0000003040)='./file0\x00', 0x0, 0x0, 0x0) 00:24:36 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x9, 0x0, &(0x7f0000000580)) 00:24:37 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) [ 2871.009863][ T7106] usb 6-1: new high-speed USB device number 8 using dummy_hcd 00:24:37 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=@raw=[@alu, @call, @exit], &(0x7f0000000040)='syzkaller\x00', 0x40, 0x9f, &(0x7f0000000080)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2871.264635][ T7106] usb 6-1: Using ep0 maxpacket: 8 [ 2871.394613][ T7106] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2871.575959][ T7106] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2871.585348][ T7106] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2871.593500][ T7106] usb 6-1: Product: syz [ 2871.598116][ T7106] usb 6-1: Manufacturer: syz [ 2871.602813][ T7106] usb 6-1: SerialNumber: syz [ 2871.668743][T19247] raw-gadget gadget: fail, usb_ep_enable returned -22 00:24:38 executing program 5: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x8}}]}}}]}}]}}, 0x0) 00:24:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 00:24:38 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x48) 00:24:38 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) 00:24:38 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x10, 0x0, &(0x7f0000000580)) 00:24:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x6, 0x4) [ 2872.001360][ T7106] usb 6-1: USB disconnect, device number 8 00:24:38 executing program 0: clock_getres(0x0, &(0x7f0000000940)) 00:24:38 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x48) 00:24:38 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x31, 0x0, &(0x7f0000000580)) 00:24:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) fchown(r0, 0xee01, 0xffffffffffffffff) 00:24:38 executing program 3: r0 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x4004556e, 0x4000d) [ 2872.934631][T23538] usb 6-1: new high-speed USB device number 9 using dummy_hcd 00:24:39 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x1, 0x0, &(0x7f0000000580)) [ 2873.186556][T23538] usb 6-1: Using ep0 maxpacket: 8 [ 2873.316469][T23538] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2873.528009][T23538] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2873.537487][T23538] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2873.546189][T23538] usb 6-1: Product: syz [ 2873.550488][T23538] usb 6-1: Manufacturer: syz [ 2873.555362][T23538] usb 6-1: SerialNumber: syz [ 2873.649994][T19283] raw-gadget gadget: fail, usb_ep_enable returned -22 00:24:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b49, &(0x7f0000000040)) 00:24:40 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x48) 00:24:40 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000100)) 00:24:40 executing program 1: sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, 0x0, 0x0) 00:24:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="18190000", @ANYBLOB="000000000000000085"], &(0x7f0000000100)='GPL\x00', 0x1, 0x89, &(0x7f0000000300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2873.929328][T23538] usb 6-1: USB disconnect, device number 9 00:24:40 executing program 5: ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "ebe033f6ff892deb"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) 00:24:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x24}}, 0x0) 00:24:40 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 00:24:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000006a40)={0x77359400}) 00:24:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)) signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) eventfd2(0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xd, 0xffffffffffffff81}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000200)={0x60000008}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) sched_setattr(r1, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x0) 00:24:40 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0xa, 0x0, &(0x7f0000000580)) 00:24:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f0000007440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:24:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x28}}, 0x0) [ 2874.892406][ T34] audit: type=1326 audit(1625790281.186:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19324 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=40000003 syscall=403 compat=1 ip=0xf7fdb549 code=0x0 00:24:41 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 00:24:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newroute={0x1c, 0x18, 0x0, 0x0, 0x0, {0xa, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800013b"], 0x1c}}, 0x0) 00:24:41 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x28, 0x0, &(0x7f0000000580)) [ 2875.378040][T19348] IPv6: Can't replace route, no match found 00:24:41 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x27, 0x0, &(0x7f0000000580)) [ 2875.420822][T19349] IPv6: Can't replace route, no match found 00:24:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newroute={0x1c, 0x18, 0x0, 0x0, 0x0, {0xa, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800013b"], 0x1c}}, 0x0) 00:24:41 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000027a40)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 00:24:41 executing program 0: socketpair(0x5, 0x0, 0x0, &(0x7f00000003c0)) [ 2875.677545][ T34] audit: type=1326 audit(1625790281.976:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19324 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=40000003 syscall=403 compat=1 ip=0xf7fdb549 code=0x0 [ 2875.906376][T19367] IPv6: Can't replace route, no match found 00:24:42 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) 00:24:42 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000004b40)) 00:24:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newroute={0x1c, 0x18, 0x0, 0x0, 0x0, {0xa, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800013b"], 0x1c}}, 0x0) 00:24:42 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 00:24:42 executing program 4: add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffffb) 00:24:42 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[], [{@euid_gt}]}) [ 2876.497910][T19380] IPv6: Can't replace route, no match found 00:24:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0x4) 00:24:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newroute={0x1c, 0x18, 0x0, 0x0, 0x0, {0xa, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800013b"], 0x1c}}, 0x0) 00:24:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008ae88, &(0x7f0000000640)={"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"}) 00:24:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)={0x18, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4, 0xe}]}, 0x18}}, 0x0) 00:24:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000002580)}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000140)={[{@test_dummy_encryption}, {@noacl}, {@usrjquota}]}) chdir(&(0x7f0000000040)='./file0\x00') [ 2877.008217][T19393] IPv6: Can't replace route, no match found 00:24:43 executing program 0: socketpair(0x35, 0x0, 0x0, &(0x7f0000000000)) 00:24:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) dup3(r3, r1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4008ae89, &(0x7f0000000640)={"03000000dd245c8434000000c9c8dc1964325fa96fa42b76700000402bec0ba41f0125003a40c8a4221001c03b00041f01ffff80003c5ca2c2000000ee377abaece6b88378e3d63a03000040361d264ffa8b46485f02baee010100c04252066178868d1ef4b5ffff5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525a7e8c499a573577736800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa006a832d309fcda5bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478fbe65449b404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df1e7c9c71bc08a282fc2c142856b5569aff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684364673dcfa9235ea5a2ff23c4bb5c5acb2e8976dcac779ff000000000000003d185afe28b774b99d38c90937428617de4cdd6f53c419ce31054182fd898af706f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e9605ab8c3c43840abd17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba16f70f558b2246ad95ccf7d3f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3efb254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f47692613e28387e955722908dd88b56163be8312ff47c5b6f070072975af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8fdcda85ce975ec1381b1cec6ddaa76e186719d81916430000000000edffffffffffffff00"}) 00:24:43 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/firmware', 0x42, 0x0) [ 2877.353989][T19397] kvm [19396]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x40000034 [ 2877.455830][T19404] ===================================================== [ 2877.462789][T19404] BUG: KMSAN: uninit-value in validate_beacon_head+0x502/0x5f0 [ 2877.464113][T19404] CPU: 0 PID: 19404 Comm: syz-executor.4 Tainted: G W 5.12.0-rc6-syzkaller #0 [ 2877.464113][T19404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2877.464113][T19404] Call Trace: [ 2877.464113][T19404] dump_stack+0x24c/0x2e0 [ 2877.464113][T19404] kmsan_report+0xfb/0x1e0 [ 2877.498930][T19404] __msan_warning+0x5c/0xa0 [ 2877.498930][T19404] validate_beacon_head+0x502/0x5f0 [ 2877.498930][T19404] ? nl80211_exit+0x50/0x50 [ 2877.498930][T19404] __nla_validate_parse+0x20fe/0x4ab0 [ 2877.498930][T19404] __nla_parse+0x141/0x150 [ 2877.498930][T19404] genl_family_rcv_msg_attrs_parse+0x429/0x5b0 [ 2877.498930][T19404] ? nl80211_get_coalesce+0x17d0/0x17d0 [ 2877.498930][T19404] genl_rcv_msg+0xbd6/0x1610 [ 2877.498930][T19404] ? nl80211_get_coalesce+0x17d0/0x17d0 [ 2877.498930][T19404] ? kmsan_set_origin_checked+0xa2/0x100 [ 2877.498930][T19404] ? kmsan_get_metadata+0x116/0x180 [ 2877.498930][T19404] netlink_rcv_skb+0x6fa/0x810 [ 2877.498930][T19404] ? genl_bind+0x4b0/0x4b0 [ 2877.498930][T19404] genl_rcv+0x63/0x80 [ 2877.498930][T19404] netlink_unicast+0x11d6/0x14a0 [ 2877.498930][T19404] ? genl_pernet_exit+0x90/0x90 [ 2877.582275][T19404] netlink_sendmsg+0x1740/0x1840 [ 2877.582275][T19404] ____sys_sendmsg+0xcfc/0x12f0 [ 2877.582275][T19404] ? netlink_getsockopt+0x1830/0x1830 [ 2877.582275][T19404] __sys_sendmsg+0x714/0x830 [ 2877.582275][T19404] ? kmsan_copy_to_user+0x9c/0xb0 [ 2877.582275][T19404] ? _copy_to_user+0x1d2/0x270 [ 2877.582275][T19404] ? kmsan_get_metadata+0x116/0x180 [ 2877.582275][T19404] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2877.582275][T19404] ? kmsan_get_metadata+0x116/0x180 [ 2877.624397][T19404] ? kmsan_get_metadata+0x116/0x180 [ 2877.624397][T19404] __se_compat_sys_sendmsg+0xa7/0xc0 [ 2877.637768][T19404] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 2877.637768][T19404] __do_fast_syscall_32+0x127/0x180 [ 2877.637768][T19404] do_fast_syscall_32+0x77/0xd0 [ 2877.637768][T19404] do_SYSENTER_32+0x73/0x90 [ 2877.637768][T19404] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2877.637768][T19404] RIP: 0023:0xf7f74549 [ 2877.637768][T19404] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2877.689614][T19404] RSP: 002b:00000000f556e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2877.689614][T19404] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 2877.689614][T19404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2877.714373][T19404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2877.714373][T19404] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2877.714373][T19404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2877.714373][T19404] [ 2877.714373][T19404] Uninit was created at: [ 2877.714373][T19404] kmsan_internal_poison_shadow+0x66/0xd0 [ 2877.714373][T19404] kmsan_slab_alloc+0x8e/0xe0 [ 2877.714373][T19404] __kmalloc_node_track_caller+0xa4f/0x1470 [ 2877.714373][T19404] __alloc_skb+0x4dd/0xe90 [ 2877.714373][T19404] netlink_sendmsg+0xdbc/0x1840 [ 2877.714373][T19404] ____sys_sendmsg+0xcfc/0x12f0 [ 2877.714373][T19404] __sys_sendmsg+0x714/0x830 [ 2877.714373][T19404] __se_compat_sys_sendmsg+0xa7/0xc0 [ 2877.714373][T19404] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 2877.790446][T19404] __do_fast_syscall_32+0x127/0x180 [ 2877.790446][T19404] do_fast_syscall_32+0x77/0xd0 [ 2877.790446][T19404] do_SYSENTER_32+0x73/0x90 00:24:44 executing program 2: io_setup(0xff, &(0x7f00000003c0)=0x0) io_submit(r0, 0x1, &(0x7f00000014c0)=[0x0]) [ 2877.805232][T19404] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2877.805232][T19404] ===================================================== [ 2877.805232][T19404] Disabling lock debugging due to kernel taint [ 2877.805232][T19404] Kernel panic - not syncing: panic_on_kmsan set ... [ 2877.805232][T19404] CPU: 0 PID: 19404 Comm: syz-executor.4 Tainted: G B W 5.12.0-rc6-syzkaller #0 [ 2877.834513][T19404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2877.834513][T19404] Call Trace: [ 2877.854306][T19404] dump_stack+0x24c/0x2e0 [ 2877.854306][T19404] panic+0x4c6/0xea7 [ 2877.854306][T19404] ? add_taint+0x17c/0x210 [ 2877.864370][T19404] kmsan_report+0x1de/0x1e0 [ 2877.864370][T19404] __msan_warning+0x5c/0xa0 [ 2877.864370][T19404] validate_beacon_head+0x502/0x5f0 [ 2877.864370][T19404] ? nl80211_exit+0x50/0x50 [ 2877.864370][T19404] __nla_validate_parse+0x20fe/0x4ab0 [ 2877.864370][T19404] __nla_parse+0x141/0x150 [ 2877.864370][T19404] genl_family_rcv_msg_attrs_parse+0x429/0x5b0 [ 2877.864370][T19404] ? nl80211_get_coalesce+0x17d0/0x17d0 [ 2877.864370][T19404] genl_rcv_msg+0xbd6/0x1610 [ 2877.864370][T19404] ? nl80211_get_coalesce+0x17d0/0x17d0 [ 2877.864370][T19404] ? kmsan_set_origin_checked+0xa2/0x100 [ 2877.864370][T19404] ? kmsan_get_metadata+0x116/0x180 [ 2877.864370][T19404] netlink_rcv_skb+0x6fa/0x810 [ 2877.934298][T19404] ? genl_bind+0x4b0/0x4b0 [ 2877.934298][T19404] genl_rcv+0x63/0x80 [ 2877.934298][T19404] netlink_unicast+0x11d6/0x14a0 [ 2877.934298][T19404] ? genl_pernet_exit+0x90/0x90 [ 2877.934298][T19404] netlink_sendmsg+0x1740/0x1840 [ 2877.934298][T19404] ____sys_sendmsg+0xcfc/0x12f0 [ 2877.934298][T19404] ? netlink_getsockopt+0x1830/0x1830 [ 2877.934298][T19404] __sys_sendmsg+0x714/0x830 [ 2877.934298][T19404] ? kmsan_copy_to_user+0x9c/0xb0 [ 2877.934298][T19404] ? _copy_to_user+0x1d2/0x270 [ 2877.934298][T19404] ? kmsan_get_metadata+0x116/0x180 [ 2877.934298][T19404] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2877.934298][T19404] ? kmsan_get_metadata+0x116/0x180 [ 2877.934298][T19404] ? kmsan_get_metadata+0x116/0x180 [ 2877.934298][T19404] __se_compat_sys_sendmsg+0xa7/0xc0 [ 2877.934298][T19404] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 2877.934298][T19404] __do_fast_syscall_32+0x127/0x180 [ 2877.934298][T19404] do_fast_syscall_32+0x77/0xd0 [ 2877.934298][T19404] do_SYSENTER_32+0x73/0x90 [ 2877.934298][T19404] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2877.934298][T19404] RIP: 0023:0xf7f74549 [ 2877.934298][T19404] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2877.934298][T19404] RSP: 002b:00000000f556e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2877.934298][T19404] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 2877.934298][T19404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2877.934298][T19404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2877.934298][T19404] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2877.934298][T19404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2877.934298][T19404] Kernel Offset: disabled [ 2877.934298][T19404] Rebooting in 86400 seconds..